Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC.cer
File:                     F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC.cer (raw, json)
Hash identifier:          X3SsI1mHhtXqvHI16OtWWFf98HvKNzmKOAhNdFf+HyM=
Subject key identifier:   F8:90:55:B9:3A:0E:9C:3F:E6:F1:10:10:1E:48:FB:4B:A7:C6:C7:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27894091E44D88843C5A5090931F92418B708786
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 13:49:49 +0000
Certificate not after:    Mon 02 Sep 2024 13:54:49 +0000
Subordinate resources:    AS: 272554
                          IP: 179.63.24.0/22
                          IP: 2804:850c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:89:40:91:e4:4d:88:84:3c:5a:50:90:93:1f:92:41:8b:70:87:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  4 13:49:49 2023 GMT
            Not After : Sep  2 13:54:49 2024 GMT
        Subject: CN=F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:be:0d:97:37:d0:68:16:ab:33:b8:de:93:d6:
                    43:00:6d:c4:19:2b:85:63:b6:ef:97:95:eb:fe:57:
                    15:37:1c:6e:a7:c3:d7:ec:e4:52:fa:ea:72:a6:f4:
                    2d:9d:d1:a1:18:69:79:a8:9b:16:f3:d0:db:e6:e7:
                    1b:62:64:6e:6c:82:f4:0d:ad:bd:55:4a:83:5c:27:
                    2c:89:8e:11:6f:1d:ba:45:4c:5d:56:71:e6:29:99:
                    5d:2c:52:83:7f:83:26:4b:9a:4f:1b:03:84:45:67:
                    48:b8:49:8f:df:10:5e:68:06:42:d4:55:02:f8:af:
                    95:17:50:1c:f1:cc:69:05:1d:2d:ef:13:84:1c:46:
                    16:10:dd:c5:51:40:bb:85:94:e3:d5:b9:5d:ac:55:
                    1b:53:f6:b2:7f:2b:4f:5e:dc:f4:5f:89:30:76:4d:
                    c8:c5:f6:11:46:4c:48:3a:18:e8:fb:5c:30:3f:6a:
                    68:e2:bf:0b:c2:34:a8:f2:90:d4:e9:a8:05:80:a9:
                    97:81:0a:94:fe:de:c3:9c:9e:c2:02:92:63:e8:ab:
                    40:31:0f:7a:36:6e:d0:ad:96:35:e2:58:46:ec:70:
                    35:6b:5b:86:6e:0f:a4:67:06:0f:59:15:68:56:8d:
                    26:80:82:3a:c2:2e:97:a9:51:f0:06:a4:5f:ae:27:
                    1f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:90:55:B9:3A:0E:9C:3F:E6:F1:10:10:1E:48:FB:4B:A7:C6:C7:AC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.24.0/22
                IPv6:
                  2804:850c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272554

    Signature Algorithm: sha256WithRSAEncryption
         0c:e3:86:86:4f:14:2c:6f:dc:4a:67:4a:b6:3b:c7:63:74:de:
         27:01:e9:4e:31:f0:ff:2f:c9:50:ab:94:b5:33:9d:2d:93:d1:
         74:5f:c7:4b:21:2d:90:57:57:07:b0:4f:dd:9d:cc:f3:5c:43:
         98:4a:13:e0:08:e7:0a:70:25:6c:5c:f7:ce:9d:73:4f:03:be:
         28:88:28:6e:e9:1d:dc:38:ce:db:f1:bb:b4:f7:dd:15:ac:fb:
         54:bb:c0:db:c4:99:7b:f8:fa:84:d5:05:c7:f9:6a:f6:62:4d:
         d0:a0:24:bb:47:52:03:52:c1:0c:f1:8a:fd:a7:c3:e0:bf:cd:
         aa:01:92:b8:43:81:c3:88:a3:16:0c:a3:c6:c0:3d:08:22:54:
         51:40:df:ba:49:b8:74:c6:d6:cd:13:01:06:c7:27:95:e8:c1:
         c3:e6:b7:75:3f:fc:28:97:13:99:df:c0:f0:f9:bb:e7:a0:3e:
         69:0d:d3:4e:76:14:64:47:8e:6a:d7:7e:9c:b6:76:0a:58:98:
         51:c0:e7:f9:87:7c:f4:01:e0:1a:49:21:b6:c3:e2:51:6e:f9:
         e9:1e:ba:7e:25:b0:00:6c:7f:b2:53:21:e8:f2:36:ab:30:4f:
         d7:bd:7c:20:fa:07:70:dd:51:ae:c0:c4:8a:0f:00:25:a8:93:
         27:20:08:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org