Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F4D98A2C5332B6A68C43070F826D5B1FA96A99A9.cer
File:                     F4D98A2C5332B6A68C43070F826D5B1FA96A99A9.cer (raw, json)
Hash identifier:          YM5tPMQdL9aZKiV47HK84qP/DFTHKTkjaKb8+BV5R+8=
Subject key identifier:   F4:D9:8A:2C:53:32:B6:A6:8C:43:07:0F:82:6D:5B:1F:A9:6A:99:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CBB02F4B35A01D319F3C8B3E8EEBF95795BB472
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/0/F4D98A2C5332B6A68C43070F826D5B1FA96A99A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Sep 2023 14:42:05 +0000
Certificate not after:    Mon 09 Sep 2024 14:47:05 +0000
Subordinate resources:    AS: 264221
                          AS: 269384
                          IP: 45.185.156.0/22
                          IP: 138.117.36.0/22
                          IP: 2804:2468::/32
                          IP: 2804:63cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bb:02:f4:b3:5a:01:d3:19:f3:c8:b3:e8:ee:bf:95:79:5b:b4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 11 14:42:05 2023 GMT
            Not After : Sep  9 14:47:05 2024 GMT
        Subject: CN=F4D98A2C5332B6A68C43070F826D5B1FA96A99A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:e2:53:7a:95:31:ac:56:b3:e4:16:3a:eb:
                    cf:20:c6:82:6c:50:98:f4:27:a5:42:a0:32:05:61:
                    f9:96:9f:6d:60:f1:91:24:da:18:1d:28:2a:82:61:
                    ca:a7:38:87:87:2c:af:13:8c:1e:ec:04:60:cf:f2:
                    db:ad:98:9d:9b:b5:0f:07:ec:e3:61:9d:9a:7f:b3:
                    1f:81:5e:d2:15:79:6c:c6:35:d7:8d:d8:18:bc:69:
                    b8:55:5b:60:fd:56:84:99:f6:e5:1f:08:42:ac:ec:
                    a3:c3:b0:b6:a9:f8:f1:db:05:3a:3b:6a:69:73:bc:
                    a8:ce:19:00:ed:e8:cf:1a:15:80:86:a7:52:85:c5:
                    99:9f:e5:fa:c7:7c:fc:a5:ee:2d:d2:8d:46:20:51:
                    5e:44:e7:e3:40:85:a2:bb:f9:87:bd:b1:89:71:ae:
                    9f:9b:f0:06:20:5f:ff:65:0b:9e:0e:8a:a4:b0:a0:
                    36:24:a5:8f:97:d3:07:51:7c:81:92:6e:c9:8a:c3:
                    03:ae:41:52:93:9f:7a:c4:19:b8:ba:22:6a:7f:d3:
                    d1:cf:ab:a1:2e:54:0c:68:b4:2c:19:d3:a3:04:13:
                    d8:5d:16:c7:35:f3:3a:4c:ea:44:be:e5:c0:01:03:
                    98:39:4c:a1:90:d9:6a:ca:b1:e0:ab:6b:bb:da:db:
                    8f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:D9:8A:2C:53:32:B6:A6:8C:43:07:0F:82:6D:5B:1F:A9:6A:99:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/0/F4D98A2C5332B6A68C43070F826D5B1FA96A99A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.156.0/22
                  138.117.36.0/22
                IPv6:
                  2804:2468::/32
                  2804:63cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264221
                  269384

    Signature Algorithm: sha256WithRSAEncryption
         8a:a0:82:5b:fe:da:3a:b1:f9:76:31:f0:7a:32:05:bb:17:c0:
         22:2c:b6:d9:8d:c2:7c:5c:d2:7f:5b:91:08:0f:0d:90:05:2e:
         bd:3e:9e:29:3e:f2:10:85:b7:8f:31:55:d6:94:da:35:67:1f:
         bd:70:75:cf:53:d0:42:b9:71:84:cf:d3:54:57:d6:6a:5b:73:
         1a:bc:3a:f8:f3:06:86:70:0d:0e:ae:a6:be:86:68:b8:93:8e:
         0e:ee:75:4f:b5:0d:b9:84:db:e4:a4:e7:4a:18:79:df:34:2a:
         df:e7:6e:6c:ed:f3:40:e4:59:2d:b9:62:1e:c9:2a:ca:2a:3c:
         1d:4d:ef:af:17:7b:88:c1:1d:5c:5e:44:12:98:06:b8:c8:27:
         cb:c5:41:86:ed:2b:83:89:3e:1c:e6:4f:9c:b4:8a:70:09:18:
         5a:6e:8d:f4:5a:2e:c8:ff:4e:f4:8d:8d:fb:36:b4:d6:24:95:
         3d:df:1a:ff:0f:5e:b0:16:9a:ed:07:1a:6a:60:d1:2c:56:58:
         fa:89:a5:d5:f2:49:96:27:d2:26:d5:d1:ae:51:08:70:dc:f8:
         9e:02:e9:9d:b9:49:64:0f:df:4d:e7:b0:d0:7e:93:c3:64:3d:
         00:b3:b6:e6:4b:2d:5d:70:ed:d7:8a:77:15:e3:99:96:90:0e:
         32:06:20:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org