Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.cer
File:                     F9263FFE11163563498950CAD445C8B7EA02C4E9.cer (raw, json)
Hash identifier:          jI8ahiUtJEmtM5u6kJF2aVjQGZyBdU3d0h2MAe8GyrY=
Subject key identifier:   F9:26:3F:FE:11:16:35:63:49:89:50:CA:D4:45:C8:B7:EA:02:C4:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       760816AF5A151FCBD66D15FC10EC5DED491EDE3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Jul 2023 14:53:57 +0000
Certificate not after:    Fri 19 Jul 2024 14:58:57 +0000
Subordinate resources:    AS: 264079
                          IP: 143.208.28.0/22
                          IP: 2804:2a90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:08:16:af:5a:15:1f:cb:d6:6d:15:fc:10:ec:5d:ed:49:1e:de:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 14:53:57 2023 GMT
            Not After : Jul 19 14:58:57 2024 GMT
        Subject: CN=F9263FFE11163563498950CAD445C8B7EA02C4E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:45:a9:56:4f:f4:5f:7e:24:2e:98:c6:d5:dd:
                    01:4b:2c:ba:50:40:9f:75:c2:ba:02:b1:9b:d8:81:
                    f3:b8:95:d9:1f:a2:e5:20:7a:aa:7b:a0:ec:25:e9:
                    1f:b5:b4:a5:73:4b:8f:43:63:0a:47:bc:c9:1a:a6:
                    68:f1:bc:87:e5:c3:fd:26:a0:a4:53:88:34:b5:b7:
                    9e:96:aa:9d:99:d4:5e:40:80:85:57:01:0f:b3:74:
                    90:14:5a:6a:17:3e:e5:b5:f2:55:a6:1c:03:8e:70:
                    8f:e6:14:82:41:3d:97:ca:d2:c0:56:6d:e0:9b:bf:
                    63:4d:1c:cc:22:7d:d0:ae:a2:ca:d9:69:61:30:fd:
                    00:29:4b:7f:40:14:60:a1:1a:0d:f5:69:b3:00:aa:
                    d1:9d:87:bf:28:ef:20:0c:f9:c0:ce:68:23:46:01:
                    c8:31:65:5e:df:a4:31:a1:c2:d2:ff:50:43:79:8a:
                    d6:95:b3:fc:12:4a:bf:92:2d:c0:5e:c5:aa:86:2d:
                    fc:ce:e7:39:8f:2f:45:60:9b:81:cc:6d:d9:4b:06:
                    2e:99:64:95:9f:5d:b1:5a:e2:8b:16:d7:3c:36:b4:
                    21:f2:83:83:6f:0d:6b:06:13:72:80:35:6b:a5:9b:
                    41:36:ae:32:74:33:b9:4e:1c:aa:6f:9d:7d:30:b8:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:26:3F:FE:11:16:35:63:49:89:50:CA:D4:45:C8:B7:EA:02:C4:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.28.0/22
                IPv6:
                  2804:2a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264079

    Signature Algorithm: sha256WithRSAEncryption
         1e:c4:a7:4b:6c:8f:bf:48:0c:40:86:ca:f9:a1:86:a3:89:e0:
         70:03:3b:a5:f5:0e:9b:b5:74:ac:eb:eb:06:64:30:3c:75:32:
         46:13:50:bc:8a:62:4e:5e:cc:18:d9:b5:c5:8f:ae:64:de:56:
         0c:09:51:8f:89:d8:e8:50:60:0e:da:59:d0:b3:7a:d3:80:6d:
         57:c2:66:fd:38:bd:f6:7a:61:22:15:2f:d4:cd:88:e2:6c:1a:
         59:84:b2:ec:30:6f:a5:85:c4:f2:67:6c:26:28:b6:d0:c2:29:
         24:5c:1c:3c:01:7e:ad:a9:0d:e4:ac:0f:a1:f5:f4:96:9e:69:
         cd:6b:91:69:e2:9b:04:64:1c:88:eb:ff:c6:55:e1:d6:17:7a:
         c4:e8:93:9b:41:29:86:0d:41:3a:e3:df:80:c6:26:9f:54:e8:
         01:51:1a:ac:1f:91:f0:bd:46:67:62:25:f0:f0:d2:fc:95:83:
         2c:97:6f:ab:cd:c6:7a:3e:d6:b1:d0:5f:70:cc:de:cf:90:2b:
         36:8d:7e:0a:75:62:00:be:f8:65:d8:84:c6:c3:e0:09:21:28:
         22:21:21:d7:d7:34:fa:f2:fa:d4:4a:37:e4:cf:2b:46:f7:8f:
         76:89:07:bb:93:1f:2b:00:f3:b6:b7:74:11:0b:4d:6a:f9:45:
         30:93:f7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org