Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F33BCBFC144255AA76CBEBEA3A97556863B8E89A.cer
File:                     F33BCBFC144255AA76CBEBEA3A97556863B8E89A.cer (raw, json)
Hash identifier:          2fazQPOHy9FqUkrV/DRQAeVCouw51LTEoLNdX2+7uPM=
Subject key identifier:   F3:3B:CB:FC:14:42:55:AA:76:CB:EB:EA:3A:97:55:68:63:B8:E8:9A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       48437E1A0B61627CEDA7A9EBC3D9E4BB4D91BF0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/F33BCBFC144255AA76CBEBEA3A97556863B8E89A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Aug 2022 22:58:18 +0000
Certificate not after:    Mon 31 Jul 2023 23:03:18 +0000
Subordinate resources:    AS: 271580
                          IP: 179.63.60.0/22
                          IP: 2804:7dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:43:7e:1a:0b:61:62:7c:ed:a7:a9:eb:c3:d9:e4:bb:4d:91:bf:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  1 22:58:18 2022 GMT
            Not After : Jul 31 23:03:18 2023 GMT
        Subject: CN=F33BCBFC144255AA76CBEBEA3A97556863B8E89A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c7:59:69:e1:7d:87:f6:47:3c:45:3d:08:5c:
                    5b:44:46:9e:89:34:93:c3:f0:82:2f:ea:21:6d:f5:
                    5b:5e:e4:a0:51:18:c1:9a:60:e8:e2:5d:06:89:24:
                    86:8b:57:d7:dd:2e:e9:58:d8:5d:42:4b:79:1c:8d:
                    80:1d:2a:c5:66:85:5b:36:f3:57:67:29:9e:57:79:
                    90:a0:03:fb:ec:3c:8d:fa:1e:54:dd:df:94:6e:8d:
                    b5:a9:1a:be:21:6e:ca:96:4e:06:d5:8b:cf:35:2b:
                    7a:01:00:bf:fd:3e:84:39:e5:62:62:06:0d:d9:38:
                    02:35:a3:6b:0b:de:04:d7:3b:d1:e1:83:60:20:0e:
                    fe:a6:38:d2:b3:88:5b:f6:22:3a:6c:ab:e6:d2:37:
                    4a:4d:37:3e:15:16:79:3c:46:9b:80:4a:25:5d:21:
                    0a:7c:6d:bd:81:43:02:7e:bf:55:ee:59:63:29:ba:
                    41:a8:c4:44:3d:e4:8e:a8:af:2b:13:a3:8a:09:8d:
                    5f:c0:59:32:ae:fb:12:61:0f:8f:6b:ca:db:2d:f3:
                    89:60:a3:c0:9d:6b:0e:4e:8e:c5:5b:82:51:9a:84:
                    e0:08:5a:5a:8f:c0:12:06:63:3c:ac:70:22:f6:27:
                    81:41:43:5f:79:3f:14:fe:4d:8a:ce:60:5b:3d:44:
                    78:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:3B:CB:FC:14:42:55:AA:76:CB:EB:EA:3A:97:55:68:63:B8:E8:9A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/F33BCBFC144255AA76CBEBEA3A97556863B8E89A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.60.0/22
                IPv6:
                  2804:7dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271580

    Signature Algorithm: sha256WithRSAEncryption
         03:37:a2:7b:33:5b:71:f4:f4:d7:dd:1d:d2:07:c1:af:c1:64:
         e4:19:d8:74:8c:6a:ef:5e:1a:95:75:53:c0:27:4b:88:24:85:
         65:86:eb:b4:3d:51:a4:a9:97:eb:d4:f2:c7:a3:04:3c:1c:19:
         34:91:a5:39:41:3d:35:aa:f0:59:ab:6d:e5:37:a2:ab:a5:4b:
         75:6b:39:88:ac:7c:7c:59:37:f3:79:f2:50:a6:79:3e:62:21:
         b8:e4:46:98:2b:24:9d:e9:9c:db:62:86:e1:4a:62:2c:3f:59:
         42:fa:a3:d3:77:4f:fa:ad:14:eb:db:85:51:e4:f6:bf:d2:ef:
         ef:9d:0e:a6:2f:0a:94:1d:2d:23:5d:5d:be:1c:b7:c4:08:96:
         f7:0a:7e:77:cd:1a:11:20:85:d4:04:cf:dd:98:19:99:ed:e9:
         84:c4:b5:42:16:e8:98:35:d4:d7:63:2d:52:e0:1c:02:eb:28:
         23:d9:4d:f8:ef:e1:1f:2d:12:07:70:52:a8:7a:e4:bd:2c:13:
         f1:cc:1f:9b:9e:5d:de:8e:9f:ce:37:66:fe:7d:15:d4:ef:41:
         32:e1:b1:0a:64:a7:97:00:b1:7d:24:15:c8:04:44:91:8b:5c:
         19:23:bb:ef:1d:3f:b0:52:73:a1:27:37:e2:d2:66:26:3f:90:
         ac:89:c4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org