Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F7F26D280644255EA04786648F3430937522AE87.cer
File:                     F7F26D280644255EA04786648F3430937522AE87.cer (raw, json)
Hash identifier:          hL7zC/U8VcE8dGK+BvC79W+gU+yxWVgiILacBOgn6u4=
Subject key identifier:   F7:F2:6D:28:06:44:25:5E:A0:47:86:64:8F:34:30:93:75:22:AE:87
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6795F7AA76CB75E7ED581515781C121D595A96AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/F7F26D280644255EA04786648F3430937522AE87.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 12:39:06 +0000
Certificate not after:    Fri 01 Nov 2024 12:44:06 +0000
Subordinate resources:    AS: 266471
                          IP: 170.83.48.0/22
                          IP: 2804:3858::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:95:f7:aa:76:cb:75:e7:ed:58:15:15:78:1c:12:1d:59:5a:96:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 12:39:06 2023 GMT
            Not After : Nov  1 12:44:06 2024 GMT
        Subject: CN=F7F26D280644255EA04786648F3430937522AE87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3a:ef:54:3e:4e:2e:9f:28:e5:95:20:32:68:
                    7f:42:4e:11:5e:f4:c7:34:89:a7:5f:97:28:fe:52:
                    83:21:e0:57:d6:8a:39:51:b5:70:f6:a8:2d:a4:bd:
                    d1:54:ad:87:69:01:15:3a:7e:b7:6a:40:80:e0:cf:
                    e8:7d:3a:61:1b:d6:27:14:9d:01:8e:93:12:87:1d:
                    fb:ac:71:c0:92:9e:84:af:96:63:4c:2e:d6:22:a4:
                    0d:14:23:d5:31:c2:78:72:f8:53:e3:10:18:5e:b6:
                    96:77:2e:39:32:d4:be:44:86:12:e6:00:78:a2:97:
                    ac:3e:d9:67:74:97:27:7b:4d:25:15:c9:7f:8c:f6:
                    5a:4b:ef:79:e1:da:f9:bd:da:49:4c:4c:f6:9e:3c:
                    ee:61:af:47:41:43:59:b5:b1:f0:40:0f:7c:35:d7:
                    3c:a0:ca:25:0e:8d:66:55:77:82:f9:b6:52:a8:57:
                    32:53:c7:b2:62:aa:c2:32:e0:56:9e:71:dd:eb:68:
                    fd:e1:e7:42:02:e4:9c:de:f5:35:ff:e9:ea:cc:9f:
                    53:31:e5:6d:42:37:e5:8d:01:63:86:65:48:98:38:
                    19:25:b2:bd:62:24:74:1d:fa:9c:51:6c:29:2c:44:
                    9d:04:d0:ef:df:5d:88:83:24:b4:92:f0:42:db:b6:
                    dc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:F2:6D:28:06:44:25:5E:A0:47:86:64:8F:34:30:93:75:22:AE:87
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/F7F26D280644255EA04786648F3430937522AE87.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.48.0/22
                IPv6:
                  2804:3858::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266471

    Signature Algorithm: sha256WithRSAEncryption
         0a:2f:84:c4:75:f7:cd:4a:07:66:fe:c1:22:6b:45:fb:db:c1:
         f0:d7:2d:4b:c1:52:6f:cf:f7:81:ba:92:bd:f9:d7:72:ab:f2:
         ec:5a:46:12:b1:50:a5:b7:f0:bc:73:ca:0a:af:c8:98:9c:8c:
         dd:e4:8b:19:58:82:57:5e:e2:b8:76:4e:7f:e8:05:9c:5e:b6:
         a6:0a:f7:68:74:d4:af:55:18:4a:5e:53:5a:65:99:70:0f:01:
         d6:dd:45:84:b2:15:9b:fd:6e:09:5a:f5:1e:98:e4:93:75:a3:
         45:16:5c:b8:98:69:fd:8d:0a:49:ac:47:0c:e5:7d:85:ac:85:
         d0:bd:7a:bd:aa:3d:54:40:97:dd:47:24:9a:ae:13:7e:81:ba:
         56:4d:d9:e5:bf:2a:31:91:af:01:de:c4:b7:c8:f2:33:b1:8c:
         fc:64:ce:76:b7:71:1b:47:36:51:b7:a7:14:bf:9a:03:0a:74:
         cd:b4:fd:a4:42:50:e8:26:7c:8e:69:f5:e0:57:96:c3:f5:67:
         8c:4f:7c:77:93:90:51:33:e2:3d:1d:8e:8c:07:35:1c:8c:43:
         30:50:7f:fa:8a:a9:84:69:70:27:6f:cc:6d:96:2e:bf:cf:83:
         4d:2a:e6:ee:89:49:99:91:1a:29:44:7a:66:ed:3b:7a:2d:6b:
         92:d6:0e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----