Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F8A86D1E151A09221B4A01ECA249A108A8BB22B0.cer
File:                     F8A86D1E151A09221B4A01ECA249A108A8BB22B0.cer (raw, json)
Hash identifier:          Sh9BEyDn4nGOdB6jNPjButfhdJn699WYLQdNy8hLCXA=
Subject key identifier:   F8:A8:6D:1E:15:1A:09:22:1B:4A:01:EC:A2:49:A1:08:A8:BB:22:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6475A91983CA7F29110A151D2C0426AB5D80E81A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HBofFFkdqkPSsJotaokVx9GSdiVAG7Kia2cC8f9zpHJL/0/F8A86D1E151A09221B4A01ECA249A108A8BB22B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HBofFFkdqkPSsJotaokVx9GSdiVAG7Kia2cC8f9zpHJL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Jul 2023 18:45:09 +0000
Certificate not after:    Wed 24 Jul 2024 18:50:09 +0000
Subordinate resources:    AS: 266587
                          IP: 45.7.156.0/22
                          IP: 2804:3e50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:75:a9:19:83:ca:7f:29:11:0a:15:1d:2c:04:26:ab:5d:80:e8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 26 18:45:09 2023 GMT
            Not After : Jul 24 18:50:09 2024 GMT
        Subject: CN=F8A86D1E151A09221B4A01ECA249A108A8BB22B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:16:da:2e:5d:05:2b:06:fe:c1:45:1d:75:2d:
                    19:20:1c:c0:fa:90:8f:d2:77:d8:d2:d4:d6:7c:08:
                    91:bc:11:0c:10:27:a9:e9:06:12:47:7b:b7:76:fe:
                    15:0a:6e:b1:21:68:16:12:50:a8:d7:58:18:c5:a2:
                    89:ba:48:7f:b1:54:69:e5:bf:64:a0:0c:e7:8e:fa:
                    e4:80:ed:07:38:86:65:21:77:6d:ab:e4:fa:b3:bc:
                    2a:3b:f1:98:4b:c6:3b:d2:3f:92:f1:f9:1c:49:c2:
                    d3:cc:ff:cf:a4:f6:75:e1:67:b1:06:a9:a3:49:45:
                    db:2c:3c:21:30:2a:cf:ab:4e:8c:a1:0b:a6:e8:6c:
                    22:7c:c1:ab:85:27:33:ae:11:8e:92:70:6b:86:b8:
                    ce:a6:30:56:9d:7d:60:04:a3:58:91:84:e0:0e:cb:
                    5e:18:ac:1e:4d:82:59:44:99:67:31:7d:15:cd:93:
                    6b:2f:b9:b6:1f:89:45:1a:d3:42:94:70:fd:c9:0e:
                    06:d5:9b:4d:b3:7c:0b:13:83:02:61:a1:50:7b:26:
                    78:05:ee:d1:48:fc:5b:6c:43:37:a9:36:17:55:d4:
                    b7:25:9e:f4:6f:80:12:71:90:6f:95:5c:54:69:48:
                    9d:68:2e:af:48:39:73:d7:ec:5e:2d:1a:90:63:40:
                    b8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:A8:6D:1E:15:1A:09:22:1B:4A:01:EC:A2:49:A1:08:A8:BB:22:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HBofFFkdqkPSsJotaokVx9GSdiVAG7Kia2cC8f9zpHJL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HBofFFkdqkPSsJotaokVx9GSdiVAG7Kia2cC8f9zpHJL/0/F8A86D1E151A09221B4A01ECA249A108A8BB22B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.156.0/22
                IPv6:
                  2804:3e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266587

    Signature Algorithm: sha256WithRSAEncryption
         30:96:32:64:59:d7:5d:0a:0b:86:8b:69:c5:e3:51:e3:94:79:
         7d:30:bf:5c:3a:2b:33:51:31:cd:7a:b3:51:c3:3c:1f:7b:f2:
         f7:f4:1c:50:b7:8c:17:c4:49:b7:e8:73:b4:aa:1e:5a:47:41:
         99:f2:72:6f:58:ec:5b:b5:95:6d:76:d0:c0:bd:f8:32:b7:86:
         3e:7e:94:e4:c5:a5:60:2d:e1:ec:9c:09:0f:4b:1d:3d:11:fe:
         18:38:86:9a:d2:e6:61:b1:aa:aa:9d:6b:76:01:b3:6f:6d:ce:
         32:f7:70:17:92:a8:fc:4c:67:0c:0e:1b:3b:d7:0d:eb:37:b7:
         15:b4:7a:9d:75:8e:25:a4:7e:02:b9:6c:31:2d:b2:8e:3a:04:
         5f:90:fa:80:6b:8f:5b:b3:48:c5:57:00:62:31:52:82:e6:62:
         ce:70:47:1f:7b:cd:eb:b5:9c:1b:0f:d4:8f:bf:5b:a4:87:89:
         1d:f4:e9:d6:ac:87:17:a5:85:b5:b1:74:ed:f3:e4:4a:ba:3c:
         3b:23:e9:67:18:c4:b6:84:1d:43:c4:7e:43:c0:a0:2e:13:c7:
         fa:a4:8a:aa:54:04:84:06:c5:a4:1c:e7:10:05:0e:b2:5d:b9:
         b4:0b:cd:91:93:f8:a1:e5:b7:72:93:fe:ff:0f:de:4c:98:96:
         41:fe:cd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org