Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E.cer
File:                     F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E.cer (raw, json)
Hash identifier:          ALomfwKZp7G8/DWePQI1zFwqrnaD+kGmt5LOaITlqJI=
Subject key identifier:   F1:CA:65:BC:26:29:E2:24:66:DB:31:FF:1E:0C:90:58:7A:1C:7C:1E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0437BB183741EC2D8E1A1FFDA3939E3155177B16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Mar 2024 17:53:26 +0000
Certificate not after:    Fri 14 Mar 2025 17:58:26 +0000
Subordinate resources:    AS: 265008
                          IP: 170.0.60.0/22
                          IP: 2804:3158::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:37:bb:18:37:41:ec:2d:8e:1a:1f:fd:a3:93:9e:31:55:17:7b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 15 17:53:26 2024 GMT
            Not After : Mar 14 17:58:26 2025 GMT
        Subject: CN=F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:9a:3b:69:d8:03:77:b6:23:d4:29:e6:15:
                    3d:d8:3a:d8:f0:c7:38:8d:e3:8b:df:55:80:95:f4:
                    98:ff:c7:72:32:f0:6e:20:b2:33:6e:d9:27:f0:52:
                    58:4d:41:71:f2:c8:3d:6f:9f:ca:72:43:ef:68:c2:
                    5f:aa:0e:a6:ae:eb:b1:25:bb:f7:50:62:2a:01:bc:
                    02:8c:95:c5:29:75:47:bc:e9:63:cb:71:c2:6b:82:
                    fe:6f:0b:47:4d:0d:77:6d:c4:29:0f:e3:2b:22:c5:
                    c5:75:cb:5f:3d:3c:0f:4c:ff:cb:b4:ab:df:70:8a:
                    17:fe:ce:bc:dc:fe:23:40:1d:22:2f:6c:cd:3c:6c:
                    85:db:0d:1b:b4:a8:c7:52:1f:3c:7b:f7:7f:39:28:
                    30:f6:8e:6d:08:c3:8e:2f:e8:04:f8:c7:4f:63:b6:
                    9b:2a:f7:dd:47:85:94:8f:c2:f4:f5:fa:f9:be:38:
                    28:ca:90:1f:c5:df:b0:44:9a:8f:8e:5d:0b:01:d0:
                    e4:b8:30:25:67:12:fd:59:21:74:2c:72:c2:87:ca:
                    c4:cb:ae:64:01:9b:bb:1a:ab:ce:2f:87:6f:cb:f6:
                    31:d9:ab:f9:09:2b:5a:6c:28:90:08:ef:5d:76:4b:
                    5e:70:11:f4:46:fd:9f:30:de:c5:a2:b6:7d:d5:2d:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:CA:65:BC:26:29:E2:24:66:DB:31:FF:1E:0C:90:58:7A:1C:7C:1E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.60.0/22
                IPv6:
                  2804:3158::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265008

    Signature Algorithm: sha256WithRSAEncryption
         0c:29:28:30:32:c1:d7:6d:af:25:ff:30:db:b3:84:c8:8c:de:
         cb:1f:1b:e3:83:97:dd:98:b3:70:eb:4d:9a:33:73:b0:8c:58:
         56:a8:6d:de:fa:8d:6e:e1:fe:9b:a6:65:16:b9:e0:ed:65:16:
         0d:6f:32:47:7f:83:17:fe:61:5f:31:5b:9b:d3:71:af:33:9b:
         3a:ed:df:1c:e3:70:13:8c:bb:e7:68:72:ff:3f:e5:2c:6c:f5:
         ba:47:5a:38:81:c3:c5:4a:96:34:4f:c8:79:bd:f4:19:ea:ac:
         57:52:63:3b:ca:1a:80:a2:47:fa:d2:b5:47:42:7b:13:35:14:
         4c:bb:3d:1f:16:06:b8:32:03:5d:89:06:27:98:6f:ed:62:7a:
         ad:11:e9:b8:1b:b5:db:83:66:fc:24:2f:cb:b3:65:dd:ab:4f:
         40:c7:8d:2d:a7:4f:2a:e3:3d:5b:79:71:35:75:1d:b1:4d:11:
         4f:c3:97:8a:e4:98:d0:c6:69:be:64:2c:48:2f:e5:c1:cc:64:
         2c:08:70:05:da:d1:0d:87:7a:f2:9f:6a:e0:b0:66:20:f4:41:
         38:8a:8f:69:bd:6c:be:25:2c:cc:68:43:a5:17:86:28:b9:1d:
         34:fd:24:80:85:81:3a:b4:36:9e:d7:3b:30:c8:aa:70:e2:6c:
         92:79:1a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org