Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F.cer
File:                     F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F.cer (raw, json)
Hash identifier:          bZDnT0odftZoMHhJdtP+1bdgiiAWOg9++nAR3w07snY=
Subject key identifier:   F2:6D:92:01:1A:6E:AF:A3:82:E3:90:DF:1E:18:F9:DF:59:CC:CF:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E9522F50C0D9B14664CF921657C5A4240EE75A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Jul 2023 08:33:08 +0000
Certificate not after:    Thu 04 Jul 2024 08:38:08 +0000
Subordinate resources:    AS: 270860
                          IP: 190.124.244.0/22
                          IP: 2804:728c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:95:22:f5:0c:0d:9b:14:66:4c:f9:21:65:7c:5a:42:40:ee:75:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  6 08:33:08 2023 GMT
            Not After : Jul  4 08:38:08 2024 GMT
        Subject: CN=F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:26:2d:e5:a8:40:e9:5b:25:48:35:49:63:
                    fa:3d:e1:a0:b7:b8:1f:30:ee:15:7c:d6:b1:a4:d5:
                    93:01:69:18:35:c4:fb:59:ac:9c:ee:00:f7:b8:cf:
                    62:80:7f:ea:4d:31:e3:d2:88:70:22:9f:90:06:5e:
                    ac:d3:9e:d4:78:da:d5:fb:16:98:ec:27:f8:2a:41:
                    d0:ad:44:29:96:cd:40:96:99:31:f7:19:dc:6e:34:
                    73:d8:8e:30:8a:1d:1f:c2:6d:ca:bc:9b:72:48:94:
                    45:aa:95:6f:f7:f6:1b:41:62:9c:2f:82:91:ca:6e:
                    8f:b9:f1:e6:26:0e:3a:c6:fd:5d:5e:57:ce:8c:79:
                    af:36:17:8c:bb:98:b7:a2:65:c6:4b:ec:68:3b:44:
                    47:c3:1f:c1:b6:f7:7b:54:52:6f:5e:8f:44:0a:9f:
                    d8:bb:8e:5f:ea:42:9c:70:b4:a4:ff:9f:e2:72:78:
                    f2:16:b7:93:6e:5d:9d:0e:12:93:d7:b0:d5:ff:87:
                    8d:d2:2e:d3:85:a4:f9:a5:46:6b:60:b4:5b:c0:d7:
                    33:1c:d3:65:a0:05:93:44:f4:61:8e:85:71:68:9c:
                    0b:59:dc:6b:6c:ca:a1:e5:c0:bc:0c:5f:b0:4e:98:
                    d8:91:27:f4:06:31:b9:f3:30:26:85:91:f4:02:c5:
                    a1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:6D:92:01:1A:6E:AF:A3:82:E3:90:DF:1E:18:F9:DF:59:CC:CF:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.244.0/22
                IPv6:
                  2804:728c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270860

    Signature Algorithm: sha256WithRSAEncryption
         90:df:59:8d:95:0a:53:f8:f7:1b:25:60:7f:a3:d7:94:de:32:
         21:d1:be:19:5e:3a:9c:c4:93:40:48:dd:a3:85:a9:2e:f2:ef:
         e1:f4:ce:2e:dc:1a:b6:29:b6:8f:47:df:af:3c:5f:29:2d:f8:
         e7:b0:d4:99:aa:84:8a:ec:25:1e:32:c4:8d:30:f7:61:4a:7a:
         ed:21:b4:1f:16:a4:6a:07:21:94:e0:03:0c:a6:c4:6a:0d:cc:
         3b:6e:23:f9:a9:85:32:84:fa:e1:9a:d2:01:3c:77:1c:70:47:
         a5:ed:59:c7:bc:00:6e:e8:73:a8:1c:43:2b:f3:f9:03:f1:5b:
         a2:59:ec:c0:86:f5:56:cd:71:d6:c9:51:60:22:20:2d:55:63:
         bd:0b:8f:7d:eb:32:30:2b:3d:db:03:82:9f:06:69:7a:92:4a:
         77:3a:90:1d:55:fb:62:85:f2:db:e6:35:34:1a:84:55:4d:6f:
         65:0d:95:b2:4b:e9:98:59:ac:8c:be:65:02:fc:4d:86:b4:3c:
         9b:f9:ab:68:43:69:7c:20:21:73:10:8a:eb:f8:6a:b4:19:d5:
         af:9f:ae:40:b3:c6:93:9c:ba:c9:1d:68:fc:bc:7b:7b:d1:29:
         69:2b:95:fb:8b:46:f3:e9:32:76:63:80:c5:35:31:f6:b0:30:
         ec:37:2b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org