Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117.cer
File:                     F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117.cer (raw, json)
Hash identifier:          dIX4A/2kJze7ojn0iL06Tju2ICTAdaflm8P1gg6taWk=
Subject key identifier:   F3:CF:DD:89:68:DF:34:83:D6:AD:86:FE:2B:6A:AF:CA:B6:65:01:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0BBFD1A4DD837F45C4F7E3DAAEFB28BF5F46D6E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Oct 2023 18:24:32 +0000
Certificate not after:    Fri 11 Oct 2024 18:29:32 +0000
Subordinate resources:    AS: 268449
                          IP: 45.161.72.0/22
                          IP: 2804:5164::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bf:d1:a4:dd:83:7f:45:c4:f7:e3:da:ae:fb:28:bf:5f:46:d6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 18:24:32 2023 GMT
            Not After : Oct 11 18:29:32 2024 GMT
        Subject: CN=F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:d0:e1:f6:e2:32:b7:6a:83:8d:a7:78:57:
                    75:27:da:49:0f:95:71:23:3e:c7:5b:8b:4e:24:97:
                    b5:f5:86:de:0b:1f:38:42:26:25:1d:d2:11:d2:03:
                    5c:e9:71:71:86:0a:9c:e7:10:3f:0a:53:ed:11:9f:
                    8c:3a:7f:1c:69:31:65:d9:b3:3e:02:e5:fc:ef:d6:
                    6f:3d:00:e2:ed:90:88:57:9c:47:59:95:23:1c:a9:
                    68:ee:53:51:ce:38:98:c1:0d:55:5e:66:af:48:dd:
                    a3:ee:9e:07:60:13:c2:53:c5:5f:eb:8e:ff:58:59:
                    81:4c:cc:00:fe:2c:65:06:53:89:90:89:49:bf:ef:
                    7b:c3:5e:0d:ac:24:62:f9:58:d8:08:02:e7:ba:b6:
                    c6:eb:d9:d3:f6:cf:74:a3:65:fc:c8:b0:17:62:34:
                    40:a6:31:e6:e7:40:a0:86:68:78:7b:5b:10:b3:7d:
                    11:66:06:53:ca:bc:79:5e:36:a4:b4:88:43:80:fc:
                    d4:c9:de:63:79:f3:61:b0:63:8b:57:41:8e:f2:15:
                    45:f0:c2:ad:7a:d0:02:64:6f:47:e7:16:b7:72:ce:
                    69:4d:2a:9d:58:05:1b:b0:6f:11:a1:12:cd:87:44:
                    49:12:4b:68:a1:c4:a9:db:b8:62:80:b6:25:83:d1:
                    26:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:CF:DD:89:68:DF:34:83:D6:AD:86:FE:2B:6A:AF:CA:B6:65:01:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.72.0/22
                IPv6:
                  2804:5164::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268449

    Signature Algorithm: sha256WithRSAEncryption
         6e:17:30:3d:fc:ac:4f:0c:da:e8:ec:76:d2:1a:fa:4e:80:20:
         d9:0f:96:8f:80:f5:88:10:f4:db:6e:4c:5f:a7:57:fb:3c:03:
         17:d0:b3:79:af:4f:93:8f:c5:c1:d9:3b:74:dc:77:4d:2d:04:
         f7:e3:a8:4b:60:8a:9a:6c:b1:ce:e7:7b:ec:1c:1f:b5:e3:05:
         22:11:06:a9:c5:92:e4:57:15:e2:08:3c:f4:c8:76:b4:bb:c4:
         e5:ee:c7:e6:cf:a5:3a:5f:31:5c:fd:d7:ca:9e:6d:4e:07:4d:
         23:54:2a:66:f3:d2:31:77:9f:14:0a:fb:8e:c0:5b:ea:d1:08:
         f4:cd:3d:df:67:1e:11:f6:88:6f:5d:7b:77:72:26:6b:5b:b6:
         aa:ad:4e:02:2d:6e:81:cb:f6:b5:bc:14:58:81:93:a1:1b:41:
         ed:f5:7f:cb:62:b6:bb:d5:d0:69:52:57:eb:32:1d:69:6a:35:
         4e:32:7c:8b:3e:65:88:37:08:67:fd:27:d7:68:64:0c:1b:6a:
         11:bd:ba:07:c3:17:7f:7d:41:82:75:4b:b6:94:70:60:b0:a7:
         3d:23:77:62:4e:2b:ed:c1:92:51:64:92:e0:a9:88:b0:9f:9e:
         c6:9c:b1:a8:18:db:30:8b:79:bf:e3:e2:3b:f3:c6:fe:56:3d:
         e7:bb:c8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org