Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.cer
File:                     F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.cer (raw, json)
Hash identifier:          chskMO3lTDqNX2l7ENOLqA23gxAggRKV44URyb53unM=
Subject key identifier:   F5:EB:D2:D8:FD:46:BA:62:86:77:A6:61:76:C7:3A:BC:E3:EF:2A:EB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       66DA8FF1D96B0299BDB23B2D98A812E91816BB7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Dec 2023 17:58:04 +0000
Certificate not after:    Thu 05 Dec 2024 18:03:04 +0000
Subordinate resources:    AS: 270834
                          IP: 200.229.240.0/22
                          IP: 2804:7220::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:da:8f:f1:d9:6b:02:99:bd:b2:3b:2d:98:a8:12:e9:18:16:bb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 17:58:04 2023 GMT
            Not After : Dec  5 18:03:04 2024 GMT
        Subject: CN=F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c1:e1:19:da:40:03:e7:72:45:0b:51:97:e3:
                    ed:95:fd:22:3f:e0:e6:53:9f:b6:a8:11:2b:b1:8f:
                    53:0e:21:de:dc:6a:05:0f:df:d5:e1:64:c4:66:ce:
                    ae:e2:cb:89:61:54:cc:d9:59:cd:84:5b:fa:c0:98:
                    98:6a:cf:c4:70:25:43:75:a4:5b:2d:94:9b:f3:61:
                    7b:42:bb:43:cf:cc:9a:0b:71:53:1c:07:1b:e9:80:
                    71:2d:30:d1:3e:ca:6b:28:45:74:17:a5:82:c7:4d:
                    76:fe:6b:d3:83:86:46:1b:6d:93:9b:4c:34:55:e0:
                    31:00:a5:f6:a5:44:19:83:5e:69:38:62:60:b2:f7:
                    10:be:6a:d4:c4:ca:af:e4:79:8b:65:47:8e:58:e3:
                    6c:c5:be:09:92:ab:e1:4f:c1:48:15:5f:99:5a:82:
                    36:db:35:30:0b:18:1b:9c:d2:af:26:39:39:ef:a0:
                    eb:8d:fc:71:45:83:58:ab:60:7d:30:db:30:9c:3a:
                    c5:74:63:6a:54:c2:1f:18:36:6f:73:89:4b:77:5b:
                    6b:9f:43:65:34:2b:2b:e1:07:e4:c3:c7:35:96:5f:
                    44:00:c7:a5:f0:e6:60:c4:e8:3d:88:60:76:c5:60:
                    6f:1c:86:9a:3a:94:fc:90:ae:0b:77:7d:38:b0:3a:
                    5a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:EB:D2:D8:FD:46:BA:62:86:77:A6:61:76:C7:3A:BC:E3:EF:2A:EB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.240.0/22
                IPv6:
                  2804:7220::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270834

    Signature Algorithm: sha256WithRSAEncryption
         7d:10:00:04:65:a4:d4:13:0d:71:aa:a4:8b:f6:5c:02:c9:5c:
         30:e8:93:98:f2:31:03:cc:ba:fa:0b:ba:ac:e9:f3:0c:a3:4e:
         28:81:93:22:d1:a8:18:f3:0e:31:73:cf:40:c6:77:a9:46:c7:
         d3:28:79:34:6b:41:07:61:f4:72:6e:19:e0:08:8b:2e:b5:9b:
         a0:c6:7a:9a:2f:aa:9a:dc:72:34:df:72:81:d1:fb:22:6b:78:
         cb:ac:9a:2a:4d:42:c0:51:80:e4:33:36:2d:0c:b6:07:14:0d:
         30:f7:8b:1d:c5:5f:82:13:d6:a9:7f:f1:d8:dd:d9:eb:4d:75:
         c7:ed:ac:aa:49:03:08:cb:8d:3f:09:2d:d0:c3:2a:b6:e5:e4:
         1c:1a:2d:af:ef:c7:53:b5:6a:b5:4d:bd:f8:b8:9f:37:db:da:
         98:d2:61:ae:27:d8:46:dc:dc:6d:2b:54:38:8b:b9:13:eb:44:
         c4:46:82:e0:fa:1b:1d:9b:d2:af:bb:20:4f:b9:64:ec:c4:96:
         dc:53:f5:b5:07:0d:2e:62:31:62:ec:8c:33:e8:78:f7:10:68:
         71:62:71:d5:e7:eb:fb:8c:16:0c:d9:41:89:25:0e:1f:15:b4:
         17:3a:8c:86:8a:28:5b:bc:fb:d6:2e:16:a1:cd:52:10:1a:37:
         75:1d:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org