Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.cer
File:                     F11C1CC2AC17600695F88B435DCA3A62798480D8.cer (raw, json)
Hash identifier:          PkHBbnUD390SXS1RY3pYJjoAqUaIqhSJPTRWWOR8rE0=
Subject key identifier:   F1:1C:1C:C2:AC:17:60:06:95:F8:8B:43:5D:CA:3A:62:79:84:80:D8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       31F4D961F833848C3C05725DADE50005DF14D9C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 12:37:09 +0000
Certificate not after:    Tue 23 Jul 2024 12:42:09 +0000
Subordinate resources:    AS: 61942
                          IP: 45.239.100.0/22
                          IP: 131.255.68.0/22
                          IP: 168.196.72.0/22
                          IP: 168.205.40.0/22
                          IP: 170.233.164.0/22
                          IP: 170.239.8.0/22
                          IP: 192.12.112.0/22
                          IP: 201.131.68.0/22
                          IP: 2804:1898::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f4:d9:61:f8:33:84:8c:3c:05:72:5d:ad:e5:00:05:df:14:d9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 12:37:09 2023 GMT
            Not After : Jul 23 12:42:09 2024 GMT
        Subject: CN=F11C1CC2AC17600695F88B435DCA3A62798480D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:04:1f:d0:93:c5:b0:70:11:43:97:f6:aa:
                    55:29:d8:d2:1b:6f:50:0b:28:7e:a7:ad:d6:db:99:
                    6f:a8:be:fd:67:fd:52:8c:6c:32:15:26:c1:aa:af:
                    78:18:25:cf:04:87:07:12:94:ad:e4:8b:d6:49:72:
                    b2:b3:f5:b3:c1:5b:64:be:c5:c6:48:e0:f7:2f:f5:
                    f0:b8:a2:7e:ad:c7:d6:75:e8:ee:44:96:86:26:19:
                    c0:56:d7:59:3b:08:f5:22:13:f9:16:47:3c:55:47:
                    f2:a2:2a:fe:48:56:fb:23:12:39:d7:83:e1:61:3b:
                    f8:8f:74:7d:ef:30:43:54:77:31:82:f6:bf:72:63:
                    ca:18:64:48:e4:27:49:d3:d9:31:6e:de:34:f5:f7:
                    60:b4:99:77:db:7e:c3:88:12:36:c0:74:9a:8f:ef:
                    90:94:ea:16:82:c0:63:d7:2b:45:eb:fb:41:5c:59:
                    e5:3f:33:c8:3e:e2:61:df:16:11:4f:c2:20:d2:14:
                    cf:d6:ae:c5:da:d1:9f:97:72:03:d3:3e:f2:6d:b6:
                    a0:e1:1a:d3:bc:56:2e:cc:eb:a8:dc:cd:5a:e4:8a:
                    8a:1f:96:c8:41:0a:e5:08:e2:01:ab:f9:84:99:88:
                    24:8e:91:68:23:d4:95:28:1c:18:21:27:98:92:38:
                    70:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:1C:1C:C2:AC:17:60:06:95:F8:8B:43:5D:CA:3A:62:79:84:80:D8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.100.0/22
                  131.255.68.0/22
                  168.196.72.0/22
                  168.205.40.0/22
                  170.233.164.0/22
                  170.239.8.0/22
                  192.12.112.0/22
                  201.131.68.0/22
                IPv6:
                  2804:1898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61942

    Signature Algorithm: sha256WithRSAEncryption
         79:5f:60:f7:e4:d6:0e:70:21:a6:f1:3e:dd:f0:20:db:5f:5f:
         44:ff:ab:e3:33:78:dd:ad:4b:90:ad:f5:26:0e:aa:6d:cb:73:
         c3:31:32:7d:1b:ab:5d:fe:0f:cd:77:33:62:7f:46:ad:36:9a:
         f6:61:10:70:f2:2c:b4:f3:90:59:e7:f0:aa:d4:50:42:5f:b0:
         75:70:47:a0:57:d1:8d:be:ad:6d:8c:df:3e:72:3c:79:41:90:
         78:b5:e5:83:ed:2b:40:a8:38:7d:1d:2d:d5:f5:28:48:77:00:
         93:99:78:37:1d:9e:07:05:46:11:72:10:07:b8:d2:da:9d:1f:
         5f:45:eb:f0:1e:3f:84:7c:56:d7:8a:32:f7:f2:94:c6:15:25:
         9f:aa:d9:f0:6e:99:38:6b:da:28:ab:3b:ba:b3:b0:d9:29:b4:
         1f:83:27:a3:05:65:04:10:6c:ba:8e:1f:fe:54:5c:8e:40:a5:
         52:1a:a7:f8:98:31:b2:d0:10:63:61:15:67:e0:f8:d9:ec:40:
         a3:9b:b9:e8:e2:f5:19:8c:a3:2d:19:e0:30:f1:10:b8:d4:ca:
         e5:7d:f4:e5:fd:18:5f:82:9a:b2:6b:8e:44:3f:4e:1e:41:b6:
         9e:01:1c:b5:0d:bc:0d:f4:d4:df:85:6e:57:24:c3:3e:10:82:
         5a:f1:b8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org