Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FF1AE2DCD82BBE661E5A426381EA1E390D2AB559.cer
File:                     FF1AE2DCD82BBE661E5A426381EA1E390D2AB559.cer (raw, json)
Hash identifier:          2sP/uDvL1J8ChRzxX4yKS6z4f48k+oCY5xn4ya5GTso=
Subject key identifier:   FF:1A:E2:DC:D8:2B:BE:66:1E:5A:42:63:81:EA:1E:39:0D:2A:B5:59
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       07B4B71EA8A5D05BB9894DDA947B7292A000450E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/FF1AE2DCD82BBE661E5A426381EA1E390D2AB559.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Dec 2022 15:22:12 +0000
Certificate not after:    Thu 21 Dec 2023 15:27:12 +0000
Subordinate resources:    AS: 269044
                          IP: 45.178.232.0/22
                          IP: 2804:5e9c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b4:b7:1e:a8:a5:d0:5b:b9:89:4d:da:94:7b:72:92:a0:00:45:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 22 15:22:12 2022 GMT
            Not After : Dec 21 15:27:12 2023 GMT
        Subject: CN=FF1AE2DCD82BBE661E5A426381EA1E390D2AB559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:9b:26:f7:18:69:f7:a4:dd:5f:b5:f2:06:
                    f2:74:52:7a:4c:49:d7:0d:5c:80:fe:81:79:8d:ec:
                    e9:7e:26:d1:c6:4e:08:97:d4:41:3d:03:09:28:44:
                    6e:48:e8:97:63:40:bf:23:55:0c:d7:6b:df:2a:7c:
                    02:dd:0c:89:e8:78:11:63:a8:83:75:e6:0d:cb:8e:
                    e6:35:44:51:80:89:1d:0d:ce:db:ac:a8:6d:27:4e:
                    b0:48:ec:35:a8:94:70:f4:f4:70:a8:03:0c:a4:ba:
                    e6:f8:4c:1c:98:d3:90:bd:82:19:6e:b1:84:90:bd:
                    c3:a4:d6:eb:ed:2d:75:23:df:d2:b1:74:d5:04:58:
                    db:98:18:91:d4:ad:db:a3:7d:13:74:ee:9a:fb:ad:
                    ca:4b:18:b2:7b:bd:09:48:ec:09:6d:61:ba:53:3f:
                    6e:14:d8:99:2e:f3:cd:81:4a:99:c7:24:e1:9e:09:
                    c1:5f:f0:5d:fc:1d:54:61:f1:8a:70:ed:87:02:d2:
                    94:42:7e:80:b5:ab:0a:b7:31:19:e6:45:c3:83:41:
                    15:ff:1e:12:29:73:14:c3:29:59:77:08:20:e6:d3:
                    f1:82:8c:4d:11:42:ce:99:4b:c9:3c:f5:07:aa:b0:
                    35:ca:9a:33:e7:ef:05:cc:7f:df:d9:86:cb:46:7e:
                    08:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:1A:E2:DC:D8:2B:BE:66:1E:5A:42:63:81:EA:1E:39:0D:2A:B5:59
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/FF1AE2DCD82BBE661E5A426381EA1E390D2AB559.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.232.0/22
                IPv6:
                  2804:5e9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269044

    Signature Algorithm: sha256WithRSAEncryption
         5a:5c:3b:14:59:78:a0:82:13:44:5f:45:5e:12:03:99:5b:cb:
         9c:78:4a:52:5d:6f:59:65:d2:c8:7c:e8:01:87:d3:87:55:93:
         ca:b1:d8:ce:f9:b4:a5:82:53:14:88:0e:21:62:4b:87:5a:e5:
         b5:a4:75:ac:b0:84:62:80:90:da:4f:f9:42:2b:c8:9f:09:9b:
         6d:3f:25:07:ef:26:63:de:68:4f:4d:fd:d7:e7:53:f4:6d:40:
         fc:dc:b2:b0:22:32:f4:1d:c4:a2:a3:90:c0:0e:81:0a:45:34:
         12:8c:0d:1c:72:d7:41:54:48:9a:a9:db:15:1e:54:78:08:92:
         26:12:e7:d7:43:43:53:09:3b:b9:f8:81:50:20:94:2b:97:d3:
         7b:af:64:02:df:30:91:4f:f5:e2:58:5e:95:c0:80:12:25:56:
         e0:ba:a5:aa:10:32:47:ad:78:5b:8d:9e:8c:47:10:22:30:90:
         d3:00:9d:46:54:e5:07:3b:70:26:7f:da:4c:39:12:89:f5:82:
         28:86:b8:49:a9:b7:05:41:aa:b8:59:bb:ef:48:10:c4:9b:d0:
         b1:34:56:b9:08:cc:a6:74:54:ca:83:41:19:c0:0c:12:33:10:
         71:36:42:ce:5e:0e:5a:a0:93:ad:ab:8f:8b:ae:ab:13:41:3a:
         4c:9a:a7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:32:20 2025 by rpki-client