Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F0FDD9B1C7A2F0700C96F302D518DDD400BE1BFD.cer
File:                     F0FDD9B1C7A2F0700C96F302D518DDD400BE1BFD.cer (raw, json)
Hash identifier:          WtohuwmxBcvGbBCsz0WCG9RWeXUwyQY7Uc6WLN4EMAg=
Subject key identifier:   F0:FD:D9:B1:C7:A2:F0:70:0C:96:F3:02:D5:18:DD:D4:00:BE:1B:FD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3213CDB26F1FE006735F26C81B2A7F9DC72F7AAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/F0FDD9B1C7A2F0700C96F302D518DDD400BE1BFD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 09:48:08 +0000
Certificate not after:    Thu 23 May 2024 09:53:08 +0000
Subordinate resources:    AS: 265232
                          IP: 168.0.100.0/22
                          IP: 2804:2ca4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:13:cd:b2:6f:1f:e0:06:73:5f:26:c8:1b:2a:7f:9d:c7:2f:7a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 09:48:08 2023 GMT
            Not After : May 23 09:53:08 2024 GMT
        Subject: CN=F0FDD9B1C7A2F0700C96F302D518DDD400BE1BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:66:c4:9b:8e:6f:5d:76:83:82:b1:bd:76:
                    8d:4b:8a:72:ef:6d:20:14:9d:f3:29:9b:ea:de:61:
                    65:62:91:94:11:46:1f:e9:4d:85:03:1c:fa:57:af:
                    b1:8e:0d:5d:ce:f5:f9:db:81:4d:d9:86:cb:7d:8f:
                    38:4c:21:40:b0:90:7a:9c:4b:47:f3:20:33:92:f9:
                    da:7a:40:3b:8b:44:57:5a:95:3a:fd:e7:a8:d9:55:
                    2e:1f:71:bd:42:ea:a3:8e:54:c7:e1:24:f4:d5:47:
                    45:bc:e9:42:f4:38:b1:ef:ba:2c:67:d8:a8:ce:c4:
                    e4:a6:c9:1f:86:bb:e3:c3:0e:93:43:14:39:41:3a:
                    c1:a5:28:d5:b3:d1:31:0a:74:d3:63:33:7b:51:a9:
                    9b:08:1a:43:17:7e:fe:ff:d4:59:3c:b1:0d:0c:55:
                    7c:ea:b1:e5:03:c5:10:55:ed:0e:2d:d1:6f:9e:39:
                    a3:9a:34:04:4f:c6:d0:7d:eb:77:35:92:b6:aa:1f:
                    09:aa:5d:56:0b:2e:03:41:66:6f:a0:cb:9f:2c:69:
                    0a:3f:bf:33:a3:47:7c:86:bf:bf:cc:f4:e1:79:61:
                    b7:5f:29:d9:dd:fc:43:1b:8d:e9:4a:f4:d4:39:b0:
                    da:9e:10:57:b8:11:7e:07:0f:14:68:b6:75:83:97:
                    14:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:FD:D9:B1:C7:A2:F0:70:0C:96:F3:02:D5:18:DD:D4:00:BE:1B:FD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/F0FDD9B1C7A2F0700C96F302D518DDD400BE1BFD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.100.0/22
                IPv6:
                  2804:2ca4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265232

    Signature Algorithm: sha256WithRSAEncryption
         0b:a2:f8:46:c2:ac:36:44:98:6f:43:b0:da:0d:1c:42:a6:bb:
         12:99:4d:dc:45:2c:57:b2:3e:b1:d7:e1:cf:77:a2:60:ea:25:
         49:cd:bc:84:bb:02:54:84:80:5f:9b:ca:72:b1:3c:bb:a7:08:
         22:94:9a:13:ab:bc:83:10:4b:da:67:ad:34:23:6b:dc:f9:4b:
         8d:c3:db:15:2b:12:3a:40:7c:4c:6b:77:4f:61:3f:7b:87:b7:
         6b:2f:9b:b1:2e:18:cc:37:0e:65:f2:ba:dd:aa:ab:de:0f:36:
         27:a8:00:67:24:23:66:fe:3e:2b:84:cc:f8:95:e8:8d:3e:3b:
         64:a8:d9:6c:d1:81:32:cf:e7:93:dc:65:22:15:ba:28:00:96:
         e7:5f:9b:8e:ff:6f:9a:b4:e4:ee:a8:7e:86:aa:e3:fb:5b:b0:
         e8:bb:9e:6b:d5:9a:ab:f0:d6:98:7d:5e:0f:d6:f0:3c:ae:9e:
         e6:88:a3:0a:45:a2:17:64:59:c1:e4:59:12:5b:f6:c3:56:fd:
         f3:02:b3:a4:f2:72:52:94:92:5c:b0:8e:d1:3b:2d:07:ae:2d:
         2a:d3:50:ed:78:17:09:84:ee:a8:02:e7:79:a5:48:92:69:ea:
         93:7e:e7:52:79:df:ec:8b:e3:df:c8:97:cd:4c:2b:47:8c:73:
         97:77:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org