Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F8E0774EBB65EA4D22E46394EB91322F695067B5.cer
File:                     F8E0774EBB65EA4D22E46394EB91322F695067B5.cer (raw, json)
Hash identifier:          +ODPoQuNGNqJPYqA7B0NXWdZPPi4OWnRWSdLoV6V+cc=
Subject key identifier:   F8:E0:77:4E:BB:65:EA:4D:22:E4:63:94:EB:91:32:2F:69:50:67:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1EA3A4441F9F4A3C124BF29335D227C588BC8446
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/F8E0774EBB65EA4D22E46394EB91322F695067B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Feb 2023 17:57:16 +0000
Certificate not after:    Tue 27 Feb 2024 18:02:16 +0000
Subordinate resources:    AS: 269417
                          IP: 45.186.88.0/22
                          IP: 2804:6444::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a3:a4:44:1f:9f:4a:3c:12:4b:f2:93:35:d2:27:c5:88:bc:84:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 17:57:16 2023 GMT
            Not After : Feb 27 18:02:16 2024 GMT
        Subject: CN=F8E0774EBB65EA4D22E46394EB91322F695067B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:4a:2b:ec:40:82:3b:17:a6:5c:4b:01:cf:
                    e2:22:0f:33:a4:29:89:49:98:6c:7e:f1:a7:9c:64:
                    39:37:4f:99:aa:d3:f1:40:29:0f:e3:66:3c:62:76:
                    b2:36:e9:5b:b2:e2:70:f7:ea:e2:9e:8a:99:19:b6:
                    9f:ef:04:04:4c:68:11:06:fd:4f:51:b8:1a:35:09:
                    e0:d2:36:56:dc:1d:e1:bd:82:fc:dc:18:25:26:f7:
                    de:47:5d:f7:ce:1d:b6:c1:f0:34:45:32:f3:14:7f:
                    83:95:65:81:8e:bc:79:ed:ae:a5:1a:46:2b:1d:6d:
                    4e:97:fa:d1:29:1d:53:23:9c:68:f4:a6:47:aa:9d:
                    00:de:aa:b6:38:a5:4d:80:b2:e2:89:5f:70:6c:72:
                    f1:fa:0b:2e:af:1d:7f:d6:d9:e7:4f:15:1a:46:c7:
                    8a:ac:86:69:5b:4c:fe:ab:66:af:9f:97:49:f2:33:
                    8b:06:15:d1:2d:f4:ac:87:61:f5:c7:be:01:91:1f:
                    64:d5:49:a3:1e:46:00:a5:4f:36:09:79:62:39:e1:
                    4f:53:8f:16:32:2b:e7:99:8f:36:a0:e6:2f:04:bc:
                    9e:4d:14:b5:06:52:f5:6c:9f:f4:99:44:4c:da:5c:
                    4a:2d:68:d0:c7:84:c4:79:fd:a7:4e:6e:e4:b8:c8:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:E0:77:4E:BB:65:EA:4D:22:E4:63:94:EB:91:32:2F:69:50:67:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/F8E0774EBB65EA4D22E46394EB91322F695067B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.88.0/22
                IPv6:
                  2804:6444::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269417

    Signature Algorithm: sha256WithRSAEncryption
         3b:c6:78:da:94:0b:89:92:43:b4:05:c5:73:8c:23:0a:c2:4f:
         c8:91:1a:2a:3b:09:37:c9:30:fb:23:95:1b:4f:ee:6e:b4:cf:
         3d:09:1a:35:1a:54:98:48:d8:e7:cd:12:d7:91:29:aa:7b:66:
         8c:9b:ce:8a:ba:0e:05:ef:ac:37:56:73:4e:67:89:bf:46:8c:
         9b:19:72:49:aa:6e:c8:c3:80:95:c1:9c:6e:9e:4a:0f:4e:de:
         21:20:d1:b0:6a:e0:99:26:a8:f6:f5:23:de:9e:d8:d9:2e:6f:
         7b:63:25:33:1b:1d:9a:3a:17:b9:1c:42:c0:3e:13:bf:e1:75:
         02:8a:46:3c:ec:41:d3:21:83:6e:d1:e2:20:cd:41:26:17:50:
         b9:da:ae:ef:00:60:6f:1e:ca:87:5a:3d:13:a4:28:44:3c:d8:
         52:e8:37:82:0f:09:5d:15:cf:3f:33:37:0a:5c:64:30:d9:07:
         7f:43:45:1e:fc:d1:1e:d4:e8:57:2a:df:67:c0:68:e0:7f:d3:
         91:7e:5c:ff:b6:03:9e:7e:48:eb:36:a9:a4:ae:cf:3b:19:73:
         e7:d8:c2:b3:9c:2c:8b:4c:34:4e:f3:10:7f:2b:20:ea:42:ac:
         97:cd:44:53:fd:c5:fb:f9:3f:b4:48:6d:a2:9e:aa:84:28:89:
         bf:d8:fb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org