Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F50771FCAEBD777B92C44C7C32113A788301DBC7.cer
File:                     F50771FCAEBD777B92C44C7C32113A788301DBC7.cer (raw, json)
Hash identifier:          AN8uHBN0p0N7qa73OILKPp/jGAbtrmx6wn43/++3PeM=
Subject key identifier:   F5:07:71:FC:AE:BD:77:7B:92:C4:4C:7C:32:11:3A:78:83:01:DB:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1BEB0F40DAA57106F9127EA4B3B308880AA5B312
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/F50771FCAEBD777B92C44C7C32113A788301DBC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 19:38:23 +0000
Certificate not after:    Mon 17 Feb 2025 19:43:23 +0000
Subordinate resources:    AS: 268067
                          IP: 45.167.136.0/22
                          IP: 2804:5778::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:eb:0f:40:da:a5:71:06:f9:12:7e:a4:b3:b3:08:88:0a:a5:b3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 19:38:23 2024 GMT
            Not After : Feb 17 19:43:23 2025 GMT
        Subject: CN=F50771FCAEBD777B92C44C7C32113A788301DBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:22:0d:be:32:0c:ed:3e:22:e2:ce:d3:d4:
                    75:a1:08:52:24:fd:44:62:c5:19:92:3b:79:ca:73:
                    8f:85:ee:e4:6c:56:c6:9d:85:e6:e0:72:e6:53:f9:
                    31:d2:5b:1f:e1:18:99:cb:e6:fb:e1:4a:2a:f6:8d:
                    a1:c0:13:40:0f:f8:18:1a:82:8d:56:11:a3:7e:0f:
                    3a:6e:d2:95:dc:83:ad:ea:46:a2:76:aa:f5:71:18:
                    d0:55:a2:54:1d:dd:47:39:5d:1d:dc:35:99:4b:a3:
                    1f:a1:a1:17:22:69:1a:f3:9d:d0:48:f8:42:42:bf:
                    e7:35:fd:61:2d:7d:57:85:be:5d:57:70:49:a4:06:
                    bd:cc:e4:31:d2:b4:68:a3:0e:d6:ee:bf:b4:6c:9f:
                    a6:31:d9:6e:47:f4:bf:7f:24:2c:b9:0a:a8:c9:54:
                    aa:6f:ef:7c:0b:c7:3d:8f:b6:db:db:a0:2e:0a:14:
                    0c:72:b5:d4:28:28:e6:38:26:a9:8e:84:2d:3d:48:
                    e4:cd:e1:d0:77:e1:18:a5:15:6e:4f:1e:4c:40:78:
                    ad:c2:7b:77:20:92:fa:c4:05:df:4a:a2:17:67:d1:
                    b9:66:42:3f:26:6b:db:69:5e:78:45:6e:67:f5:2f:
                    56:c5:3e:28:17:b3:27:fc:eb:fb:22:62:75:a9:23:
                    a4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:07:71:FC:AE:BD:77:7B:92:C4:4C:7C:32:11:3A:78:83:01:DB:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/F50771FCAEBD777B92C44C7C32113A788301DBC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.136.0/22
                IPv6:
                  2804:5778::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268067

    Signature Algorithm: sha256WithRSAEncryption
         b1:46:68:7f:c3:de:02:2a:10:80:14:1e:d7:75:db:40:af:5f:
         86:85:63:ca:c9:e2:c3:d3:58:30:89:02:f8:99:51:f4:2b:88:
         ff:f0:c9:ae:37:fb:a4:55:9c:9d:d6:e3:a9:8b:ea:ca:11:6d:
         d9:47:52:44:86:2a:7f:f9:c1:09:64:f6:3f:ee:e3:ba:ff:91:
         29:ff:dd:d6:dc:bb:2f:3e:48:b8:c5:15:a7:c2:dd:e3:bd:7f:
         01:11:ad:3e:1a:91:04:e4:69:30:31:61:62:c6:b7:62:ab:e5:
         92:da:72:4c:9c:e5:a3:e3:4a:85:a2:5f:fb:9a:af:5c:d8:2b:
         ce:3a:4a:1a:24:4c:12:61:33:f5:22:71:b5:92:6c:ad:37:79:
         a6:31:87:3f:9b:55:b3:a4:d5:1a:67:45:35:f2:90:b6:2f:ac:
         9f:73:b4:e8:0d:a3:f1:2a:6d:05:ee:9c:ae:47:7e:99:c4:bd:
         e1:94:75:90:c6:9e:92:dc:f3:74:66:9d:fd:16:eb:b5:63:73:
         c9:91:47:88:76:85:29:a3:04:3c:5c:25:76:01:c6:84:35:8c:
         09:c6:fc:d1:63:13:69:92:8b:8d:0b:dc:1f:ab:b6:6f:8e:31:
         58:d0:6e:84:8e:37:58:88:14:4d:8a:31:d7:51:e1:32:30:73:
         6d:4d:8a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org