Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F091C1A6583F3DDBFAC5985B080404CE378B2A98.cer
File:                     F091C1A6583F3DDBFAC5985B080404CE378B2A98.cer (raw, json)
Hash identifier:          a/Ci9AVDs5C6dw/Bu7pyFtgYCemFYcnhp74heswXPiY=
Subject key identifier:   F0:91:C1:A6:58:3F:3D:DB:FA:C5:98:5B:08:04:04:CE:37:8B:2A:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C5F78774F9971317DAAFDD153D3DBCCA3601EFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/F091C1A6583F3DDBFAC5985B080404CE378B2A98.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Mar 2023 16:36:23 +0000
Certificate not after:    Tue 19 Mar 2024 16:41:23 +0000
Subordinate resources:    AS: 271267
                          IP: 168.197.180.0/22
                          IP: 2804:78d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5f:78:77:4f:99:71:31:7d:aa:fd:d1:53:d3:db:cc:a3:60:1e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 16:36:23 2023 GMT
            Not After : Mar 19 16:41:23 2024 GMT
        Subject: CN=F091C1A6583F3DDBFAC5985B080404CE378B2A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:b2:1f:27:1c:f9:0b:76:d3:ad:f6:fd:5a:
                    05:dd:cd:dc:a9:23:10:ae:22:92:5d:06:cb:c9:a3:
                    f9:2a:10:80:88:e5:8c:2d:92:34:42:f7:95:ad:8a:
                    e7:b5:5b:c9:ca:10:0b:46:58:42:70:6f:8e:b6:7b:
                    9e:e2:fa:0b:5d:11:6d:b8:01:6e:c4:b3:4f:ba:c4:
                    01:0d:97:51:a8:a3:4d:49:36:61:aa:ea:be:92:76:
                    ac:c4:da:c3:10:03:34:82:f5:22:c0:53:73:aa:d1:
                    47:65:61:ed:8b:42:5d:cf:80:0a:91:eb:77:ec:04:
                    a8:a3:72:a3:cc:8d:21:0c:cd:c2:de:8b:fa:18:19:
                    77:a1:ca:51:e6:b1:0c:a6:91:31:e7:66:8f:9c:ca:
                    da:f6:94:1e:5f:91:44:a4:57:f1:5a:21:4b:7d:99:
                    cd:4e:37:0e:2e:f8:89:f4:2d:d3:f8:4a:86:5e:1c:
                    01:1a:ce:4d:94:5a:b5:cc:86:c4:e8:d5:3a:1e:66:
                    b5:85:b5:d9:47:bc:ee:87:5b:4b:57:1e:e7:26:d5:
                    9b:2f:a1:4b:a4:a3:6d:37:d1:6e:f2:73:f2:96:f7:
                    45:0e:78:6a:1b:a4:22:61:b8:4e:ac:12:c3:f4:93:
                    36:f4:30:69:e0:de:36:86:13:03:63:a3:ab:63:69:
                    32:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:91:C1:A6:58:3F:3D:DB:FA:C5:98:5B:08:04:04:CE:37:8B:2A:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/F091C1A6583F3DDBFAC5985B080404CE378B2A98.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.180.0/22
                IPv6:
                  2804:78d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271267

    Signature Algorithm: sha256WithRSAEncryption
         7a:a3:1d:96:81:da:3a:8b:af:90:40:4f:9a:e3:4b:b8:12:f8:
         cb:5e:7a:20:f1:90:09:13:21:82:ae:13:90:b8:d3:5e:0f:fa:
         fc:15:5f:b7:21:18:2a:bb:44:63:ba:b6:f9:81:42:49:22:78:
         fb:11:5a:68:36:97:70:1d:d6:44:9f:68:89:f9:17:56:c2:72:
         79:ee:65:e9:34:de:69:5b:7e:32:a1:c3:41:53:97:0e:1b:71:
         15:e6:f9:21:6d:c9:0e:94:5f:16:ee:29:19:a1:60:51:2a:8a:
         43:f9:2e:7f:c1:55:04:17:ea:b6:99:ab:3c:60:9f:eb:a8:9d:
         e0:9a:4a:48:48:02:e3:d1:65:0f:5d:6b:c3:1f:b2:3a:e7:cf:
         40:ca:b0:d4:0e:18:c6:97:ee:1a:6a:c9:8f:c2:28:c4:14:fd:
         76:07:13:ef:3a:19:8c:b2:f6:3d:3b:1a:43:eb:cd:84:c7:3a:
         b9:60:de:b6:b7:6c:13:43:8a:e8:ea:d1:76:55:05:c1:8e:a8:
         2f:8d:27:b9:82:32:1c:d3:6f:d1:87:f4:5a:91:bd:7e:9b:b9:
         de:a8:94:84:8d:61:52:85:ed:9c:8e:f4:92:59:b5:fc:59:c7:
         8c:00:26:af:a9:06:d6:c8:68:c9:8a:7e:ed:10:6e:52:a1:f4:
         ad:d9:7d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org