Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F9ED493EACCDC37CB88045DC16B744CD5EAA42F5.cer
File:                     F9ED493EACCDC37CB88045DC16B744CD5EAA42F5.cer (raw, json)
Hash identifier:          j5UrLp0beF33geBiKq5H+BVOaSdEtbe6fM0s8D2RVyw=
Subject key identifier:   F9:ED:49:3E:AC:CD:C3:7C:B8:80:45:DC:16:B7:44:CD:5E:AA:42:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       706C273A057F0D536E3F4513B94C54A4590907A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/F9ED493EACCDC37CB88045DC16B744CD5EAA42F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 11:50:32 +0000
Certificate not after:    Thu 18 Jul 2024 11:55:32 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6c:27:3a:05:7f:0d:53:6e:3f:45:13:b9:4c:54:a4:59:09:07:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 11:50:32 2023 GMT
            Not After : Jul 18 11:55:32 2024 GMT
        Subject: CN=F9ED493EACCDC37CB88045DC16B744CD5EAA42F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a5:7c:4c:41:08:9e:44:55:67:ea:bc:fa:3f:
                    27:ca:47:ac:9c:5a:f7:af:d3:ee:b2:94:9b:d9:08:
                    28:f9:ef:87:95:5f:02:ef:f4:d3:7e:75:36:c8:f5:
                    58:11:36:88:13:73:28:ab:2a:35:75:16:0a:24:a8:
                    25:87:d4:ad:bd:f5:fb:9e:30:1b:8e:ce:17:76:ca:
                    45:a2:68:b3:33:07:45:0f:8b:c0:99:a9:55:13:45:
                    fb:a5:90:37:c2:6c:ea:62:9a:ac:cd:43:fa:e2:b0:
                    11:e6:2b:54:c3:a8:50:a7:1f:15:05:19:7f:b9:69:
                    e3:59:ec:c5:be:2a:9a:9a:b5:e1:9a:f9:77:00:e9:
                    9d:ab:c7:44:23:b9:7e:8b:c6:66:94:18:7e:30:21:
                    2a:f5:58:54:a2:11:d0:10:e5:bf:25:c5:d8:b8:91:
                    b8:fb:15:5f:ee:8f:9d:11:1a:8d:c7:76:f5:dc:9f:
                    ed:3b:71:00:98:b1:75:6e:bc:78:8e:dc:2f:4f:70:
                    ae:60:38:e5:98:9c:29:f1:e4:f9:a9:de:57:eb:94:
                    97:a0:da:f2:82:dc:09:df:d8:70:e4:d4:f6:cc:62:
                    ce:00:be:34:eb:95:69:d8:56:e7:ea:97:1f:d8:3f:
                    47:ae:e4:d8:ed:b1:bd:f4:2b:4e:a2:0b:1a:1a:2b:
                    3b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:ED:49:3E:AC:CD:C3:7C:B8:80:45:DC:16:B7:44:CD:5E:AA:42:F5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/F9ED493EACCDC37CB88045DC16B744CD5EAA42F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         b1:c3:50:0b:b1:8b:32:42:4a:55:a3:e9:df:52:23:fc:85:b5:
         cd:04:4a:d3:a8:38:25:bc:58:3c:41:81:41:8c:a7:71:8a:bb:
         fa:fe:f0:b0:b1:3b:78:93:62:b7:6a:6d:98:90:bf:3e:38:90:
         04:63:4e:a5:0b:bb:77:0c:af:0e:f7:20:1a:b7:6b:dc:a5:fc:
         9b:d0:ef:15:d1:15:7f:65:9a:e9:77:bb:07:23:85:55:13:08:
         5d:5b:35:85:13:a3:bf:bc:de:ea:fc:38:47:96:99:c3:c2:f7:
         2e:00:79:d5:3b:20:d0:23:a4:6b:03:e8:e5:83:56:1f:68:fe:
         f2:20:30:dd:89:b7:a7:93:d1:5e:8f:18:9d:14:a1:32:c7:cd:
         17:3c:86:0d:0c:d8:16:0a:de:6b:53:e1:06:0a:1d:6c:de:f7:
         d5:1c:33:ba:7c:a6:38:99:a0:1f:df:eb:63:67:e6:09:8d:35:
         bd:93:ff:8b:8f:9b:34:70:75:93:35:e8:4c:48:92:d5:a2:47:
         40:d7:43:79:9f:dc:5c:f0:62:e2:2c:2e:c1:f3:7d:b1:29:ee:
         10:f1:e8:17:b7:f4:5c:0d:1b:e0:dd:a6:6e:48:f5:3f:5d:47:
         d4:21:5e:35:97:bd:d2:62:70:ea:f4:90:01:34:4e:ce:f7:1f:
         f5:4c:bb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org