Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F8E687DD8DCDC71D1F3E606509438410F90FA13F.cer
File:                     F8E687DD8DCDC71D1F3E606509438410F90FA13F.cer (raw, json)
Hash identifier:          sONR2+U9qq/z6YY1pmb78qVOW5GwZMBe/rRtea2ejYE=
Subject key identifier:   F8:E6:87:DD:8D:CD:C7:1D:1F:3E:60:65:09:43:84:10:F9:0F:A1:3F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21B315495467B2D3D2074B14D69337EED55BC4A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/F8E687DD8DCDC71D1F3E606509438410F90FA13F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 16:48:39 +0000
Certificate not after:    Tue 05 Nov 2024 16:53:39 +0000
Subordinate resources:    AS: 270338
                          IP: 190.112.132.0/22
                          IP: 2804:6a78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b3:15:49:54:67:b2:d3:d2:07:4b:14:d6:93:37:ee:d5:5b:c4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 16:48:39 2023 GMT
            Not After : Nov  5 16:53:39 2024 GMT
        Subject: CN=F8E687DD8DCDC71D1F3E606509438410F90FA13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:5c:38:12:5d:c0:e5:7c:53:b8:2b:c0:42:
                    27:e9:15:a0:e1:ad:57:0d:22:7a:e8:7c:3c:0b:be:
                    f1:bd:20:0c:fc:ec:f9:cf:50:c9:6c:74:e0:4f:b2:
                    1b:88:3a:aa:76:e9:d7:6e:af:2e:1a:18:67:41:07:
                    32:37:e4:38:1a:72:a9:fd:47:da:c5:82:d5:65:e9:
                    72:14:18:d6:cb:58:29:16:ba:20:3f:4a:41:9d:2b:
                    e2:dd:6a:e9:d5:18:8d:ad:18:5f:cf:07:10:4a:c7:
                    94:e4:1d:d0:c1:23:c0:88:ad:c9:a3:06:50:36:a3:
                    88:96:24:51:ac:6e:44:3c:26:b6:ea:2a:2a:51:d0:
                    b4:07:4a:79:57:de:a7:20:e2:c9:66:e1:dd:ac:1c:
                    0c:25:ed:88:6e:90:2c:b9:d1:16:45:66:de:1b:97:
                    74:dd:5f:4a:2d:e8:d0:b1:c5:85:47:e1:96:3c:1b:
                    93:34:93:1a:01:99:ee:72:e2:b6:ce:e8:c8:5d:5d:
                    a6:de:e7:59:01:8a:3a:a7:05:7a:12:96:5b:5c:fe:
                    47:d0:25:ff:8a:41:33:1f:43:0b:f6:bc:14:21:5f:
                    e0:73:5b:47:bf:a2:b0:44:53:b4:b2:a5:46:ac:4a:
                    d8:f4:c8:e8:18:d3:a3:0e:9c:bb:55:c7:f1:14:cf:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:E6:87:DD:8D:CD:C7:1D:1F:3E:60:65:09:43:84:10:F9:0F:A1:3F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/F8E687DD8DCDC71D1F3E606509438410F90FA13F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.132.0/22
                IPv6:
                  2804:6a78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270338

    Signature Algorithm: sha256WithRSAEncryption
         94:bb:f7:d4:84:6e:ec:88:87:ae:8c:c0:6d:4a:3b:16:e4:7e:
         8d:ea:b7:85:dd:b8:f4:3c:06:e5:09:84:09:54:7e:d0:ab:dc:
         f7:f1:dd:a9:56:f0:b0:c2:b3:2d:d8:c1:c8:d0:25:50:f7:a7:
         54:05:9a:a9:63:40:03:1b:f4:49:99:40:db:ec:1d:c1:02:b9:
         2f:d8:66:1e:e4:55:42:20:ab:a8:62:1a:1a:78:d9:bd:2d:b2:
         2b:6a:0d:20:1c:28:52:a1:c4:61:70:08:d8:1d:83:aa:6e:c9:
         62:40:78:e0:ce:83:c8:ae:32:f2:ff:20:6d:c8:db:30:77:4c:
         85:c4:4f:69:db:e5:d5:2b:f1:b7:46:ce:2b:6b:7b:62:0c:7f:
         0a:40:05:d4:6d:84:4c:dc:c3:98:8e:73:01:b5:00:7c:7d:1c:
         d9:d7:6d:41:01:9f:63:5c:cf:71:a1:3c:40:c9:2c:13:ef:d7:
         ef:70:3b:8e:1e:f7:d3:f4:85:5c:57:23:34:1c:e2:87:28:62:
         3b:97:b6:aa:ed:cf:e0:bb:06:5d:8a:5d:3c:12:9b:ad:91:62:
         b5:62:d5:d1:b9:37:d0:2b:17:24:9e:fb:a3:f0:2e:6c:21:d8:
         47:bf:8b:f0:70:0c:0c:73:0d:71:4e:93:c5:89:24:46:26:06:
         6d:6b:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org