Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F2EEE2D65FC23FA7BE31A30FA1B347BDAA4338FA.cer
File:                     F2EEE2D65FC23FA7BE31A30FA1B347BDAA4338FA.cer (raw, json)
Hash identifier:          zWhQqUx3RdIvX1rhRpGEh5eReDfd6cJMluVMoSmnCxU=
Subject key identifier:   F2:EE:E2:D6:5F:C2:3F:A7:BE:31:A3:0F:A1:B3:47:BD:AA:43:38:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       55AFADBF56FC429808FE054D9CC04962AAD91F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/F2EEE2D65FC23FA7BE31A30FA1B347BDAA4338FA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 20:29:42 +0000
Certificate not after:    Wed 23 Oct 2024 20:34:42 +0000
Subordinate resources:    AS: 262989
                          IP: 186.216.208.0/21
                          IP: 189.84.136.0/21
                          IP: 190.103.160.0/20
                          IP: 2804:9c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:af:ad:bf:56:fc:42:98:08:fe:05:4d:9c:c0:49:62:aa:d9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 20:29:42 2023 GMT
            Not After : Oct 23 20:34:42 2024 GMT
        Subject: CN=F2EEE2D65FC23FA7BE31A30FA1B347BDAA4338FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9b:52:b2:34:6d:68:f9:13:12:bc:b3:64:2c:
                    bb:e9:08:a7:1f:84:d1:07:aa:16:58:58:50:18:e0:
                    ee:de:62:1a:b9:63:41:6c:be:57:cf:d6:2e:4e:74:
                    38:90:2b:95:9c:dc:9f:43:57:b1:22:a8:be:4b:14:
                    fa:d6:b2:71:1f:16:a3:f6:58:1e:38:1d:8a:64:13:
                    ff:9a:f9:7b:99:1f:36:78:71:ee:01:47:cc:ea:65:
                    87:7c:23:77:67:13:4f:90:6e:a2:48:c0:9a:ed:db:
                    8c:dd:d7:77:da:b1:1a:3e:b2:61:8c:fd:fe:c2:b6:
                    58:cc:98:b2:fe:11:4f:c8:8e:55:f4:01:57:c2:f4:
                    89:79:9a:50:a1:97:05:cc:13:1e:fb:85:bb:21:40:
                    c1:35:71:94:87:21:47:8b:ec:02:a7:56:8b:ba:53:
                    eb:f3:d9:b7:05:17:19:e3:42:44:64:5f:a3:96:67:
                    cb:01:5a:69:42:1e:2e:51:ee:ba:6b:2a:d2:a0:9e:
                    87:a7:ac:25:37:0d:7f:92:0e:77:29:e9:6a:d2:12:
                    c2:c0:ef:18:de:1a:9a:65:14:99:38:12:69:5a:f3:
                    7b:e5:71:75:d2:f5:bd:4c:cc:47:b5:b4:9b:3c:c3:
                    23:db:99:3e:8b:21:b8:03:ea:61:9f:5c:85:e3:c1:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:EE:E2:D6:5F:C2:3F:A7:BE:31:A3:0F:A1:B3:47:BD:AA:43:38:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/F2EEE2D65FC23FA7BE31A30FA1B347BDAA4338FA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.208.0/21
                  189.84.136.0/21
                  190.103.160.0/20
                IPv6:
                  2804:9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262989

    Signature Algorithm: sha256WithRSAEncryption
         b2:75:e6:6f:c8:4c:ee:28:87:e2:11:8a:7f:67:71:52:3f:ff:
         a8:d6:85:68:10:2e:98:8a:36:69:12:1c:ca:74:02:19:7f:e3:
         97:2d:b2:31:53:ff:92:83:f3:64:67:17:b7:65:92:c8:b6:fb:
         51:42:5f:66:6f:b7:26:16:3e:fe:9b:94:44:18:fb:c5:d1:8f:
         1d:36:be:95:05:bd:22:1d:58:34:c2:d8:ba:9a:5d:ce:dd:4b:
         bd:7c:ba:06:19:e8:2a:80:52:60:a1:9c:cd:9e:83:c6:73:ab:
         16:15:5d:79:e0:fe:ab:24:ac:06:b8:26:fa:6e:ab:b2:b3:9a:
         e1:9c:2c:18:bf:21:cc:df:ab:54:b9:8f:66:a5:38:68:2a:2d:
         60:d9:b4:e3:89:29:81:3f:fd:fc:49:68:d0:fc:1f:77:1a:ae:
         84:cb:c8:4b:76:25:dd:d3:61:3d:5c:06:0d:78:31:ec:22:37:
         73:fb:65:e7:62:71:05:3c:9e:12:04:cf:46:59:70:62:f1:23:
         96:fd:c9:5c:eb:a5:03:7b:3d:df:b7:43:dc:5a:c8:55:ad:87:
         37:ce:b9:95:54:04:33:05:d3:e4:11:82:3c:c1:86:43:ba:ae:
         87:1a:64:0d:f6:0e:3f:4b:67:37:ad:10:91:b3:e4:1d:6c:f9:
         51:6d:69:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org