Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F4B92CDD483414287F7FF9F069BE4AF247E4F138.cer
File:                     F4B92CDD483414287F7FF9F069BE4AF247E4F138.cer (raw, json)
Hash identifier:          aVIc6AqRaRaR2XvpgGLv1NHAyA9GbtWupAz0Qhdf80I=
Subject key identifier:   F4:B9:2C:DD:48:34:14:28:7F:7F:F9:F0:69:BE:4A:F2:47:E4:F1:38
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2D1FBF6BF2457BAE084933322C97891A772F3678
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/F4B92CDD483414287F7FF9F069BE4AF247E4F138.mft
caRepository:             rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 15:39:47 +0000
Certificate not after:    Wed 29 May 2024 15:44:47 +0000
Subordinate resources:    AS: 264319
                          IP: 138.122.116.0/22
                          IP: 2804:2608::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1f:bf:6b:f2:45:7b:ae:08:49:33:32:2c:97:89:1a:77:2f:36:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 15:39:47 2023 GMT
            Not After : May 29 15:44:47 2024 GMT
        Subject: CN=F4B92CDD483414287F7FF9F069BE4AF247E4F138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:d5:1a:51:dc:00:76:05:43:90:24:42:39:
                    38:9c:90:ef:f5:c0:4a:54:41:74:58:51:8f:e6:af:
                    c2:b4:5b:e1:4e:72:00:e3:e0:65:f8:b3:ce:56:c7:
                    98:15:3e:6f:f1:18:60:7b:e7:c8:76:ac:80:0b:91:
                    79:36:5d:df:2f:91:01:31:3f:cf:49:7f:0b:a9:94:
                    38:88:a7:1d:cb:67:d3:11:a1:c8:6a:82:62:bb:47:
                    5b:3c:68:a0:5b:73:75:ec:73:05:42:22:0b:04:c6:
                    b5:e0:3f:1f:18:0f:4f:0b:26:b7:6f:3c:1f:28:2b:
                    73:f8:59:24:ca:0f:d7:b9:49:ee:22:c7:43:b9:b3:
                    00:38:e4:0f:53:f8:6a:53:70:03:8e:3f:fe:a8:22:
                    06:65:64:7c:0f:0d:28:04:ae:26:6e:ad:01:6f:73:
                    98:bd:7b:ec:4c:e4:e5:40:60:20:90:a5:d4:49:b9:
                    6d:f0:95:5b:a0:c4:ca:f5:bf:ee:28:c4:8a:ca:91:
                    09:31:14:47:b3:55:fc:92:33:32:6d:f8:85:ca:36:
                    24:fe:a9:ee:ee:f5:01:da:d5:ec:5f:ee:6c:6e:62:
                    bb:a5:51:56:90:29:24:cf:a1:16:1c:0a:4d:4b:e6:
                    f7:c4:7f:54:98:ee:5f:58:d1:10:36:b3:9a:ec:05:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:B9:2C:DD:48:34:14:28:7F:7F:F9:F0:69:BE:4A:F2:47:E4:F1:38
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/F4B92CDD483414287F7FF9F069BE4AF247E4F138.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.116.0/22
                IPv6:
                  2804:2608::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264319

    Signature Algorithm: sha256WithRSAEncryption
         6a:11:68:b3:ea:81:d7:99:f3:d2:95:07:29:65:7d:ab:9c:c3:
         a4:47:d6:89:8d:b6:d0:17:7b:37:03:2c:b8:fa:67:53:25:60:
         67:a6:64:a7:c9:bc:3f:24:31:8c:7b:e1:a6:80:ec:db:7a:41:
         17:27:b1:48:d7:11:92:58:d0:15:b9:16:f1:94:ac:db:47:ce:
         41:fa:df:bf:d4:c4:8b:22:49:1a:ba:4b:9d:f6:eb:1b:c2:cd:
         3a:5f:36:ac:0c:99:df:b6:16:5e:2a:9e:f7:7b:2e:bc:e4:0e:
         61:8d:11:28:be:80:24:a7:43:c6:11:b1:23:0b:95:a1:41:aa:
         99:65:c0:04:78:46:6a:a5:22:b4:d4:0a:7b:75:23:ae:0e:9f:
         d2:74:87:72:b6:b4:89:1b:6c:d8:2a:a9:92:7e:f5:ff:73:7d:
         3e:6e:5f:9d:30:88:cb:73:51:2f:03:49:04:20:c5:5f:5d:a3:
         56:71:1a:f7:a4:5d:45:c1:59:81:bd:d1:9c:7a:10:c2:ae:78:
         8f:77:3f:9b:60:7d:2a:c0:8d:84:8d:40:dc:f1:a5:9d:a1:ae:
         36:37:74:66:0c:52:43:de:25:bf:c8:ed:45:39:83:44:6f:8c:
         dd:21:3b:68:84:4b:d8:b8:58:47:fd:57:2a:1d:e0:34:60:31:
         a8:b2:57:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org