Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F123D9E392A5F8F42BBC61DA7F8201794967AA31.cer
File:                     F123D9E392A5F8F42BBC61DA7F8201794967AA31.cer (raw, json)
Hash identifier:          ASMXgWAFxj/uZBv6kiZiVDnmHwTMnK5Kd7BMq0qAB/0=
Subject key identifier:   F1:23:D9:E3:92:A5:F8:F4:2B:BC:61:DA:7F:82:01:79:49:67:AA:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A432D371297E3B54CDF4756CF80AC49CE8FAE10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/F123D9E392A5F8F42BBC61DA7F8201794967AA31.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jan 2024 14:38:24 +0000
Certificate not after:    Mon 20 Jan 2025 14:43:24 +0000
Subordinate resources:    AS: 263108
                          IP: 177.92.128.0/21
                          IP: 2804:16ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:43:2d:37:12:97:e3:b5:4c:df:47:56:cf:80:ac:49:ce:8f:ae:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 22 14:38:24 2024 GMT
            Not After : Jan 20 14:43:24 2025 GMT
        Subject: CN=F123D9E392A5F8F42BBC61DA7F8201794967AA31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b4:4d:60:24:9b:a0:a7:d9:3c:f0:fe:77:87:
                    a7:3c:b7:4d:21:60:69:67:ab:eb:01:93:61:db:3a:
                    dd:a5:f1:34:ec:91:84:62:6b:2e:d2:43:02:f5:b9:
                    15:df:31:c3:70:8f:db:bb:db:77:de:91:44:a5:05:
                    34:80:2c:e6:1c:78:ea:2a:c9:8c:cd:28:a2:44:e7:
                    32:97:70:5b:1e:8b:d6:dd:c5:20:7a:b9:72:30:6d:
                    b9:fd:0f:26:d1:66:0c:0d:1c:bd:1a:ac:ff:eb:a6:
                    af:35:c7:1c:32:98:44:b3:65:ca:41:2c:06:2a:a8:
                    d7:06:9d:1d:8f:ae:ee:47:fa:66:05:30:1a:de:70:
                    ca:a4:fa:c7:7e:51:cd:0c:38:ee:9a:a4:1b:68:44:
                    34:14:41:ee:c8:1a:ca:0a:d1:2a:93:1c:60:70:96:
                    f5:38:09:b6:89:88:b6:c9:11:4b:a1:e3:71:5c:a4:
                    c5:c7:89:dc:ea:b2:e1:94:39:01:3f:7c:dc:36:c6:
                    cf:f4:93:6c:3b:9f:26:ce:b3:ed:d2:b7:98:cc:20:
                    28:45:a8:9f:ed:9d:fd:c5:1e:d1:01:0e:f4:76:6c:
                    b7:f2:8a:c0:89:2c:16:06:f8:ff:2b:85:60:61:76:
                    44:18:34:23:d4:c7:36:0c:f1:ec:56:57:3b:ff:80:
                    5b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:23:D9:E3:92:A5:F8:F4:2B:BC:61:DA:7F:82:01:79:49:67:AA:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/F123D9E392A5F8F42BBC61DA7F8201794967AA31.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.128.0/21
                IPv6:
                  2804:16ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263108

    Signature Algorithm: sha256WithRSAEncryption
         5f:fb:11:01:c5:88:39:bd:6a:a4:2f:31:83:2b:34:66:6d:f0:
         26:6b:4a:a3:5a:96:8c:2b:a1:7f:67:be:4d:6a:7e:2e:14:e7:
         61:03:06:04:1f:09:bc:79:76:56:2e:e4:dc:01:23:71:48:4e:
         be:aa:b3:e2:b3:f7:e7:14:e0:ec:ef:47:bc:38:89:7e:bc:f8:
         b5:60:a1:f1:fb:ff:c1:73:66:6a:71:45:bd:3d:5a:4b:1a:aa:
         a6:72:85:04:4e:4b:eb:95:cb:4e:7b:0a:c4:dd:b0:4c:14:52:
         57:7b:aa:a8:08:7e:00:46:0c:e5:b1:ef:8f:20:75:ac:0a:37:
         89:c9:7c:44:96:c1:95:d3:8e:d9:74:27:76:d9:93:6d:25:d9:
         56:04:a5:3b:e3:40:34:c6:fc:24:76:34:e6:b2:f5:7c:e5:d8:
         3d:20:50:aa:7b:4a:f7:1f:a6:e5:d8:7d:40:b7:b6:b5:71:e7:
         08:f8:20:11:29:a5:57:7c:3b:9b:42:63:eb:72:e9:a2:29:1b:
         87:26:ed:dd:d4:4d:12:ff:89:ad:00:96:fe:c2:19:a7:68:04:
         9f:2a:43:33:fb:e5:fb:10:70:e4:68:3b:90:13:f8:6e:f2:4f:
         77:eb:2d:4c:ec:42:10:a7:e5:f7:d5:b0:97:38:5e:35:89:c1:
         17:31:ba:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org