Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F2D22B3DB50C340D27B02F3976687BE7F8AA5629.cer
File:                     F2D22B3DB50C340D27B02F3976687BE7F8AA5629.cer (raw, json)
Hash identifier:          MTO98FL3rMrWBMjK06r6Ta47XNp814trKuWyz/eb7Ws=
Subject key identifier:   F2:D2:2B:3D:B5:0C:34:0D:27:B0:2F:39:76:68:7B:E7:F8:AA:56:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       382AF681C34E4D43BFF99642175F201C3B020B56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/F2D22B3DB50C340D27B02F3976687BE7F8AA5629.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Jun 2023 22:44:25 +0000
Certificate not after:    Fri 14 Jun 2024 22:49:25 +0000
Subordinate resources:    AS: 268084
                          IP: 45.168.244.0/22
                          IP: 2804:57c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2a:f6:81:c3:4e:4d:43:bf:f9:96:42:17:5f:20:1c:3b:02:0b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 16 22:44:25 2023 GMT
            Not After : Jun 14 22:49:25 2024 GMT
        Subject: CN=F2D22B3DB50C340D27B02F3976687BE7F8AA5629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8e:07:e8:30:bd:51:3d:44:64:5b:3e:f9:95:
                    f9:84:eb:de:2f:96:96:0d:2d:ec:bf:8e:55:b1:69:
                    25:06:d0:2d:a3:2e:a3:e0:0e:22:cd:d5:26:e2:81:
                    74:22:50:be:df:09:f1:cb:24:a3:82:9f:f5:f9:66:
                    b4:93:89:aa:9c:4c:48:0c:23:d2:4c:79:81:6e:75:
                    e4:f3:1c:e4:b7:38:00:ac:73:fe:9b:5e:1f:21:79:
                    6d:5e:72:53:a4:08:79:e0:e6:6d:cc:48:8e:2c:00:
                    2d:4a:34:03:95:7e:a7:42:cf:e5:c8:40:6b:f3:b3:
                    5b:8f:35:e9:22:f8:e0:b3:c8:bf:f5:94:66:07:5f:
                    3f:c1:3e:dd:1d:db:90:98:34:37:33:10:f4:a8:93:
                    11:6e:ee:53:11:a8:3e:03:c8:88:a3:ed:db:ed:36:
                    38:d3:3e:a0:4c:99:bd:1f:29:a5:3f:2a:61:46:18:
                    ca:2d:60:d6:66:8f:2d:42:93:52:71:1b:24:46:30:
                    e9:6d:9e:bf:a5:87:52:d0:31:37:c8:e8:62:ac:00:
                    33:9a:b5:68:17:59:f4:5b:7f:d9:8b:99:d9:85:a0:
                    91:43:19:3c:5b:32:4c:23:b8:a3:3c:94:9b:55:e2:
                    ef:86:5c:f7:7d:04:61:ca:9c:5a:53:d4:10:3e:2a:
                    72:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:D2:2B:3D:B5:0C:34:0D:27:B0:2F:39:76:68:7B:E7:F8:AA:56:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/F2D22B3DB50C340D27B02F3976687BE7F8AA5629.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.244.0/22
                IPv6:
                  2804:57c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268084

    Signature Algorithm: sha256WithRSAEncryption
         47:7c:f3:68:72:a0:86:dd:15:be:46:e6:fd:ca:87:24:6d:ae:
         0a:32:a8:52:86:5b:df:d9:45:f9:09:40:37:92:32:4d:60:2a:
         fc:62:28:35:1a:68:27:c5:a6:b8:73:99:b2:b2:36:6e:99:de:
         2a:38:8a:90:e8:da:6b:67:80:02:3d:25:86:e6:97:cf:9b:24:
         6b:1f:e8:46:f5:5f:a0:a3:b3:3f:0c:dc:14:50:f8:bf:51:96:
         37:dd:20:16:ee:46:d8:d2:d0:59:00:49:f6:e4:ce:db:2a:2e:
         24:c1:0c:30:23:1a:7f:c9:4c:16:b8:0a:3f:d1:90:38:78:34:
         ca:f4:76:6b:cb:c7:58:4b:9a:2e:aa:03:cc:f4:20:89:63:07:
         7c:d1:6b:2c:26:28:1f:7c:d2:87:84:77:f1:3a:2c:be:ac:a1:
         bf:93:e5:86:c7:d9:dd:22:f6:36:cf:8b:ca:4b:1a:6d:a9:74:
         77:8d:07:ee:eb:06:f5:79:78:19:a5:aa:94:24:6a:47:85:67:
         74:e6:8a:fd:ad:2a:86:1a:ac:a9:5f:33:db:2d:7a:09:2b:b1:
         5a:85:e1:4b:f5:21:2e:c1:ae:09:09:b9:64:21:f9:8a:a1:5d:
         1d:f8:b4:d6:58:ba:71:39:20:72:6f:33:1f:b7:d0:46:15:7d:
         4e:b3:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org