Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F4BE2DD457247166D80DC68E8A77C69278A39E0A.cer
File:                     F4BE2DD457247166D80DC68E8A77C69278A39E0A.cer (raw, json)
Hash identifier:          M7IpqEbQ1wjiefypoowcl82ixp2RNOiNvyyBfF3d7nw=
Subject key identifier:   F4:BE:2D:D4:57:24:71:66:D8:0D:C6:8E:8A:77:C6:92:78:A3:9E:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       128954B74060DD8945B82FBABA529C949EEDC390
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/F4BE2DD457247166D80DC68E8A77C69278A39E0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Aug 2023 17:59:56 +0000
Certificate not after:    Tue 20 Aug 2024 18:04:56 +0000
Subordinate resources:    AS: 262355
                          IP: 177.91.172.0/22
                          IP: 177.125.216.0/22
                          IP: 186.195.112.0/20
                          IP: 186.233.188.0/22
                          IP: 2804:82c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:89:54:b7:40:60:dd:89:45:b8:2f:ba:ba:52:9c:94:9e:ed:c3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 22 17:59:56 2023 GMT
            Not After : Aug 20 18:04:56 2024 GMT
        Subject: CN=F4BE2DD457247166D80DC68E8A77C69278A39E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:92:21:94:de:ca:a9:53:7b:92:12:f2:45:5a:
                    73:2a:55:29:10:78:16:a9:3f:d5:12:17:f4:d3:16:
                    7d:46:ce:d2:9f:37:44:05:35:84:7f:bb:a1:d1:1f:
                    82:ab:32:30:93:12:52:7d:3d:17:25:e1:8c:fe:bd:
                    f7:68:58:e4:bf:29:c4:4f:58:9c:05:49:06:90:77:
                    09:20:0f:13:5b:23:eb:b6:63:96:01:d7:23:18:61:
                    fe:27:ae:59:11:51:c2:e8:8f:0b:3a:7c:5f:2e:07:
                    2f:9d:95:46:9a:f9:1c:91:f2:14:25:2f:19:77:ce:
                    82:a2:46:52:3a:8d:e0:65:84:8c:11:ad:71:ca:b7:
                    d4:18:f1:1f:cc:ad:51:38:94:21:3a:c9:f4:b2:4b:
                    9a:50:54:32:c9:49:f0:43:c6:44:c3:6c:81:88:f3:
                    fd:eb:12:64:48:91:74:57:ed:0b:b7:fe:4a:55:0f:
                    80:5c:b8:cf:32:7a:51:5c:cd:15:ff:16:b7:cb:db:
                    83:5d:1c:4a:79:d7:4c:73:67:12:a4:1f:e0:10:7d:
                    65:fa:ee:b4:69:07:d8:6a:85:57:46:d5:2b:74:71:
                    1b:2b:e7:cf:86:e4:9a:00:7b:f0:3a:a8:09:3b:1d:
                    d8:87:b9:f8:3e:8b:be:27:9b:20:a2:64:aa:30:5d:
                    d2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:BE:2D:D4:57:24:71:66:D8:0D:C6:8E:8A:77:C6:92:78:A3:9E:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/F4BE2DD457247166D80DC68E8A77C69278A39E0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.172.0/22
                  177.125.216.0/22
                  186.195.112.0/20
                  186.233.188.0/22
                IPv6:
                  2804:82c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262355

    Signature Algorithm: sha256WithRSAEncryption
         20:34:59:0b:10:51:9a:44:48:a3:f7:e4:02:a2:65:c2:2d:d4:
         a3:34:6e:1d:12:f3:62:09:88:c3:81:dd:7d:c6:ec:79:31:05:
         03:b0:70:28:10:f2:83:45:0c:ff:4e:f8:23:79:3c:8b:32:00:
         aa:d3:3b:7d:fa:c9:e8:cc:ed:c6:44:4c:55:63:d2:fe:e8:33:
         22:f3:e5:ab:28:df:83:b8:9a:ce:a4:8a:18:25:36:ef:c7:68:
         10:31:9b:b2:f0:e9:9c:6a:bf:2f:23:89:a1:67:a9:30:57:fd:
         de:57:7c:38:b8:11:a4:d8:19:be:8e:96:3e:d4:f5:b3:5d:f6:
         f1:3d:5d:b5:46:4d:7f:d7:ab:7b:dd:63:87:3e:19:4c:93:2e:
         62:dd:15:42:a6:00:53:eb:b4:8b:b5:ce:22:2a:1a:7f:b1:17:
         59:11:77:35:ff:62:7d:7a:7c:c4:96:8b:5c:f9:a2:6e:3f:08:
         87:bc:44:46:0b:c7:62:7f:03:20:3c:cd:83:15:bc:f8:8a:c8:
         b5:4a:d3:14:b9:b7:d9:41:46:33:8f:90:58:2d:16:fa:7f:e2:
         73:0d:4d:14:64:89:af:0d:d7:05:56:27:08:e8:47:86:10:45:
         1e:59:ce:90:6e:6d:9c:33:f9:17:f0:fd:e7:99:1d:e3:6b:a7:
         29:eb:9c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org