Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82.cer
File:                     F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82.cer (raw, json)
Hash identifier:          Cig8roKlehPh87lGPRcT83ZxUi0V5Ng+sbL0nE/oA3k=
Subject key identifier:   F8:BB:2A:FC:CF:E1:ED:DB:7C:98:24:96:1E:88:F0:3A:4D:CD:9D:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       601F9D3C9AF02155C136BD56737BC732C96B5F80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 18:49:51 +0000
Certificate not after:    Wed 15 Jan 2025 18:54:51 +0000
Subordinate resources:    AS: 266280
                          IP: 170.78.228.0/22
                          IP: 2804:3550::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1f:9d:3c:9a:f0:21:55:c1:36:bd:56:73:7b:c7:32:c9:6b:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 18:49:51 2024 GMT
            Not After : Jan 15 18:54:51 2025 GMT
        Subject: CN=F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:85:b7:19:49:51:20:5a:dc:44:38:d8:0e:
                    2c:1f:6c:00:64:18:a5:99:f0:ab:c8:28:47:70:33:
                    11:73:b6:53:ca:cc:13:eb:36:66:81:f6:6c:a0:a5:
                    1c:b2:3f:d1:b4:62:05:ae:00:01:03:3a:75:b2:15:
                    1e:5c:3f:c0:47:01:7f:de:dd:f4:99:34:99:30:3c:
                    f9:af:8e:a6:ec:ad:86:58:7f:fa:93:34:c3:bd:f7:
                    9a:2d:e0:b2:67:cf:d1:87:dd:21:66:6f:2b:29:92:
                    d8:c9:58:f4:4c:f6:c6:ea:56:ca:0a:5b:9b:a5:88:
                    bd:cb:95:4a:50:a2:ab:f7:03:c0:90:df:08:5c:12:
                    4c:29:00:26:60:5e:7c:01:63:af:4c:50:bb:84:1a:
                    01:e3:03:78:01:16:d4:4b:a8:8b:89:35:a0:07:14:
                    7d:93:3f:96:b3:c2:e1:8a:fc:42:1b:d1:7f:c1:6c:
                    b8:c0:9f:d3:04:f5:97:07:ce:36:de:b5:5d:e1:95:
                    16:58:1a:85:b2:d0:21:32:c6:11:01:31:c0:fe:8e:
                    be:2b:59:e2:96:c9:f3:2f:f1:3c:7a:4b:93:76:c0:
                    3a:c6:27:bc:d8:86:d4:41:a7:6f:63:43:a2:5b:89:
                    70:0a:39:7b:e1:66:34:23:26:bf:cf:a2:ad:ca:8a:
                    47:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:BB:2A:FC:CF:E1:ED:DB:7C:98:24:96:1E:88:F0:3A:4D:CD:9D:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.228.0/22
                IPv6:
                  2804:3550::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266280

    Signature Algorithm: sha256WithRSAEncryption
         29:c4:5d:3f:8e:97:a6:23:52:10:8d:22:29:f9:7b:6f:3f:08:
         4a:c8:1f:ba:7c:3f:78:cf:87:dd:e5:ad:90:ed:14:c8:0e:8c:
         aa:b3:00:2c:c8:6c:36:71:f9:6d:a8:19:05:2d:10:0a:5e:08:
         36:af:98:62:50:0d:ce:48:e1:f7:ee:f2:e1:b8:35:bd:da:b3:
         8d:52:86:19:72:31:71:94:37:c2:0b:d6:d1:84:cd:80:02:f2:
         9d:d4:12:50:96:b1:34:5b:88:e0:c2:34:2d:66:c5:8d:50:f2:
         82:a3:ee:3e:8f:7e:67:14:24:82:6b:23:6a:e0:ea:66:b8:c0:
         83:3d:fd:bc:b5:02:39:5c:79:2c:33:42:46:89:bb:56:bb:5d:
         92:b9:8e:87:23:c6:de:01:e3:29:9f:d4:b1:45:3f:18:28:e8:
         f2:a4:fb:ab:df:a4:c9:a7:90:47:85:e3:b2:89:d6:8f:75:ad:
         ab:40:8f:5f:4b:4d:8d:d1:01:3c:5c:10:64:8e:e7:cb:b1:da:
         0a:a4:29:3a:9a:42:47:f3:72:a2:6e:7f:f6:63:97:45:f5:88:
         d0:4c:fe:1d:15:09:17:12:f8:bf:37:42:d5:58:50:d4:20:f3:
         6b:06:ee:bd:81:eb:57:3e:a5:71:8d:d7:a9:01:78:d2:58:5b:
         43:8d:6f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org