Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB.cer
File:                     F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB.cer (raw, json)
Hash identifier:          dzBwd+2oiAhaHfbe2TxoDEWMomg/ZOT4xlTaQfjh+Qs=
Subject key identifier:   F3:C5:03:AB:BC:39:04:47:BF:8B:9D:62:27:C8:52:8A:8D:2A:3A:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E05B428879FEAF992B145692E88095B8B627789
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Jul 2022 15:47:38 +0000
Certificate not after:    Wed 05 Jul 2023 15:52:38 +0000
Subordinate resources:    AS: 262842
                          IP: 177.10.32.0/21
                          IP: 2804:7338::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:05:b4:28:87:9f:ea:f9:92:b1:45:69:2e:88:09:5b:8b:62:77:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  6 15:47:38 2022 GMT
            Not After : Jul  5 15:52:38 2023 GMT
        Subject: CN=F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:91:e5:cf:12:05:fe:1b:95:6c:81:16:65:
                    05:a9:27:1e:cf:93:7f:76:69:11:63:52:b7:66:c8:
                    cd:95:be:5e:4f:f9:8c:58:0a:76:a2:70:59:fc:c9:
                    5e:2e:1c:f9:a7:36:1b:3d:a9:32:22:7b:7f:49:90:
                    ec:d4:cd:68:a8:19:74:fc:fa:c9:e9:fd:ac:2f:3e:
                    ba:41:2e:0f:09:3c:cf:64:3a:26:54:9d:3c:52:0e:
                    89:4b:63:8d:27:d5:2a:e2:ab:1c:53:b7:3c:91:6a:
                    8a:68:6c:f2:e4:d4:0d:f9:f5:96:a7:9c:aa:61:af:
                    32:6f:7a:66:fb:7f:c2:6e:66:f3:bb:1d:f7:07:4e:
                    02:00:cf:f4:fb:c5:aa:5a:01:2f:f2:88:ae:5c:0e:
                    d4:78:91:28:28:7b:e4:16:0d:d5:7e:32:9b:b3:4a:
                    8b:bc:ad:45:78:b0:34:89:be:84:19:5e:33:36:37:
                    5f:65:1b:6f:49:98:37:fc:c8:8a:21:72:de:93:ee:
                    7d:69:17:7c:c0:ea:1d:d9:9e:9f:55:1a:47:f5:21:
                    78:d2:ad:9a:8b:04:61:e2:99:13:7f:1e:2f:65:49:
                    82:79:41:52:ca:f9:a7:c4:72:a7:d3:c8:49:53:c2:
                    19:47:a1:80:c6:f1:5c:19:50:58:cb:0c:c7:9b:d6:
                    a3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:C5:03:AB:BC:39:04:47:BF:8B:9D:62:27:C8:52:8A:8D:2A:3A:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.32.0/21
                IPv6:
                  2804:7338::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262842

    Signature Algorithm: sha256WithRSAEncryption
         59:bb:13:68:38:b7:7c:11:16:f5:a1:ec:cb:d5:6d:d2:91:b0:
         4a:b4:94:f3:43:34:92:b4:a5:2f:71:0c:df:08:47:7b:ff:cf:
         62:32:b3:9a:76:b8:11:95:2a:19:43:52:3e:18:1f:f2:3b:0c:
         8b:95:d8:a2:b3:d6:2a:5b:1a:d5:a8:36:fb:49:8b:1f:6f:a9:
         2f:b1:81:67:94:b1:ad:db:8e:0c:a5:c5:28:ca:8f:6e:02:3b:
         55:50:04:68:17:da:88:b1:64:fc:fb:13:29:e1:2b:19:40:72:
         7f:3e:0a:e2:6b:19:b1:88:e8:db:a4:38:87:1f:74:fc:ef:18:
         f6:85:56:66:a9:52:60:af:d3:87:26:1d:ce:16:fa:da:9f:f6:
         e2:b5:e9:4a:92:38:0b:1c:5e:87:9e:3d:7a:4d:18:40:b7:f4:
         8d:82:cf:8d:ed:36:5a:86:8e:82:27:bd:fa:47:ac:cc:ed:77:
         4c:1d:02:e4:7f:6e:09:69:94:cd:06:37:a4:68:38:6b:76:af:
         63:dd:f9:88:58:8e:d7:44:70:b5:82:47:f7:2c:25:26:8a:2b:
         95:04:21:1f:a6:b7:76:34:40:4b:fe:15:ca:da:b1:b6:9b:f5:
         51:d3:8a:3d:81:f8:94:5c:87:91:f9:d2:7f:74:0b:13:7b:25:
         7a:ed:64:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org