Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F1EF90C4880B5ECE704D6E2591B0D59F5799CA16.cer
File:                     F1EF90C4880B5ECE704D6E2591B0D59F5799CA16.cer (raw, json)
Hash identifier:          l4bVEsobrsJ4yCsTadHYCjuePvN3sD41j52mj1dkLq0=
Subject key identifier:   F1:EF:90:C4:88:0B:5E:CE:70:4D:6E:25:91:B0:D5:9F:57:99:CA:16
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       41D391659FF204D640C6482E78A2FC30F564AB70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/F1EF90C4880B5ECE704D6E2591B0D59F5799CA16.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Apr 2023 15:18:23 +0000
Certificate not after:    Thu 04 Apr 2024 15:23:23 +0000
Subordinate resources:    AS: 263933
                          IP: 138.219.48.0/22
                          IP: 2804:27fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d3:91:65:9f:f2:04:d6:40:c6:48:2e:78:a2:fc:30:f5:64:ab:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  6 15:18:23 2023 GMT
            Not After : Apr  4 15:23:23 2024 GMT
        Subject: CN=F1EF90C4880B5ECE704D6E2591B0D59F5799CA16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:19:1a:e9:a8:08:46:80:f3:2f:c8:d7:f5:0e:
                    9f:62:f0:ea:94:25:d9:29:17:53:a7:d6:92:2f:b6:
                    9d:2c:63:16:ca:e4:f9:79:41:53:6e:34:f8:39:df:
                    73:f2:5a:c8:24:c7:0c:9c:30:17:13:7c:72:72:b2:
                    23:d9:5f:15:d4:ad:bb:8b:0b:76:d2:66:eb:3d:66:
                    b6:65:ec:af:3a:bd:cf:b7:62:42:4f:28:5f:39:db:
                    80:0e:c0:7b:eb:46:3a:27:c1:39:7c:46:55:7b:19:
                    13:35:d7:5b:35:5b:ff:7c:46:1c:db:b2:72:a5:1c:
                    c3:98:dc:3c:7d:d8:ed:d2:ef:b5:57:55:d6:da:24:
                    b9:08:22:2d:dd:d5:0e:20:52:0a:2f:a7:6a:b4:ff:
                    34:af:f5:2e:3d:b3:fa:1d:1b:45:20:6f:72:ae:8d:
                    15:85:65:a7:9f:0e:c7:f5:a9:1e:7d:19:01:03:4f:
                    a6:79:f4:cc:0b:81:8f:b5:17:82:e9:57:31:1c:57:
                    1c:85:01:00:9f:ba:79:44:35:a9:a7:a5:a6:da:21:
                    d0:a6:c4:76:08:c2:8d:25:27:c3:7f:7f:3b:d6:d9:
                    ad:8d:69:fd:6b:18:ca:7e:b5:c4:8f:bc:82:e8:e8:
                    2b:e4:96:fe:82:32:89:ba:e6:1c:41:67:f6:ff:4d:
                    b7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:EF:90:C4:88:0B:5E:CE:70:4D:6E:25:91:B0:D5:9F:57:99:CA:16
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/F1EF90C4880B5ECE704D6E2591B0D59F5799CA16.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.48.0/22
                IPv6:
                  2804:27fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263933

    Signature Algorithm: sha256WithRSAEncryption
         ad:e8:62:e8:cb:0d:12:a6:30:b2:74:35:b0:43:45:60:a4:44:
         6c:d3:85:fe:f2:29:7b:19:53:72:70:3d:fd:f3:fa:5f:02:0f:
         8a:6b:0d:75:a3:e3:d8:42:3e:1d:de:b3:15:4b:90:42:d8:f5:
         7f:ab:15:88:73:9e:ee:bd:a7:80:c9:a8:2f:88:a0:00:0f:28:
         20:ae:39:5a:14:7c:42:23:9a:d3:7b:c7:0b:d8:10:fe:88:ae:
         16:2a:bd:a3:62:b8:dd:b8:95:f8:bf:e5:8c:57:34:a0:fd:2f:
         ce:51:a6:2f:d2:16:c3:05:6d:a8:99:43:c8:ca:c0:6e:85:42:
         81:e6:e4:13:cc:0d:d3:a3:3b:d3:0e:61:7f:e9:35:4b:e5:b2:
         f1:7b:70:a3:0b:eb:5e:5b:8f:92:99:69:52:e9:ed:7a:6e:a4:
         7d:5d:64:9c:cd:65:e4:61:81:77:01:6b:36:e9:dc:98:56:fd:
         00:cc:ee:90:59:06:0f:ba:7e:d8:d9:d2:b0:4f:87:41:1c:29:
         0f:a6:89:5a:d2:3c:ec:7b:29:cb:0d:82:86:d0:48:ca:00:ab:
         a1:e4:26:20:6f:83:cf:e7:ba:36:f7:13:7d:fc:6c:9b:c2:cf:
         65:f4:84:61:1a:18:e5:8a:99:f0:19:27:f6:29:7b:37:18:f6:
         30:a6:c7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org