Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.cer
File:                     F2956E37351B36DB889EB71E79F2AD375B315A2C.cer (raw, json)
Hash identifier:          aYa0HboECwTny2NtTwjNHQ/CrgknW5m1wZuWUUoxptc=
Subject key identifier:   F2:95:6E:37:35:1B:36:DB:88:9E:B7:1E:79:F2:AD:37:5B:31:5A:2C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       422BFBE1978622A5A643F13364EB699EC3338DE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Dec 2023 00:53:48 +0000
Certificate not after:    Tue 10 Dec 2024 00:58:48 +0000
Subordinate resources:    AS: 266303
                          IP: 170.79.172.0/22
                          IP: 2804:35bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2b:fb:e1:97:86:22:a5:a6:43:f1:33:64:eb:69:9e:c3:33:8d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 12 00:53:48 2023 GMT
            Not After : Dec 10 00:58:48 2024 GMT
        Subject: CN=F2956E37351B36DB889EB71E79F2AD375B315A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:5b:81:8d:6f:24:f3:46:00:62:a2:77:e1:
                    27:10:ce:cd:e6:30:3d:c6:b1:b1:6e:aa:5a:f9:57:
                    34:4b:6e:41:ba:99:76:f9:73:a5:c5:de:e6:d2:b6:
                    c0:74:6e:cd:7d:c2:85:7b:1a:0c:93:54:0d:85:70:
                    24:84:c9:d6:d5:39:a8:05:e6:55:47:ee:03:8d:f4:
                    d6:43:3a:75:15:5f:af:d8:e4:b1:d6:14:8a:4f:3f:
                    5d:27:81:65:84:72:83:dd:04:46:a7:17:05:1a:c4:
                    f3:38:44:de:04:32:66:db:02:20:c9:c1:c9:2e:f1:
                    e5:86:9a:76:d8:29:4c:89:c8:6e:f3:90:4a:d0:6f:
                    3a:21:7a:8f:15:dc:ec:bd:ab:13:a0:d2:90:45:c9:
                    b2:97:43:3d:76:85:4a:7f:54:7b:57:41:fd:32:23:
                    d0:fa:de:e6:21:46:7a:67:78:79:f0:96:68:29:d0:
                    f3:3f:e1:b6:19:ac:19:65:7c:4f:b7:dd:19:ff:02:
                    33:c8:4f:e2:e4:d7:37:ce:f3:6e:92:ae:71:18:4f:
                    1d:48:35:cb:a1:8e:0d:8e:5f:9f:de:da:6c:fa:b5:
                    5a:11:65:99:8e:4b:f2:11:11:b6:66:ff:23:69:10:
                    fb:e5:f1:06:5d:50:d7:75:f9:2b:9e:27:24:2c:c9:
                    0f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:95:6E:37:35:1B:36:DB:88:9E:B7:1E:79:F2:AD:37:5B:31:5A:2C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.172.0/22
                IPv6:
                  2804:35bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266303

    Signature Algorithm: sha256WithRSAEncryption
         47:95:da:36:73:cb:24:1d:4c:b6:32:5a:a8:26:e1:af:92:f2:
         d1:0e:9d:91:f8:f5:2e:44:c9:87:06:9e:cd:06:3e:00:21:e1:
         cc:26:71:07:d8:ed:88:a5:5e:9c:bd:84:93:93:13:05:c3:16:
         39:9c:74:ba:95:75:75:cc:11:ac:70:b5:a1:ec:d7:fa:87:6c:
         ff:fb:d2:4a:55:3a:fc:7a:07:26:2e:38:5b:33:b3:55:18:32:
         a8:e9:1f:64:2b:39:21:ef:80:06:be:84:68:8e:af:84:7c:9e:
         46:a7:e9:71:e7:c1:09:64:ff:76:5e:20:de:b0:06:d2:25:bb:
         33:49:bc:12:4e:d0:af:12:42:f1:23:98:2f:73:f6:c9:42:bc:
         ce:d8:e5:1d:f0:9d:18:d9:21:3f:9d:11:8e:0f:59:b5:c4:37:
         7d:c3:ac:4e:2c:00:ba:47:93:ad:c3:07:b7:0d:2e:72:32:ac:
         63:cf:ba:53:2c:14:51:78:5d:2c:6b:e1:0e:aa:84:ba:55:df:
         aa:35:39:b7:b4:3e:47:31:c0:82:f1:ec:e8:a4:d5:bd:e8:14:
         f5:2b:fa:36:65:66:7f:d1:86:3d:28:c7:26:b2:56:de:75:7e:
         89:1a:9b:b7:23:bb:30:36:60:2b:82:dd:a0:f3:90:c9:31:07:
         2b:4f:c2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org