Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F9AECED0781BCFF797CE729909FFCF281D29855A.cer
File:                     F9AECED0781BCFF797CE729909FFCF281D29855A.cer (raw, json)
Hash identifier:          VCtuEULOWq8ZxXdV24h/5cCj5pbwX+ytvoRv/QE9ALw=
Subject key identifier:   F9:AE:CE:D0:78:1B:CF:F7:97:CE:72:99:09:FF:CF:28:1D:29:85:5A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A189DEFFCAC6F8061B681E5BB54BD3D3EA55F37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/F9AECED0781BCFF797CE729909FFCF281D29855A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 11:24:37 +0000
Certificate not after:    Thu 23 May 2024 11:29:37 +0000
Subordinate resources:    AS: 262408
                          IP: 168.0.240.0/22
                          IP: 177.38.160.0/21
                          IP: 2804:2d0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:18:9d:ef:fc:ac:6f:80:61:b6:81:e5:bb:54:bd:3d:3e:a5:5f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 11:24:37 2023 GMT
            Not After : May 23 11:29:37 2024 GMT
        Subject: CN=F9AECED0781BCFF797CE729909FFCF281D29855A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:71:83:e8:f0:dc:dd:17:bd:45:35:2d:33:
                    1e:48:62:6a:33:63:4b:bf:97:dc:d8:0c:51:a2:26:
                    9b:48:b3:ff:b8:0b:a3:c6:4e:dd:71:86:a4:6f:eb:
                    4c:3e:e8:24:e2:82:dd:7c:72:3f:26:b6:23:25:89:
                    ae:6e:78:65:82:9a:03:b1:d4:1a:9e:a0:cf:a2:52:
                    45:40:37:e7:d9:98:05:60:f7:0a:b1:ef:89:4e:50:
                    b3:1f:57:36:a3:2d:92:58:61:46:5a:1f:21:e5:83:
                    53:9e:56:3a:09:0b:dd:41:89:cf:0b:69:e9:91:53:
                    14:09:6a:14:3c:a3:42:9c:a9:1c:11:86:2e:1b:4e:
                    16:18:6a:ea:b6:65:32:c0:a5:8c:0a:d8:b6:6a:29:
                    85:3b:0f:00:ba:67:ea:0f:24:8d:6b:61:c7:42:ea:
                    ae:37:ef:85:e3:5c:dd:30:98:e4:7e:bf:9d:ff:b5:
                    69:21:df:c3:d6:f9:96:1f:a9:bc:bd:20:e6:41:49:
                    d2:b5:51:f3:ea:35:59:c3:c4:39:d3:d4:54:ef:b4:
                    f3:1a:55:0c:1a:22:f1:95:46:58:66:21:39:52:e4:
                    df:69:bc:2d:f5:cb:50:b0:1c:b0:42:a6:ef:1a:92:
                    0a:74:08:6b:a4:14:cd:58:f7:fb:50:d9:be:0d:66:
                    5b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:AE:CE:D0:78:1B:CF:F7:97:CE:72:99:09:FF:CF:28:1D:29:85:5A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/F9AECED0781BCFF797CE729909FFCF281D29855A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.240.0/22
                  177.38.160.0/21
                IPv6:
                  2804:2d0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262408

    Signature Algorithm: sha256WithRSAEncryption
         54:72:19:b5:7a:c7:cd:39:d6:87:99:1c:ee:98:be:c7:35:20:
         ed:4d:1a:7d:65:0f:c5:8d:b6:ab:61:4b:1b:b8:dc:d7:fc:64:
         de:c0:21:4d:59:41:47:63:0a:0e:2c:40:61:05:b4:a7:e2:7d:
         50:1e:a7:94:51:91:47:1f:45:c5:df:49:45:d6:b3:6f:5f:e9:
         d7:ce:f6:df:23:18:35:b9:64:c0:2a:b6:3e:73:cc:a0:4c:6f:
         75:af:04:5c:a6:bf:cc:9a:d8:6f:53:5a:9e:4f:97:d5:b9:79:
         5f:19:c2:19:ac:90:e5:bf:75:f6:a0:d8:a6:72:bc:20:1e:86:
         86:04:b2:38:b3:62:7a:b7:6b:a0:e1:f4:e2:aa:18:d8:b9:89:
         51:c4:35:cc:c8:3d:4d:11:31:3c:3d:4a:ff:2d:4f:3d:61:41:
         04:05:5a:7c:86:fb:e8:a8:c1:07:3d:47:5a:9a:ff:b6:05:35:
         e8:78:f5:35:20:d0:4c:b7:ef:5c:b3:9a:42:9b:ad:25:e5:e4:
         fa:93:c5:5a:1b:24:8c:bd:3c:3a:05:73:e7:93:f6:14:cc:80:
         ba:46:4b:6e:d8:21:ae:bc:f6:38:99:47:39:ca:55:1b:7f:45:
         f4:20:4c:bc:22:e2:d1:21:32:f4:ae:c1:cb:0b:58:80:69:fe:
         db:ea:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org