Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F1F309DFE9676541BD58DBA8F137EA2198F53BD1.cer
File:                     F1F309DFE9676541BD58DBA8F137EA2198F53BD1.cer (raw, json)
Hash identifier:          QkrllQchYnghnIatYXdDzTJUCydewKVLSBiJntmTj2M=
Subject key identifier:   F1:F3:09:DF:E9:67:65:41:BD:58:DB:A8:F1:37:EA:21:98:F5:3B:D1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3BFFB1742C691DEE9F904F1562002761D2D04E6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/F1F309DFE9676541BD58DBA8F137EA2198F53BD1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Apr 2023 13:55:45 +0000
Certificate not after:    Wed 24 Apr 2024 14:00:45 +0000
Subordinate resources:    AS: 269671
                          IP: 45.191.124.0/22
                          IP: 2804:6824::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ff:b1:74:2c:69:1d:ee:9f:90:4f:15:62:00:27:61:d2:d0:4e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 26 13:55:45 2023 GMT
            Not After : Apr 24 14:00:45 2024 GMT
        Subject: CN=F1F309DFE9676541BD58DBA8F137EA2198F53BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:69:7f:9d:67:e0:c1:5d:e5:1b:fb:5a:e1:
                    62:0d:09:ec:a1:47:40:88:09:d6:2a:81:77:6b:ba:
                    ae:c5:86:ae:35:28:e6:f7:c6:da:65:43:4a:57:28:
                    e2:57:e0:55:e5:c8:06:cf:12:8f:0f:d7:29:35:ee:
                    f8:b3:5b:4d:05:0f:b5:80:29:5a:46:a5:c5:0d:72:
                    eb:c6:59:6d:58:20:ae:ea:b8:a2:41:8c:46:7a:cc:
                    13:fb:e3:f8:04:ee:91:b7:fe:5d:93:c5:ed:d2:5e:
                    05:ea:7d:09:05:18:30:65:20:46:05:f3:4d:44:f1:
                    aa:eb:b3:11:77:40:79:a6:ae:78:2a:28:33:00:39:
                    5a:50:57:58:23:9b:a2:14:54:e5:85:ef:ce:aa:e0:
                    af:d9:8c:67:4f:56:fe:77:40:cc:3a:9c:34:7f:7e:
                    a6:d8:24:ba:75:a3:93:90:5a:81:18:cf:fc:57:31:
                    15:cf:5b:95:f3:6f:85:44:22:b4:6d:6a:2b:bd:3d:
                    bc:2b:c1:71:7b:fe:ca:47:eb:5c:b6:4d:b8:a1:c5:
                    a2:6a:e4:dc:90:07:40:ec:51:61:4c:70:ef:ab:75:
                    68:d2:a7:63:0c:bf:e7:a3:ad:2d:c4:a5:3d:de:d5:
                    6b:69:94:1a:db:90:7c:36:39:a4:bd:bf:6f:a3:9b:
                    74:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:F3:09:DF:E9:67:65:41:BD:58:DB:A8:F1:37:EA:21:98:F5:3B:D1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/F1F309DFE9676541BD58DBA8F137EA2198F53BD1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.124.0/22
                IPv6:
                  2804:6824::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269671

    Signature Algorithm: sha256WithRSAEncryption
         0b:45:3d:5d:0d:71:59:a0:68:95:c6:28:52:bb:59:b5:65:5f:
         a2:d1:c7:e1:3b:48:9e:68:73:ae:5e:93:88:55:8f:41:cc:ee:
         74:93:49:a7:e7:d8:51:88:99:ef:c7:03:ed:de:3c:e4:9d:81:
         d3:6f:cc:11:3b:dd:b5:ad:51:24:cc:29:d4:b3:09:f1:4e:49:
         63:d0:11:c3:8b:e5:c3:fd:64:09:e7:09:df:10:f7:98:90:f1:
         da:80:e3:b2:c5:95:bf:fa:89:b6:3e:3d:c3:e4:3e:44:2f:61:
         5c:d2:d5:e0:d9:a7:f2:a3:77:41:23:b3:59:4c:c9:f6:39:c8:
         13:3f:3a:78:f7:11:6a:c6:fd:7a:cf:f0:05:d4:20:84:17:7e:
         11:8b:3f:d2:9c:2c:e7:d6:af:30:24:ca:d1:e4:f3:a6:8c:b5:
         81:cb:11:73:36:6b:9c:1c:f0:c9:07:28:78:92:8f:07:9d:dd:
         17:14:26:cc:bc:89:c2:c3:e8:40:57:ef:b4:d9:a7:3f:1d:9d:
         c6:de:a6:19:4f:f2:09:51:6d:b8:bb:85:43:20:69:36:83:0e:
         ca:6e:a3:ad:81:c6:55:18:86:47:dd:68:66:fd:6a:be:05:08:
         4a:dc:91:31:5f:31:2f:c8:a5:47:ed:9f:e0:38:e2:2b:e6:e4:
         19:17:48:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org