Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F12330437029319CF92F0C3BFC9280B143870D6D.cer
File:                     F12330437029319CF92F0C3BFC9280B143870D6D.cer (raw, json)
Hash identifier:          ev5ZkSzd5ivPIPojqkEydsRd+ve/zSRdmQFdQdhDtns=
Subject key identifier:   F1:23:30:43:70:29:31:9C:F9:2F:0C:3B:FC:92:80:B1:43:87:0D:6D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B289B9E971A7DF4A282B9FEF81D03364202C4DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/F12330437029319CF92F0C3BFC9280B143870D6D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jan 2024 14:55:09 +0000
Certificate not after:    Tue 21 Jan 2025 15:00:09 +0000
Subordinate resources:    AS: 268726
                          IP: 45.171.184.0/22
                          IP: 2804:59cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:28:9b:9e:97:1a:7d:f4:a2:82:b9:fe:f8:1d:03:36:42:02:c4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 14:55:09 2024 GMT
            Not After : Jan 21 15:00:09 2025 GMT
        Subject: CN=F12330437029319CF92F0C3BFC9280B143870D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:25:ca:09:e3:d9:25:eb:3c:e8:4a:15:f9:
                    de:2f:57:1c:ea:99:77:f1:86:c9:0d:c5:32:c9:ae:
                    92:70:13:ad:19:7d:c7:91:a8:12:dd:c2:47:bf:8d:
                    b0:86:dc:02:76:1e:20:ef:81:4c:96:46:07:fc:7b:
                    ce:d3:bd:53:4a:91:bb:b6:82:31:f7:96:71:3f:68:
                    1e:e2:12:45:34:a7:34:b0:d0:39:19:31:e7:c8:fc:
                    59:0e:2c:0b:3a:35:72:d1:17:12:c1:e1:d8:2c:a8:
                    41:59:7c:9f:72:8a:98:f7:cf:5b:9d:85:16:25:28:
                    16:01:ec:e2:f6:6f:8a:bf:fc:b9:50:12:19:7b:50:
                    5b:c8:64:92:2b:c8:95:a3:aa:a6:cd:16:64:52:81:
                    fd:e2:1f:67:7b:1a:4a:c5:4b:a9:0b:37:42:58:aa:
                    99:2a:fa:84:43:20:b1:ef:c3:3c:1a:58:59:c3:2d:
                    5c:02:12:de:38:bb:2c:b3:39:7a:92:18:30:ab:dd:
                    a8:20:15:c7:13:1f:cd:21:c6:10:6d:87:ca:c8:6b:
                    bb:5e:90:0e:a8:38:36:00:f1:86:e1:87:dc:5f:bd:
                    48:6c:66:5a:00:86:ca:87:b2:b1:eb:a6:0e:ba:32:
                    dd:92:c2:a2:65:d2:9c:68:aa:e5:6c:6a:d6:8c:30:
                    46:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:23:30:43:70:29:31:9C:F9:2F:0C:3B:FC:92:80:B1:43:87:0D:6D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/F12330437029319CF92F0C3BFC9280B143870D6D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.184.0/22
                IPv6:
                  2804:59cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268726

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:9e:f0:54:db:b8:d7:11:53:4f:05:fc:f6:0f:ce:45:45:
         0d:40:f2:70:33:1c:60:fa:7a:de:06:7f:c4:da:07:7a:5b:b0:
         1a:00:e7:88:e5:35:b8:c6:81:5b:be:ee:a4:5b:c0:7d:ee:b4:
         48:b2:69:62:dc:62:98:d5:65:1d:43:6e:f3:4d:5e:ae:e5:38:
         7a:25:2c:e6:d7:35:0a:0c:27:82:77:3d:a3:c3:fb:e4:75:8d:
         ec:29:35:a8:28:27:27:36:82:24:94:34:46:5f:f7:52:67:7f:
         8c:c4:18:a1:eb:7e:30:c2:b8:fc:e0:27:4b:33:5b:6f:e8:91:
         a1:5f:4f:7f:85:35:92:cc:5d:f2:d0:7a:9d:4a:74:3c:96:20:
         74:e0:30:90:13:d7:e1:ac:43:ed:b8:eb:f6:c9:29:32:a5:47:
         d3:9f:eb:39:f9:df:ea:0e:71:36:28:52:ab:8c:98:d6:11:60:
         46:3e:0b:97:dc:14:a3:58:9c:84:95:93:e6:fa:5f:52:b9:64:
         c2:9b:d0:73:fc:fa:9a:61:be:af:2f:82:e0:b3:31:72:55:55:
         01:30:95:28:76:93:7e:90:52:62:7d:61:37:06:af:99:5c:0a:
         97:8c:6e:c2:18:c4:11:62:09:01:1c:21:f1:66:7f:e7:fb:41:
         b2:d5:01:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org