Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F04EC57968A4F67D8465C10AD47BB89D3CCAB4BA.cer
File:                     F04EC57968A4F67D8465C10AD47BB89D3CCAB4BA.cer (raw, json)
Hash identifier:          64NNG2YfmfDM0/EASP5YBrcvwJTYkebI2KbGoSnVK8E=
Subject key identifier:   F0:4E:C5:79:68:A4:F6:7D:84:65:C1:0A:D4:7B:B8:9D:3C:CA:B4:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6951C2F1A4A8FADE6AC9CE6CBA88AE92DB9080CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/F04EC57968A4F67D8465C10AD47BB89D3CCAB4BA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 15:00:49 +0000
Certificate not after:    Tue 09 Jul 2024 15:05:49 +0000
Subordinate resources:    AS: 265356
                          IP: 168.181.124.0/22
                          IP: 2804:2ea0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:51:c2:f1:a4:a8:fa:de:6a:c9:ce:6c:ba:88:ae:92:db:90:80:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 11 15:00:49 2023 GMT
            Not After : Jul  9 15:05:49 2024 GMT
        Subject: CN=F04EC57968A4F67D8465C10AD47BB89D3CCAB4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ca:f4:8e:6d:21:dd:c8:f5:c2:95:1d:72:b2:
                    eb:d0:e0:ea:df:58:4e:32:57:1b:37:9a:6e:ab:11:
                    60:3b:b7:1b:59:c8:de:7b:9b:ad:9b:89:70:ee:4e:
                    05:0c:9f:a9:7c:39:5e:cd:7a:51:28:58:55:27:73:
                    f2:ef:ea:68:fc:37:ae:0b:06:ec:fa:9b:96:dd:59:
                    aa:66:7b:e6:05:b3:1f:fa:a4:23:3d:6b:a0:d5:36:
                    e7:fc:ce:d1:b7:9e:04:97:7d:01:65:e0:67:b6:4e:
                    45:ce:33:b5:47:23:cd:1c:80:64:65:4a:62:11:f1:
                    7b:b5:f5:a6:61:90:17:45:33:61:1c:2c:0e:0f:ee:
                    47:ad:e6:48:d9:66:d6:a7:2c:5e:f0:cb:10:28:96:
                    a4:3a:8e:50:04:cf:f6:06:de:e3:f7:73:82:64:65:
                    46:b2:2f:49:c7:bc:d1:03:56:62:f3:93:5a:48:9c:
                    69:d2:a6:e5:2b:0c:0a:04:bb:85:fa:f1:05:e5:da:
                    b9:52:28:98:80:0e:03:a2:fa:c2:e6:d4:18:03:03:
                    95:a6:4c:a5:8e:ed:cf:36:f9:82:c3:ee:19:96:63:
                    b2:94:18:45:88:2d:5f:13:b6:be:fa:cd:9a:d4:b3:
                    16:b2:99:f5:c8:a2:9e:14:bc:b9:d4:af:43:a9:e3:
                    c1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:4E:C5:79:68:A4:F6:7D:84:65:C1:0A:D4:7B:B8:9D:3C:CA:B4:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/F04EC57968A4F67D8465C10AD47BB89D3CCAB4BA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.124.0/22
                IPv6:
                  2804:2ea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265356

    Signature Algorithm: sha256WithRSAEncryption
         59:5b:96:ba:e7:b9:3a:8c:17:1a:be:6f:52:c5:f0:99:44:62:
         a9:4f:6b:4f:cc:52:6b:8d:3d:b6:87:a1:3c:67:8f:a6:33:43:
         ed:33:df:54:08:bd:75:4a:f3:78:44:f0:e1:4d:42:e4:19:c8:
         f8:c6:be:09:3e:e1:b1:02:6d:09:32:0b:a1:19:00:7e:91:96:
         0e:bd:16:1a:91:ba:74:fd:2f:ed:83:05:97:46:98:ae:19:26:
         e3:72:29:0c:a9:e0:13:be:e2:a0:1f:45:fe:e4:e2:2e:27:ad:
         06:e4:df:d9:eb:fb:43:b0:a4:6d:54:56:a4:96:7a:7b:bc:f7:
         16:97:61:79:80:fd:0e:02:04:ca:ac:fb:75:1c:53:8b:38:4c:
         9f:fb:c2:1a:fb:45:23:e3:8a:03:c7:31:fb:ad:a5:c2:aa:26:
         07:ac:f6:30:6d:03:fa:1c:fd:ad:b8:07:d3:3e:b1:53:28:f9:
         0c:63:78:c3:6b:5a:7c:58:75:b4:41:b6:92:77:29:97:b1:b7:
         f0:93:6d:84:9d:7e:67:0c:45:64:ca:f2:34:35:17:1a:c8:0f:
         0a:95:f8:4c:cf:09:17:69:82:e0:58:4f:05:49:9f:65:51:ea:
         70:8a:e5:66:86:b0:e9:08:48:9a:25:2a:de:fb:a8:80:48:c4:
         9f:6e:42:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org