Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.cer
File:                     F286FA0129F492A14A427E9C2AB7E0CD87A21615.cer (raw, json)
Hash identifier:          XrGh3zCngSdntzierJU0BsZfdlJrurWS5M+RhiLvK/E=
Subject key identifier:   F2:86:FA:01:29:F4:92:A1:4A:42:7E:9C:2A:B7:E0:CD:87:A2:16:15
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30721F9BF64F3948F51C5D5A8DEF6FA36A75DB5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Feb 2023 06:49:49 +0000
Certificate not after:    Sat 03 Feb 2024 06:54:49 +0000
Subordinate resources:    AS: 17222
                          IP: 67.159.224.0/19
                          IP: 149.19.206.0/23
                          IP: 161.38.40.0/23
                          IP: 177.92.64.0/18
                          IP: 177.124.192.0/18
                          IP: 179.191.64.0/18
                          IP: 187.16.64.0/18
                          IP: 187.102.128.0/18
                          IP: 187.103.32.0/20
                          IP: 189.45.128.0/19
                          IP: 189.91.64.0/19
                          IP: 199.83.100.0/23
                          IP: 200.142.96.0/19
                          IP: 200.196.48.0/20
                          IP: 200.201.176.0/20
                          IP: 201.76.160.0/19
                          IP: 2804:710::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:72:1f:9b:f6:4f:39:48:f5:1c:5d:5a:8d:ef:6f:a3:6a:75:db:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  4 06:49:49 2023 GMT
            Not After : Feb  3 06:54:49 2024 GMT
        Subject: CN=F286FA0129F492A14A427E9C2AB7E0CD87A21615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:da:04:07:51:24:85:49:fc:4e:2c:00:d8:
                    a9:3c:db:f3:07:06:4b:b4:15:1d:2c:f0:ef:15:d9:
                    8b:50:5e:d9:f5:b2:19:99:f2:4e:b4:b6:fd:b7:56:
                    9d:12:85:da:65:b1:8f:c1:d0:a2:60:e7:f2:30:3c:
                    64:50:68:ff:a2:aa:82:35:0a:e1:39:a4:a5:69:9c:
                    be:5f:fa:bd:76:11:1c:60:e1:4c:a7:1a:18:78:58:
                    88:ce:73:41:43:30:b4:8b:34:62:cb:ed:2e:4a:95:
                    5b:85:9e:94:b8:1f:2c:5a:07:8f:ad:ed:30:0b:ab:
                    ea:89:49:42:e2:1a:f6:a8:b6:82:8d:4a:b5:61:be:
                    3a:9c:8b:6b:4d:fc:c0:ce:bd:22:ab:0c:34:77:0a:
                    cd:f2:7c:01:74:f2:87:ae:db:32:1b:a7:54:70:ba:
                    0a:62:76:34:8b:b1:ef:47:eb:f8:d7:7e:31:8e:bf:
                    ca:de:d2:d5:b2:cb:3d:d1:f8:4e:d1:02:2c:0e:5f:
                    32:24:bd:97:39:a1:d8:88:ae:32:b5:f5:72:24:f3:
                    2e:9e:41:28:6c:d4:0e:53:da:64:08:29:d1:52:aa:
                    19:f2:91:63:3d:17:25:bf:65:1c:9c:a8:c5:c2:4a:
                    df:67:b3:65:c4:9e:4c:de:b1:57:74:19:9d:08:33:
                    02:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:86:FA:01:29:F4:92:A1:4A:42:7E:9C:2A:B7:E0:CD:87:A2:16:15
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.224.0/19
                  149.19.206.0/23
                  161.38.40.0/23
                  177.92.64.0/18
                  177.124.192.0/18
                  179.191.64.0/18
                  187.16.64.0/18
                  187.102.128.0/18
                  187.103.32.0/20
                  189.45.128.0/19
                  189.91.64.0/19
                  199.83.100.0/23
                  200.142.96.0/19
                  200.196.48.0/20
                  200.201.176.0/20
                  201.76.160.0/19
                IPv6:
                  2804:710::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17222

    Signature Algorithm: sha256WithRSAEncryption
         68:9c:5a:62:db:9a:01:ff:e7:54:d0:da:19:33:db:60:c9:41:
         f2:b2:28:81:b8:bf:f9:03:41:8e:25:4b:4a:7a:a7:2d:2c:fc:
         f3:e3:58:fc:70:84:4f:f7:28:43:03:d9:44:7a:13:43:99:12:
         15:7a:c9:35:10:1a:30:e0:f5:1d:63:7b:f4:67:4e:1e:4b:cc:
         66:b2:6d:09:01:be:90:88:db:e0:a0:a8:ca:e2:9b:c6:a4:f0:
         9d:1e:5d:28:c3:de:a6:b2:4c:f1:d2:87:28:ba:14:ac:5f:b8:
         ac:68:94:aa:74:5d:ea:aa:ea:f3:f3:f8:ab:56:99:04:e5:a9:
         8c:9b:61:c8:1e:da:5f:8d:9c:8b:b7:2d:05:04:ba:ee:12:ec:
         ee:ff:1e:9c:13:9c:0b:26:c1:c8:b9:d5:e2:ce:59:ca:31:87:
         ca:d1:d3:f8:7f:2b:47:85:29:42:da:74:d3:bd:37:21:e9:23:
         03:1a:69:b9:39:81:79:e8:55:e9:02:16:57:c9:1a:6e:09:36:
         81:55:1b:2c:3f:07:3d:ee:5d:a8:f2:8c:ca:4e:3f:c3:88:69:
         a8:51:be:fc:e0:1e:a9:65:12:3c:28:de:09:d6:00:05:f7:d0:
         3d:09:03:41:b0:75:c5:8d:e6:74:9c:2f:d9:6e:99:12:07:08:
         66:fc:2c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org