Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F1404E7D5F055EF9911EFA0A6FD60DC18A31BA4E.cer
File:                     F1404E7D5F055EF9911EFA0A6FD60DC18A31BA4E.cer (raw, json)
Hash identifier:          1q5AopqDgg6O90pQpQbf0pt5DNqrFEgm2hmJfjHzQXo=
Subject key identifier:   F1:40:4E:7D:5F:05:5E:F9:91:1E:FA:0A:6F:D6:0D:C1:8A:31:BA:4E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       15A8175070D96EAAA918406D51166501EDE3F932
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/F1404E7D5F055EF9911EFA0A6FD60DC18A31BA4E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 12:56:13 +0000
Certificate not after:    Mon 21 Oct 2024 13:01:13 +0000
Subordinate resources:    AS: 263384
                          IP: 138.185.40.0/22
                          IP: 177.87.28.0/22
                          IP: 2804:1554::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a8:17:50:70:d9:6e:aa:a9:18:40:6d:51:16:65:01:ed:e3:f9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 12:56:13 2023 GMT
            Not After : Oct 21 13:01:13 2024 GMT
        Subject: CN=F1404E7D5F055EF9911EFA0A6FD60DC18A31BA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ba:df:eb:f0:49:76:ac:ff:cd:30:1b:57:06:
                    68:f9:0d:1d:ac:c6:da:c9:63:b1:7d:e9:7f:8d:96:
                    72:1c:93:12:55:67:44:b4:cb:f8:59:ea:67:a9:18:
                    1d:5e:65:88:86:2b:e4:fc:98:84:c1:b7:75:76:8d:
                    01:ad:77:65:0e:c2:d3:26:e9:ed:38:f5:2e:31:19:
                    6d:42:94:5a:b8:89:75:20:7d:81:38:e7:31:73:29:
                    76:05:4f:eb:de:ee:d3:78:3c:1a:93:18:7c:eb:7e:
                    a9:0c:9a:21:3d:3d:69:8a:c6:2b:6b:71:3d:3f:8b:
                    0d:dc:b4:77:92:f7:aa:8c:8b:a9:d5:2b:9f:cf:cd:
                    9a:09:1b:18:9b:6a:54:d1:66:8b:db:00:d5:b9:67:
                    bf:a0:37:e2:0a:66:7a:c7:13:26:7e:32:31:06:08:
                    c6:1e:f9:ef:ca:4b:1d:7c:a3:65:17:3d:c8:3e:30:
                    3c:3f:8f:9c:1e:e9:83:bf:0f:ad:a9:f7:ae:87:12:
                    53:94:e7:ea:17:d3:97:09:e4:64:f8:a0:8d:eb:9f:
                    2d:29:07:c9:41:4b:8c:ed:eb:87:0d:f1:27:af:37:
                    fc:15:e8:3e:73:66:3e:c5:a1:e1:52:b7:2f:6c:63:
                    79:6f:40:f8:aa:c5:ec:84:cf:45:d3:50:5d:f6:36:
                    82:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:40:4E:7D:5F:05:5E:F9:91:1E:FA:0A:6F:D6:0D:C1:8A:31:BA:4E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/F1404E7D5F055EF9911EFA0A6FD60DC18A31BA4E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.40.0/22
                  177.87.28.0/22
                IPv6:
                  2804:1554::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263384

    Signature Algorithm: sha256WithRSAEncryption
         5c:a2:f3:27:9c:db:6a:01:5f:85:96:3a:ba:44:75:c4:a3:47:
         e0:ae:fa:90:81:18:20:81:98:aa:fb:12:09:cd:59:b4:39:85:
         34:87:b1:99:19:1c:37:95:54:29:6b:2c:a8:ef:e2:fc:23:b0:
         08:fb:e5:44:f5:e2:8a:75:64:50:76:ae:ac:b7:4c:84:62:13:
         f7:83:cc:c2:f8:6c:4a:68:43:c1:69:1e:31:60:62:98:91:67:
         94:e7:fe:ce:a0:26:83:c3:5a:3b:96:c2:b8:80:53:c6:88:af:
         dd:f1:46:ad:61:51:37:1b:5e:f5:6f:ac:01:41:f8:da:aa:6e:
         05:03:f8:ed:c8:a9:e9:48:e9:ff:0d:a1:0e:0f:04:0b:78:12:
         5a:9f:a5:20:45:c5:b4:f8:79:72:0d:39:16:50:3b:3c:f3:22:
         a0:30:2f:36:8e:29:62:c6:c9:d3:0c:39:9a:a4:4f:d0:f2:53:
         26:0d:63:28:dd:21:4e:6d:b3:fd:06:9d:94:19:91:24:f7:b9:
         ea:ac:74:31:43:7c:1b:fc:32:79:4b:53:d8:af:eb:fb:9a:6b:
         2a:11:dd:ac:16:c8:a0:cf:52:71:68:59:bf:22:f4:d6:b1:0f:
         f7:b9:0f:bc:08:be:d8:d9:20:e0:ec:20:13:03:29:d1:b5:f4:
         d0:a5:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org