Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FF6DBD4F7DCD512763E9FA07AAE3E684AC3D18E0.cer
File:                     FF6DBD4F7DCD512763E9FA07AAE3E684AC3D18E0.cer (raw, json)
Hash identifier:          o76NpmffkaCB05ZJ2eyT3ows9e+oIAaOQGT3E3z3NEA=
Subject key identifier:   FF:6D:BD:4F:7D:CD:51:27:63:E9:FA:07:AA:E3:E6:84:AC:3D:18:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11A3E1E664F2812F46F380197D8E5101A754F31F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/0/FF6DBD4F7DCD512763E9FA07AAE3E684AC3D18E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 22:42:55 +0000
Certificate not after:    Wed 23 Oct 2024 22:47:55 +0000
Subordinate resources:    AS: 265914
                          IP: 131.196.164.0/22
                          IP: 2804:3fc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a3:e1:e6:64:f2:81:2f:46:f3:80:19:7d:8e:51:01:a7:54:f3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 22:42:55 2023 GMT
            Not After : Oct 23 22:47:55 2024 GMT
        Subject: CN=FF6DBD4F7DCD512763E9FA07AAE3E684AC3D18E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:55:61:74:7f:b0:c1:2b:ac:80:c6:51:19:98:
                    6c:f3:f4:42:f9:72:a1:3f:ec:95:c3:56:29:32:58:
                    58:ee:7d:d0:24:a5:13:5f:4e:8d:ff:b1:d4:7f:56:
                    ba:45:68:dc:31:05:4d:e4:18:51:0b:36:f1:24:19:
                    07:b6:42:4c:fd:93:46:7c:3a:65:7a:73:a0:bb:a2:
                    db:f8:41:7a:20:dc:84:1b:7e:a1:ed:75:71:83:11:
                    f3:07:b7:23:cd:8e:9c:92:82:56:4a:a7:49:cc:a6:
                    85:bc:af:b0:61:f0:ee:79:fb:9b:aa:87:59:32:b4:
                    b3:e4:f6:a7:38:9a:aa:02:2b:23:ea:fa:70:8d:55:
                    4f:4e:4c:80:43:4f:68:dd:ee:9c:44:09:34:a8:9d:
                    3c:49:d2:e9:52:30:98:b1:d9:f9:f1:a6:a1:03:eb:
                    f6:40:d7:f3:9e:17:df:5d:2c:76:85:e1:a6:cf:f8:
                    31:92:98:02:e8:57:36:bc:c2:f8:bc:5a:0e:93:7b:
                    b0:b8:ac:0f:cb:15:e5:ea:01:17:e0:ca:6f:1a:6b:
                    40:af:71:72:0d:3e:66:2c:a2:d8:ae:77:f6:24:a1:
                    f2:58:3f:74:dc:3f:7d:cf:ef:a3:3b:46:15:cb:34:
                    22:6a:c8:07:ea:43:4e:4a:95:1b:58:66:03:b2:d1:
                    77:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:6D:BD:4F:7D:CD:51:27:63:E9:FA:07:AA:E3:E6:84:AC:3D:18:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/0/FF6DBD4F7DCD512763E9FA07AAE3E684AC3D18E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.164.0/22
                IPv6:
                  2804:3fc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265914

    Signature Algorithm: sha256WithRSAEncryption
         4c:71:d2:91:2c:14:ad:e6:f0:74:b9:5f:04:aa:f3:6f:da:df:
         e3:1d:08:7c:58:c3:9d:a9:37:21:28:a8:47:74:a2:0a:f0:82:
         75:83:cc:b4:28:5b:3c:24:58:98:f3:d7:e8:48:f4:1a:c8:f7:
         2b:a3:3e:a0:0e:4e:19:9b:b2:99:6f:79:7c:9b:98:88:2c:b8:
         f7:44:bf:3a:02:c5:23:45:4f:80:6d:51:1e:db:e3:83:7a:2a:
         6f:6d:ee:be:ec:89:6c:a0:e0:b4:2e:f5:76:b7:cd:36:3e:86:
         bb:45:8f:a5:21:d1:6c:39:3a:86:ae:f0:a1:e3:f1:1f:0e:14:
         9f:d0:1f:29:47:88:d4:45:f7:8b:9f:06:06:2c:94:c7:d6:e0:
         df:f1:71:32:38:8a:03:9a:37:21:bc:3f:be:62:e1:76:0f:6c:
         3d:d3:c3:1d:38:78:bb:82:b0:bc:9c:4a:31:ab:fd:83:b5:d5:
         ad:ed:0e:bd:e5:4a:8d:81:7e:84:de:34:c4:ed:99:22:96:df:
         00:7a:bd:8a:8e:76:e4:ab:8f:a7:bb:01:90:ee:7d:a9:8c:d2:
         c5:21:f7:b3:ef:ac:6d:35:65:dd:40:2a:4f:c0:5a:06:bc:2d:
         ff:0c:40:cc:a2:63:df:e9:aa:11:f5:88:51:43:b1:64:2f:6e:
         eb:cd:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:23 2024 by rpki-client on console-fra.rpki-client.org