Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.cer
File:                     F9387F47D8872E43A828969C27F3B31F1C2E66C6.cer (raw, json)
Hash identifier:          ec/Mil81xK4q33wTMIMwd3a0TUc7Jsgr9fnKEeohqH0=
Subject key identifier:   F9:38:7F:47:D8:87:2E:43:A8:28:96:9C:27:F3:B3:1F:1C:2E:66:C6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       088A690FE1C7A2BDAF4954D19C33323CB85FC128
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 22:24:29 +0000
Certificate not after:    Tue 18 Feb 2025 22:29:29 +0000
Subordinate resources:    AS: 266302
                          IP: 170.79.168.0/22
                          IP: 2804:35b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8a:69:0f:e1:c7:a2:bd:af:49:54:d1:9c:33:32:3c:b8:5f:c1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 22:24:29 2024 GMT
            Not After : Feb 18 22:29:29 2025 GMT
        Subject: CN=F9387F47D8872E43A828969C27F3B31F1C2E66C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cd:95:00:86:76:39:ac:e4:5e:02:99:a0:01:
                    3f:f1:21:ce:e3:d6:55:20:4e:6d:a4:bb:f3:53:e1:
                    ce:40:d7:b8:f2:d2:9b:d5:fe:b7:35:14:4c:ce:0f:
                    b4:fc:d4:2e:6c:9f:77:a6:55:96:14:d7:6e:1b:f6:
                    b1:61:fa:38:8e:a4:5d:da:87:dc:fd:98:d0:df:fe:
                    7c:e9:26:41:4a:f2:3d:c3:f0:dd:18:b3:eb:cf:5a:
                    12:81:fb:b9:1a:2b:14:2c:3d:2d:e5:b4:5a:7b:e1:
                    e8:7c:50:06:bf:ee:8a:3b:70:37:49:07:3b:df:a7:
                    3e:cf:49:88:ac:cc:88:53:05:41:21:a2:4e:cf:66:
                    c7:fe:12:b6:35:66:36:e2:67:8b:4e:cf:42:94:f2:
                    01:7f:82:3c:88:66:77:fd:c4:0a:27:2a:43:86:aa:
                    54:65:f8:bb:d5:3f:3e:9f:28:c1:ef:23:2d:5c:2b:
                    e4:7b:fb:1a:c2:33:42:49:40:49:8b:8b:75:93:ab:
                    83:07:7e:58:cb:71:b2:02:ea:36:0f:9c:2b:47:60:
                    cd:1f:72:cf:6c:91:ea:5e:f9:72:44:11:65:dd:af:
                    99:e8:d7:05:72:3b:77:ea:84:78:f6:e9:ce:6f:a9:
                    39:a9:f4:87:58:9c:34:93:a3:91:36:12:d8:b0:ba:
                    e7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:38:7F:47:D8:87:2E:43:A8:28:96:9C:27:F3:B3:1F:1C:2E:66:C6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.168.0/22
                IPv6:
                  2804:35b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266302

    Signature Algorithm: sha256WithRSAEncryption
         3f:43:77:61:f3:0d:60:3c:67:0e:8a:47:1e:34:7d:5f:78:7a:
         8d:43:12:47:a3:a7:71:4d:36:bc:13:26:d4:21:e6:f6:df:fd:
         27:1b:e9:09:d0:ef:cc:7b:d9:d3:47:1a:44:61:be:c4:79:d7:
         97:5b:20:98:1a:7f:bf:2c:31:2d:4e:1b:3c:f2:33:1f:d0:4b:
         47:ee:b3:a3:b6:7a:1b:c1:b2:1a:4c:8b:a0:6f:62:da:b7:ae:
         dc:d2:8c:1d:9f:55:6f:8e:b9:83:43:a7:d8:2b:4a:86:39:fd:
         39:44:62:17:0d:96:86:46:36:cd:fe:55:10:73:ec:cb:d7:69:
         ad:ed:40:82:f4:da:fc:7b:62:31:9f:e7:da:92:ee:45:e7:24:
         57:f5:d2:24:d7:66:04:2a:37:a6:96:13:0b:f6:d8:74:cd:f0:
         ee:36:5f:89:c8:1f:de:7a:49:33:a2:7b:18:ad:2d:96:49:5c:
         09:88:50:d0:e0:33:da:4a:64:e2:29:35:55:25:2f:94:54:ab:
         ab:6e:dc:67:39:03:35:d8:3d:45:0c:cd:45:33:0c:2f:e2:22:
         ca:be:13:42:74:b0:89:5c:8d:b7:20:5f:29:4c:2a:a3:06:62:
         b9:57:80:11:0d:c8:e5:50:31:5f:c4:c9:e0:e5:56:d9:3b:c7:
         7b:87:82:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org