Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F8C7A72CD00C27C0836F66BD7A493410F6AFF489.cer
File:                     F8C7A72CD00C27C0836F66BD7A493410F6AFF489.cer (raw, json)
Hash identifier:          vC/NOxiMFPeuAgM4fNkURoEgbhGNLo8MG8l3D5s3TFs=
Subject key identifier:   F8:C7:A7:2C:D0:0C:27:C0:83:6F:66:BD:7A:49:34:10:F6:AF:F4:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D32B2B4E9A1F859E10C79A665A33875954F880F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HYGWenfmfEwAVowtMTK6uH6F7C6otqFLqAF5rFnha264/0/F8C7A72CD00C27C0836F66BD7A493410F6AFF489.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HYGWenfmfEwAVowtMTK6uH6F7C6otqFLqAF5rFnha264/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 19:46:05 +0000
Certificate not after:    Thu 12 Dec 2024 19:51:05 +0000
Subordinate resources:    AS: 264521
                          IP: 132.255.212.0/22
                          IP: 2804:20ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:32:b2:b4:e9:a1:f8:59:e1:0c:79:a6:65:a3:38:75:95:4f:88:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 19:46:05 2023 GMT
            Not After : Dec 12 19:51:05 2024 GMT
        Subject: CN=F8C7A72CD00C27C0836F66BD7A493410F6AFF489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:c3:11:cb:04:dc:3d:34:75:ca:67:63:45:
                    23:e7:a0:5c:97:08:46:88:e6:67:61:ca:7f:69:59:
                    02:a9:51:d5:83:c9:a9:40:37:c0:c3:e5:8a:83:e1:
                    b7:55:93:96:fc:0d:d7:87:2c:40:d2:72:a3:3c:f4:
                    1d:01:a7:61:0d:76:ba:23:6d:e9:db:12:84:e2:cf:
                    aa:50:1d:58:0f:14:3a:67:e0:13:0d:06:c1:a8:34:
                    eb:16:6d:57:d5:66:91:57:30:6b:59:13:26:ff:2a:
                    0f:63:17:12:77:61:60:17:f1:ae:2e:47:0f:c2:7c:
                    1d:da:19:1d:f2:da:f8:05:d5:04:a1:4f:a3:1f:bd:
                    48:03:16:81:98:af:de:5d:b0:29:98:69:9b:29:39:
                    10:96:25:a1:6d:b5:95:fb:19:7b:6b:3d:db:7d:1d:
                    46:dc:01:6d:46:27:a6:84:b0:c3:73:85:93:7c:66:
                    12:a5:97:5a:db:ff:36:6e:3e:aa:2b:00:75:6b:80:
                    8c:cc:ee:fd:9e:8e:a3:4d:82:2e:05:80:25:d7:27:
                    d3:1d:2f:0a:36:bc:26:ed:29:9b:10:51:9a:be:67:
                    e6:2a:c4:43:f1:ff:a1:cf:33:ad:d1:01:94:ae:cc:
                    eb:01:4b:d3:ef:86:62:b6:ca:ff:47:26:b9:88:13:
                    cb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:C7:A7:2C:D0:0C:27:C0:83:6F:66:BD:7A:49:34:10:F6:AF:F4:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HYGWenfmfEwAVowtMTK6uH6F7C6otqFLqAF5rFnha264/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HYGWenfmfEwAVowtMTK6uH6F7C6otqFLqAF5rFnha264/0/F8C7A72CD00C27C0836F66BD7A493410F6AFF489.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.212.0/22
                IPv6:
                  2804:20ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264521

    Signature Algorithm: sha256WithRSAEncryption
         00:6c:d2:5a:56:cb:39:99:ba:2d:74:98:dd:bb:8a:ce:7c:f2:
         da:2f:9a:4c:ec:1c:d7:94:9b:c9:34:da:bc:c8:66:49:0f:5a:
         15:74:09:ab:16:cc:7a:69:b0:c0:6e:9d:99:39:1e:5b:21:a2:
         20:c2:af:38:64:67:4e:58:23:be:97:1d:b7:b1:4a:54:d8:8a:
         d4:bd:09:53:4f:14:07:44:63:bd:31:75:39:0a:b8:47:4f:36:
         09:0f:b9:8d:24:28:e3:a8:13:92:b2:f4:60:66:0b:5e:7b:ca:
         0f:ad:b1:d6:2d:9b:72:2d:dc:d7:dd:00:53:d9:14:c4:41:e1:
         bb:f2:25:02:e1:0d:f1:ae:e9:c0:96:ab:45:5e:42:61:2c:d4:
         17:26:c6:22:fc:38:a9:45:44:1f:ae:e0:9d:8f:91:94:66:b6:
         6f:43:46:82:5e:9a:75:5f:8f:6b:eb:2b:bb:2f:fe:b8:e0:ed:
         96:da:8c:78:09:17:a4:8f:7c:85:04:40:97:ed:cb:8f:d5:43:
         ee:b3:79:73:34:4d:a1:7c:d8:77:22:bf:9f:1e:a1:89:60:ab:
         81:5a:cf:5c:a3:8f:c9:a3:8c:36:5a:73:8e:54:f0:de:f9:96:
         cf:fe:ea:02:01:4f:f2:47:a9:11:d0:29:b3:7b:eb:63:28:9e:
         ac:94:3f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org