Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F3E1A25FF6AAC5758407A4EE4BC5F394C1A573E0.cer
File:                     F3E1A25FF6AAC5758407A4EE4BC5F394C1A573E0.cer (raw, json)
Hash identifier:          Rr0qYEp7HVumJMK+us9kocMAPNAM+S9ax+ao16x4Jwk=
Subject key identifier:   F3:E1:A2:5F:F6:AA:C5:75:84:07:A4:EE:4B:C5:F3:94:C1:A5:73:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       50583563029E0C91D0E02F9B3CFDD0896F2399E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/F3E1A25FF6AAC5758407A4EE4BC5F394C1A573E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Aug 2021 15:55:47 +0000
Certificate not after:    Fri 26 Aug 2022 16:00:47 +0000
Subordinate resources:    AS: 271014
                          IP: 191.7.104.0/22
                          IP: 2804:74f4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:58:35:63:02:9e:0c:91:d0:e0:2f:9b:3c:fd:d0:89:6f:23:99:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 27 15:55:47 2021 GMT
            Not After : Aug 26 16:00:47 2022 GMT
        Subject: CN=F3E1A25FF6AAC5758407A4EE4BC5F394C1A573E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:b1:98:40:c4:4f:4a:e2:aa:73:3a:f4:de:
                    6d:15:41:42:4d:4f:35:fe:cb:e7:3c:69:27:87:fe:
                    01:bc:52:d5:67:35:fb:c1:4a:c5:ee:06:bb:d4:2f:
                    09:4c:82:25:0d:0f:53:1d:98:b7:7e:50:56:86:37:
                    a5:2b:fb:d6:ec:6f:3f:fb:11:5a:57:ef:aa:7e:1a:
                    26:93:cb:bb:20:c9:81:b8:6c:71:95:76:99:bf:5c:
                    18:c0:1c:fc:e0:67:d7:d7:bb:12:ba:19:a2:04:20:
                    0b:1e:4d:35:fe:a3:88:cb:36:5d:2f:5c:26:7b:da:
                    d0:44:c2:dd:6d:95:8d:7f:8e:36:8e:34:cb:ee:94:
                    f3:83:be:55:24:ba:65:37:db:75:93:a9:e4:5c:ea:
                    4c:bc:17:b1:e1:91:c8:c0:f1:94:f6:f2:39:16:73:
                    6f:c7:f0:1c:49:98:57:89:b0:5b:fc:34:ab:81:36:
                    7e:f4:08:c8:84:51:4b:de:91:8a:3a:17:bc:80:0e:
                    af:3b:74:17:ce:23:45:fa:30:01:c8:4b:3e:3a:be:
                    e6:88:ad:fc:05:f3:57:bf:cf:35:c0:3c:8c:45:26:
                    f4:83:31:8a:ae:6e:22:6c:8b:a5:df:7b:54:25:3d:
                    49:ea:b8:30:6b:80:41:45:f9:4f:0f:31:7f:79:6b:
                    52:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:E1:A2:5F:F6:AA:C5:75:84:07:A4:EE:4B:C5:F3:94:C1:A5:73:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/F3E1A25FF6AAC5758407A4EE4BC5F394C1A573E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.104.0/22
                IPv6:
                  2804:74f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271014

    Signature Algorithm: sha256WithRSAEncryption
         5d:3e:09:10:a6:ef:8d:90:b4:1b:0f:db:a5:56:89:99:76:08:
         72:01:ed:4d:db:fb:46:56:43:44:bb:97:fa:f9:c1:9c:c2:3f:
         c4:f3:4d:57:11:ff:7f:0d:c7:e6:6e:f0:a5:96:56:7f:4b:0b:
         f2:0b:2d:8f:54:78:7c:a4:a0:16:0b:7d:9d:14:3d:7e:c3:36:
         f2:b5:03:6c:ce:0c:08:6a:02:61:59:bb:cf:cf:53:6c:b9:49:
         30:1f:18:f6:43:bb:92:43:e8:cc:5a:9d:43:a4:11:2b:f1:a2:
         d0:13:2e:72:a4:75:74:cb:b8:cb:78:1c:c9:d3:9d:41:2d:5e:
         2a:2d:71:65:98:89:01:77:3f:72:c8:73:da:92:4d:ea:27:aa:
         8b:fa:4b:fd:5a:0b:ad:be:a7:ab:1d:6f:ff:60:f5:61:2a:f0:
         c3:0c:7a:30:b6:50:dd:24:50:43:f9:34:bf:ed:21:95:6c:98:
         c4:b6:8c:ea:97:6c:ec:b4:0e:13:b3:c9:68:9b:e6:f1:1b:66:
         a2:75:47:7b:53:26:26:ca:87:58:0a:c3:0e:c0:6e:00:17:13:
         ec:18:3e:ce:fd:1f:9f:8e:58:9f:d1:f0:61:34:51:19:86:6b:
         98:2d:43:bb:e2:e5:9f:dd:64:9b:0b:be:4c:a7:9e:de:f0:b6:
         b4:eb:5e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:50:42 2025 by rpki-client