Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F5DD13BC59FC866E53F6606032998AEDFCA3E2F3.cer
File:                     F5DD13BC59FC866E53F6606032998AEDFCA3E2F3.cer (raw, json)
Hash identifier:          KfyNcsYocT4c6xgUBi6LJHCWA4cSHS0VgB360Fup7fw=
Subject key identifier:   F5:DD:13:BC:59:FC:86:6E:53:F6:60:60:32:99:8A:ED:FC:A3:E2:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21694C6B6418ED79DBA525AC0453F0A9E77DCC68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dq9AmA6gmbenKW1EVyeH5jwL5Pv9Lin3b2yNqLdbknFa/0/F5DD13BC59FC866E53F6606032998AEDFCA3E2F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dq9AmA6gmbenKW1EVyeH5jwL5Pv9Lin3b2yNqLdbknFa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Mar 2023 20:15:10 +0000
Certificate not after:    Mon 25 Mar 2024 20:20:10 +0000
Subordinate resources:    AS: 262596
                          IP: 177.75.176.0/20
                          IP: 2804:694::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:69:4c:6b:64:18:ed:79:db:a5:25:ac:04:53:f0:a9:e7:7d:cc:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 27 20:15:10 2023 GMT
            Not After : Mar 25 20:20:10 2024 GMT
        Subject: CN=F5DD13BC59FC866E53F6606032998AEDFCA3E2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:7e:8d:92:e0:94:4e:7a:56:10:6f:d3:a5:
                    4b:45:57:bf:be:e9:89:79:51:c9:09:e7:80:93:3b:
                    a0:1b:54:8a:3f:63:31:39:68:fb:c0:b8:bd:ff:ff:
                    83:d9:57:bd:bd:e8:a7:2a:af:56:53:f6:15:24:aa:
                    9c:eb:e1:62:06:45:78:cd:b4:05:65:4e:32:f2:64:
                    47:90:37:bc:74:07:fb:4f:f6:ce:e1:8a:34:b1:27:
                    e2:08:d5:78:33:b7:bc:99:50:d8:4d:52:ae:7f:4e:
                    02:02:96:af:42:3b:48:bd:b3:ab:cc:0a:61:75:52:
                    3e:98:46:47:ff:26:18:4c:16:6f:05:c8:8b:0b:10:
                    27:ab:f7:58:a9:aa:01:9e:ea:53:08:df:92:84:b2:
                    e5:d6:0e:be:aa:f8:ea:da:86:9d:fd:11:7f:96:02:
                    c4:d8:16:30:64:63:d2:b0:3d:fe:07:64:e1:96:48:
                    5b:8d:92:08:af:ff:56:46:f9:c2:cd:1d:c2:81:f0:
                    15:dd:e0:4e:98:e3:db:96:e9:3c:c5:b4:95:b2:ed:
                    94:7d:a4:88:af:a2:8a:ed:fc:2e:03:76:89:69:59:
                    e3:0e:76:ea:9a:9b:0b:a9:87:10:43:d8:c3:92:03:
                    c8:58:69:3e:71:77:3a:2b:c9:ae:14:5a:9b:67:a2:
                    f8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:DD:13:BC:59:FC:86:6E:53:F6:60:60:32:99:8A:ED:FC:A3:E2:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dq9AmA6gmbenKW1EVyeH5jwL5Pv9Lin3b2yNqLdbknFa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dq9AmA6gmbenKW1EVyeH5jwL5Pv9Lin3b2yNqLdbknFa/0/F5DD13BC59FC866E53F6606032998AEDFCA3E2F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.176.0/20
                IPv6:
                  2804:694::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262596

    Signature Algorithm: sha256WithRSAEncryption
         97:50:93:10:4b:63:c6:a8:20:c5:d2:a5:e9:0e:13:ec:36:7a:
         21:13:30:db:da:b7:98:f7:16:f2:c3:fe:53:8c:cd:57:00:06:
         8f:e1:1a:9e:9c:05:47:43:05:bb:62:f3:f9:85:96:c3:ef:3b:
         4f:c6:43:95:ab:9c:d7:76:5a:88:12:5d:50:80:ee:c0:e8:2a:
         0c:77:c6:dc:a0:43:04:3d:a3:8b:6e:aa:be:95:52:08:e1:fd:
         21:c9:a1:4e:59:09:5d:4a:db:ea:7e:00:8e:6e:2b:bb:75:eb:
         bd:bf:00:c7:f4:21:39:9b:ce:e4:48:29:80:d2:f3:2c:e6:85:
         11:35:8f:1a:9f:31:b1:47:f1:e4:2e:3b:2d:f2:c7:f1:6b:26:
         5b:d7:e1:f4:2c:81:b6:7e:cd:72:25:c4:39:b8:1f:48:51:ff:
         92:4c:f0:36:17:35:64:1b:a8:df:63:f4:d1:06:b3:02:be:f8:
         94:9f:67:34:28:e0:f2:ac:30:38:08:09:be:90:8e:ab:44:eb:
         a8:b9:bf:a1:f2:62:fd:f6:4f:02:eb:e0:ca:a2:c5:5a:0b:bc:
         51:35:75:65:2e:6e:08:92:0c:fd:54:df:fb:bf:b0:10:23:73:
         ae:c6:08:45:d1:3e:76:ec:1d:0b:f1:ba:9b:e4:9e:85:bf:05:
         85:6c:6c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org