Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F4DA99F0BF900653CEF6C8BCC8C14BD016DEBDA1.cer
File:                     F4DA99F0BF900653CEF6C8BCC8C14BD016DEBDA1.cer (raw, json)
Hash identifier:          Qd4X+JzICZaSCcwgo8OGshhksgWMUNrzuPyXNEFYjUs=
Subject key identifier:   F4:DA:99:F0:BF:90:06:53:CE:F6:C8:BC:C8:C1:4B:D0:16:DE:BD:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C58490876009C2B37F6C4FDED8FC311FEC20089
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/F4DA99F0BF900653CEF6C8BCC8C14BD016DEBDA1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 04:57:25 +0000
Certificate not after:    Thu 13 Feb 2025 05:02:25 +0000
Subordinate resources:    AS: 266156
                          IP: 192.144.68.0/22
                          IP: 2804:3b8c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:58:49:08:76:00:9c:2b:37:f6:c4:fd:ed:8f:c3:11:fe:c2:00:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 04:57:25 2024 GMT
            Not After : Feb 13 05:02:25 2025 GMT
        Subject: CN=F4DA99F0BF900653CEF6C8BCC8C14BD016DEBDA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:a1:3f:cd:3c:ef:12:ba:10:ff:69:6e:91:
                    66:c7:ca:ea:b3:88:cf:ed:b7:db:97:a9:31:ba:23:
                    bb:bc:2c:ae:b7:7c:8e:d3:34:c0:37:24:96:0d:5c:
                    c2:e6:37:1d:d4:13:a4:81:05:2e:57:b2:88:b4:c7:
                    22:37:96:07:7d:32:64:2b:71:78:56:06:95:1e:cf:
                    9a:77:4f:48:c7:f4:0b:d7:2e:a3:aa:63:51:89:2e:
                    1e:73:ea:dc:06:9b:ef:89:f6:be:84:7a:85:78:a8:
                    bd:88:ab:57:9f:11:a1:e1:fb:62:11:36:3d:42:31:
                    57:01:a3:ec:1d:90:01:cb:75:b9:d5:20:8a:56:b7:
                    9a:6f:01:07:6b:56:47:0f:12:0c:92:6a:ca:56:30:
                    c0:27:4d:c9:ab:82:76:92:39:65:d6:43:af:ac:38:
                    60:f2:be:90:6d:00:7c:4c:50:c0:46:5b:2f:28:8d:
                    da:b7:bf:b8:9c:79:e4:b5:33:e5:f5:21:e8:15:f7:
                    c3:ac:78:81:bb:75:49:3e:5e:98:bd:24:b0:05:5a:
                    0f:ca:51:aa:8e:21:1c:e1:4f:38:55:0b:cd:e3:ff:
                    90:9f:ba:00:b0:5f:97:06:1d:95:ab:53:7d:8e:34:
                    52:b0:50:76:e6:f6:47:0b:06:4b:ec:72:20:e0:40:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:DA:99:F0:BF:90:06:53:CE:F6:C8:BC:C8:C1:4B:D0:16:DE:BD:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/F4DA99F0BF900653CEF6C8BCC8C14BD016DEBDA1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.68.0/22
                IPv6:
                  2804:3b8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266156

    Signature Algorithm: sha256WithRSAEncryption
         75:6d:fa:bb:a4:47:a9:fc:ab:d1:06:8e:80:9e:cc:37:37:f2:
         56:63:37:df:24:87:c5:17:03:96:52:ca:ea:22:4b:2d:f8:2c:
         0a:62:f5:99:19:a2:44:cf:80:05:ae:33:c6:74:2f:9f:d8:e3:
         94:4d:08:06:aa:a1:00:c1:ac:27:0f:02:9d:93:0c:81:f2:17:
         ac:bd:c6:b3:04:7a:ef:6f:d6:79:19:29:f5:7a:e3:39:21:3e:
         79:b8:d4:4b:4f:18:19:26:4c:04:47:fe:23:38:27:1c:e2:54:
         f1:85:d5:3f:dc:75:34:d1:5e:45:ae:ab:5e:6b:0e:af:7c:e0:
         a8:48:f9:d6:10:8d:5c:40:91:90:63:0d:66:e1:92:90:7f:01:
         48:39:a7:44:ec:dd:51:c0:d1:1b:f3:2b:4f:8f:2b:5b:f8:60:
         67:8e:08:af:64:e1:9c:d1:d7:1b:38:a2:60:9b:48:0c:04:69:
         4c:ac:84:15:f3:1c:bf:e5:2b:45:79:6f:ca:f4:13:0d:a5:4b:
         ff:58:58:8d:4d:21:50:b5:9a:d0:ae:c3:65:d3:59:9e:80:35:
         06:cb:2f:77:6e:b9:6e:26:e3:c6:e9:47:8d:7e:ba:91:cd:c7:
         5e:08:76:e0:cd:96:0c:4b:98:a4:b5:00:34:ad:21:5c:e5:2f:
         2a:35:00:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org