Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F1DACCA6A12D21B00471FADDC409E740FDB5D640.cer
File:                     F1DACCA6A12D21B00471FADDC409E740FDB5D640.cer (raw, json)
Hash identifier:          I5AhLpyuHvVwC3R3B0HlmCFdiR2Zv1ET8FBRcuXBESc=
Subject key identifier:   F1:DA:CC:A6:A1:2D:21:B0:04:71:FA:DD:C4:09:E7:40:FD:B5:D6:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D7602D8A331A8F0E94C05BE37CC1E17A4AA9FCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/0/F1DACCA6A12D21B00471FADDC409E740FDB5D640.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 14:56:56 +0000
Certificate not after:    Tue 31 Dec 2024 15:01:56 +0000
Subordinate resources:    AS: 271564
                          IP: 138.0.176.0/22
                          IP: 2804:7d7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:76:02:d8:a3:31:a8:f0:e9:4c:05:be:37:cc:1e:17:a4:aa:9f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 14:56:56 2024 GMT
            Not After : Dec 31 15:01:56 2024 GMT
        Subject: CN=F1DACCA6A12D21B00471FADDC409E740FDB5D640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bf:85:d3:cb:6c:66:96:a1:3f:a6:c4:e6:1c:
                    8f:45:c3:30:75:b6:0c:bf:12:e5:a8:46:30:5c:f8:
                    11:f6:e8:0a:d1:77:e4:fe:92:64:72:6f:cb:b6:e3:
                    dc:52:d6:fb:a7:3b:ac:c0:9b:51:c3:e9:90:25:16:
                    dc:35:3e:59:20:c9:2b:c9:c5:de:a3:25:d5:bb:48:
                    20:4b:ac:f0:46:dd:e7:82:56:26:91:c6:17:c2:c6:
                    0c:d7:25:03:ab:5f:d1:83:95:35:95:2e:ff:1b:04:
                    c8:f2:64:77:e9:e2:6e:c5:26:98:f2:d3:92:21:05:
                    b6:49:42:84:0f:2c:ed:2d:e6:90:56:6b:09:da:71:
                    2e:92:95:ed:01:8c:b7:d7:51:8c:26:72:a4:13:e4:
                    41:51:cf:f5:3c:10:41:5e:86:e8:48:9a:7e:ce:73:
                    bb:9e:07:20:2f:73:e0:51:39:b0:11:90:e4:c5:99:
                    4a:33:23:81:85:ac:96:75:18:89:7f:f6:fe:38:3f:
                    a4:ca:0d:23:54:0c:8d:64:bc:0f:1d:fe:93:37:6e:
                    17:8f:7d:a0:49:5c:22:c0:6a:78:f0:70:ca:70:5a:
                    3c:a0:35:40:34:6b:a6:d3:a5:8b:fd:ff:c3:f1:f6:
                    f2:8a:3d:48:f2:c3:8e:54:50:ed:5d:28:16:16:2e:
                    0d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:DA:CC:A6:A1:2D:21:B0:04:71:FA:DD:C4:09:E7:40:FD:B5:D6:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/0/F1DACCA6A12D21B00471FADDC409E740FDB5D640.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.176.0/22
                IPv6:
                  2804:7d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271564

    Signature Algorithm: sha256WithRSAEncryption
         a3:1f:f1:c9:2e:ed:32:4c:1f:20:03:db:e9:0a:f2:7e:a0:61:
         b1:a6:a6:c4:5d:78:71:bc:b7:4d:58:70:72:89:8e:41:10:34:
         b3:68:d4:d3:46:42:5a:cf:09:4e:04:28:1c:d2:1c:a3:ea:7c:
         38:7a:4d:b5:cf:ed:91:c9:5c:ca:21:76:f6:4a:b5:30:56:8e:
         98:67:4c:fd:25:a9:01:a1:e0:f6:00:5a:2e:b8:97:4f:09:7d:
         87:08:38:94:2f:7a:1e:dc:0d:3a:56:27:4c:dc:a0:86:ae:a5:
         48:d6:41:e1:ce:16:3e:84:1e:19:0f:78:15:6e:6b:38:0b:43:
         32:2d:d1:57:d5:ff:c2:c9:5d:ab:0b:bc:d0:12:31:28:a1:71:
         90:f0:f6:58:d2:5e:c2:c9:f8:cd:ae:63:9e:4c:13:0e:6b:34:
         2d:84:10:a4:aa:fd:10:a8:ec:4c:bf:b0:b8:1e:b4:25:b5:31:
         9e:53:9a:4c:2a:d7:e2:92:42:9d:37:a3:c7:84:2c:94:c2:16:
         fb:78:54:be:9c:98:47:c5:2e:f0:93:70:5b:3b:26:62:64:03:
         3a:a2:fb:72:3e:99:1b:7e:a6:e8:c2:cf:21:b6:05:6f:03:f6:
         5e:64:ab:b5:c3:17:ec:e1:ad:32:11:5e:39:a4:1f:d3:c0:3d:
         37:e0:fc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org