Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F290AD1858517BBCA3BAB5341829F7A8A50BB7CE.cer
File:                     F290AD1858517BBCA3BAB5341829F7A8A50BB7CE.cer (raw, json)
Hash identifier:          GbrlyvQqD8m26iuDAj+yiznMsvCPh5HyUm3AzHtUZhE=
Subject key identifier:   F2:90:AD:18:58:51:7B:BC:A3:BA:B5:34:18:29:F7:A8:A5:0B:B7:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20D206DADC22CB9CD7E9CF84E8CF8BB1945C055E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/F290AD1858517BBCA3BAB5341829F7A8A50BB7CE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Jun 2022 14:15:19 +0000
Certificate not after:    Thu 29 Jun 2023 14:20:19 +0000
Subordinate resources:    AS: 268924
                          IP: 45.176.0.0/22
                          IP: 2804:5cb0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d2:06:da:dc:22:cb:9c:d7:e9:cf:84:e8:cf:8b:b1:94:5c:05:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 30 14:15:19 2022 GMT
            Not After : Jun 29 14:20:19 2023 GMT
        Subject: CN=F290AD1858517BBCA3BAB5341829F7A8A50BB7CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8e:ef:83:a1:5b:7e:a7:9f:ad:1e:65:17:ba:
                    9b:a1:09:99:68:97:c3:30:83:b6:1d:6a:df:eb:fc:
                    9d:6e:6d:74:5a:b4:cd:1c:02:a6:3b:42:a0:3d:71:
                    f7:62:29:bd:b1:22:ed:f3:94:fa:9a:b9:36:90:e5:
                    24:70:a3:c2:0a:62:ac:65:5d:db:e7:43:d1:d7:82:
                    cc:1a:ac:66:02:15:22:2d:e7:82:63:34:35:c3:0a:
                    48:16:87:fe:39:b0:97:c2:4e:4e:dc:85:7b:8d:48:
                    a4:7e:91:c5:ae:b7:8a:49:68:51:eb:43:2a:b0:d0:
                    6a:61:2f:b2:01:51:cf:cd:8f:00:51:71:18:52:3f:
                    8f:c4:fd:6b:61:84:7c:75:1d:f1:08:4a:55:42:cb:
                    b2:7c:73:d4:b6:4c:39:0f:d8:bc:9c:f3:d9:c1:ed:
                    5d:f1:8c:d9:43:6a:49:10:e4:6b:35:06:a0:2e:13:
                    b0:4f:de:7b:fa:62:a0:10:a7:7f:6e:f6:b7:14:b8:
                    eb:1f:4d:51:e2:25:38:4d:a7:13:e2:b6:2a:c0:6d:
                    4f:f8:e0:de:0b:ff:06:90:99:73:96:a9:3a:00:43:
                    33:97:54:98:dc:f3:dc:e3:c2:6b:20:a4:e7:9c:d5:
                    82:31:86:a4:83:2a:ce:8c:13:4a:e8:51:de:e2:b2:
                    46:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:90:AD:18:58:51:7B:BC:A3:BA:B5:34:18:29:F7:A8:A5:0B:B7:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/F290AD1858517BBCA3BAB5341829F7A8A50BB7CE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.0.0/22
                IPv6:
                  2804:5cb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268924

    Signature Algorithm: sha256WithRSAEncryption
         0c:0f:c1:c4:f6:3a:0c:70:42:32:3d:17:95:0c:83:97:dd:1e:
         77:82:3d:5a:2d:8c:3d:15:d6:74:13:57:00:03:ba:84:12:42:
         a7:ee:dd:71:de:66:03:03:ed:09:fb:09:36:3b:47:35:db:ad:
         84:ac:c3:e1:d7:32:9a:90:35:82:6a:c9:f6:68:cc:b1:d9:6b:
         8c:d7:ba:c6:d6:72:f5:9f:4a:d7:ea:3d:a2:a0:6b:46:44:7f:
         ee:7b:a1:5d:0c:b3:31:ef:ee:62:12:20:e7:26:31:7e:2d:7b:
         03:c7:03:2b:bb:40:1b:42:4d:30:59:6f:4b:52:76:56:3c:75:
         50:44:25:a0:68:bc:0d:d5:33:73:5f:2c:62:95:1b:d4:60:74:
         1f:fa:4a:9f:e1:f6:cd:c7:7b:04:be:12:00:55:0d:95:9e:fc:
         1f:7c:23:d0:ea:ca:82:24:02:27:9b:03:71:b8:99:8c:7d:c7:
         de:0f:3d:9e:4d:45:1f:a9:ce:ed:32:8b:76:42:45:d6:f6:43:
         09:21:bb:9e:08:7d:46:9f:75:61:81:56:a5:ab:61:cc:a6:7a:
         13:0c:74:e7:f7:26:6f:e4:ad:de:db:3f:0b:8b:9e:77:27:77:
         a6:33:8c:5b:63:32:a4:57:e4:4e:a6:d5:b6:ac:3e:f7:2d:04:
         fa:b5:6d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org