Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.cer
File:                     F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.cer (raw, json)
Hash identifier:          oBeaQGPsl3B76P8RvUMY8MBFu4WyBJvmmHh3MPpB24I=
Subject key identifier:   F3:65:58:69:53:1F:DF:3D:28:13:ED:9C:5D:0A:DF:28:BC:FD:0C:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7DD9FAC237B067239B6E6BDDD1B93A7C2C7438FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 16:59:54 +0000
Certificate not after:    Wed 25 Dec 2024 17:04:54 +0000
Subordinate resources:    AS: 263108
                          IP: 177.92.128.0/21
                          IP: 2804:16ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d9:fa:c2:37:b0:67:23:9b:6e:6b:dd:d1:b9:3a:7c:2c:74:38:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 16:59:54 2023 GMT
            Not After : Dec 25 17:04:54 2024 GMT
        Subject: CN=F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:b3:2c:17:20:83:e5:e8:af:a0:76:e8:03:
                    c5:67:a9:a3:ef:a8:29:3e:55:6c:d9:80:a2:b1:b9:
                    86:e5:f2:fd:1c:33:36:1d:2a:b4:6e:36:c4:b5:0e:
                    0d:6b:8e:21:4e:10:2a:da:aa:70:cc:57:95:32:10:
                    9d:6e:64:23:b0:3e:17:31:b6:9d:4d:e3:fe:2c:84:
                    dc:f3:42:73:2a:fe:e2:bb:69:0d:52:ae:bb:c7:ec:
                    06:75:d3:c7:38:cd:88:8b:e0:1b:de:ee:d1:59:45:
                    22:01:fd:a0:ec:55:0d:02:e5:ed:86:db:78:ad:76:
                    95:7d:b9:10:74:95:63:51:19:dd:bc:27:54:2b:43:
                    4f:b2:47:a2:a1:51:b3:63:4d:4b:bc:f3:8f:02:7f:
                    ba:14:21:28:b7:78:d0:a6:a6:48:7f:f7:56:f9:c5:
                    a1:f3:ec:fd:bd:8d:32:88:20:85:9b:31:7a:61:03:
                    73:f4:14:fd:cd:83:7a:5e:a7:92:e7:91:2a:79:da:
                    4f:29:1d:80:09:dd:b2:25:80:46:6d:0a:b6:67:ea:
                    6e:c7:8e:ef:98:a8:24:3c:45:17:78:90:f8:4a:34:
                    f6:7d:fa:f1:d4:9c:41:38:62:f6:68:25:e4:a8:ec:
                    63:34:52:95:c5:65:c9:6c:f7:39:ee:d7:26:03:cc:
                    37:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:65:58:69:53:1F:DF:3D:28:13:ED:9C:5D:0A:DF:28:BC:FD:0C:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.128.0/21
                IPv6:
                  2804:16ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263108

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:c6:e4:3b:30:a7:c5:22:cb:a2:08:4f:ac:b7:85:e2:87:
         d8:d3:6a:86:e8:67:5a:d8:c6:3b:c7:f5:f0:44:c1:23:1e:9d:
         cd:79:73:de:25:46:d0:fb:a8:e9:14:84:94:a1:c0:7e:d5:a3:
         5b:0d:98:1c:0f:71:b6:d1:70:4f:58:48:f9:0c:25:ca:56:c6:
         93:8b:ff:c5:7d:82:b3:ec:98:9c:06:6d:24:a3:5a:22:77:0a:
         c5:87:7b:c2:ab:d9:8a:e0:24:b8:f9:61:ae:a9:c5:42:7c:3b:
         61:02:aa:5d:2b:a9:81:c7:ba:a9:14:bc:32:85:1f:17:e2:ae:
         2b:7d:e8:d3:66:52:c8:f0:e7:aa:f5:fe:ff:4a:7d:8f:31:34:
         98:19:1f:f8:7a:64:fa:56:d5:18:20:70:21:d2:8f:4c:ba:eb:
         fe:6f:2f:e2:35:ab:95:0e:3e:5e:9b:ef:fd:a7:28:a1:cc:04:
         18:31:9f:b7:69:5c:19:85:0f:c6:25:67:78:48:3d:ab:ec:94:
         35:69:50:57:d2:4b:f5:82:d1:b0:de:ef:f5:a5:15:7c:ad:38:
         95:1a:5b:d0:35:95:ea:3c:f0:0b:b5:ba:12:de:5c:b3:ca:e8:
         c2:f6:cc:a5:ef:e0:ca:59:e5:57:40:c6:e4:c2:d0:db:a9:8a:
         0b:a2:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org