Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F8DA3BB9FC614DD0CFF2678783099499201827CD.cer
File:                     F8DA3BB9FC614DD0CFF2678783099499201827CD.cer (raw, json)
Hash identifier:          DUGAEAiksXeznPV/pF1Wm6Llw+sufDqmIbpoDGJTX+g=
Subject key identifier:   F8:DA:3B:B9:FC:61:4D:D0:CF:F2:67:87:83:09:94:99:20:18:27:CD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B5F686B54E794D8FE05B5505FBE6C7DD6585C64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/F8DA3BB9FC614DD0CFF2678783099499201827CD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Nov 2023 22:03:58 +0000
Certificate not after:    Mon 11 Nov 2024 22:08:58 +0000
Subordinate resources:    AS: 265440
                          IP: 45.225.180.0/22
                          IP: 168.194.200.0/22
                          IP: 179.191.8.0/21
                          IP: 2804:342c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5f:68:6b:54:e7:94:d8:fe:05:b5:50:5f:be:6c:7d:d6:58:5c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 13 22:03:58 2023 GMT
            Not After : Nov 11 22:08:58 2024 GMT
        Subject: CN=F8DA3BB9FC614DD0CFF2678783099499201827CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:4c:67:c7:68:0a:a8:48:ed:4d:0e:73:58:
                    83:ec:eb:8a:24:cc:4f:fb:7c:07:b9:f2:75:34:fd:
                    c2:dc:59:03:a3:4f:66:fe:52:e3:5a:92:7f:53:41:
                    fa:7b:8a:4b:7a:65:2c:aa:d2:73:78:5d:20:b9:30:
                    28:d2:63:50:64:7a:a0:9b:58:3b:18:68:69:1c:f3:
                    cf:88:8f:1a:cf:fa:21:96:8a:a2:1e:7b:b1:44:2e:
                    e7:5e:18:ae:25:e4:e2:07:3f:04:96:f9:74:a1:a8:
                    1b:ec:82:29:81:0c:f2:6e:fb:77:7f:cd:38:01:1f:
                    3d:cc:ea:14:c5:75:51:c7:96:04:be:a2:75:e6:42:
                    90:78:c3:1f:4d:e0:ea:8b:fb:6f:67:8c:69:e9:1e:
                    57:cc:a3:f4:cb:b4:1b:d0:0e:05:4c:4b:1c:ac:ea:
                    5a:24:d2:6b:89:e7:63:ea:b7:b1:95:31:db:c7:ff:
                    e9:2b:26:0b:a0:46:88:ef:11:dc:b9:60:08:4b:33:
                    2a:83:37:ce:34:66:2a:e4:a3:6f:d6:14:cd:0c:d4:
                    74:17:a6:24:25:9f:46:e5:f0:2f:13:6e:39:03:d8:
                    4a:a3:70:87:90:0b:14:d8:c1:79:fb:92:be:be:25:
                    ba:e0:f1:2b:08:0c:54:94:2a:b6:b2:11:3b:46:97:
                    ff:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:DA:3B:B9:FC:61:4D:D0:CF:F2:67:87:83:09:94:99:20:18:27:CD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/F8DA3BB9FC614DD0CFF2678783099499201827CD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.180.0/22
                  168.194.200.0/22
                  179.191.8.0/21
                IPv6:
                  2804:342c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265440

    Signature Algorithm: sha256WithRSAEncryption
         5c:fd:b2:e2:50:5b:64:ea:e7:9b:66:83:aa:7a:c5:55:8b:c5:
         c0:26:02:21:9e:10:12:54:51:00:f9:1c:6f:44:e8:3b:e6:9f:
         4b:6d:b0:3d:24:58:7f:a3:cb:61:bb:ee:05:1c:bb:59:bc:03:
         f2:e3:e6:e4:18:9a:46:0d:74:7f:8e:6c:3a:a5:a7:9a:31:94:
         a7:b4:d9:c3:28:5d:4d:75:02:0b:9a:b6:ac:25:bf:0a:13:0e:
         94:df:eb:1b:c8:65:a3:e0:3e:6d:5a:57:02:8e:dc:f8:0f:dc:
         b5:18:8b:df:12:1a:8a:87:d4:eb:63:36:87:3f:d2:91:b2:e8:
         6f:62:7a:87:96:ad:1d:e4:ea:5c:55:34:93:2c:72:ed:e3:f5:
         26:53:73:b0:f3:69:14:e9:e5:7a:41:a3:7b:bd:39:51:d8:57:
         49:04:84:2e:2a:ba:9b:8e:69:b1:d6:0f:ed:f4:38:bc:e0:30:
         22:cc:f2:3e:6e:4c:ff:88:91:0d:b6:6e:f2:26:82:46:69:e7:
         81:35:a2:79:3f:49:db:d6:3c:81:73:7d:59:de:be:ef:17:c0:
         8c:43:47:56:ad:e0:b9:8f:6a:fb:07:e8:f5:fb:dc:36:ac:23:
         a0:13:ab:77:25:b8:b3:38:23:f3:75:16:a6:73:22:ba:a5:39:
         e9:ce:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org