Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.cer
File:                     FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.cer (raw, json)
Hash identifier:          fUTQ1O1JqG1Y6LvQ4/752LpHlSTJnXe3JMh7T7r9Rco=
Subject key identifier:   FF:71:66:1D:F3:D4:6D:07:FC:37:BD:72:F1:B7:9D:1D:5E:87:96:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C92A26B8A413E47E4E0AE17B21BC0D6B0BAB9C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 16:43:22 +0000
Certificate not after:    Thu 20 Jul 2023 16:48:22 +0000
Subordinate resources:    AS: 264595
                          IP: 138.59.44.0/22
                          IP: 2804:2228::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:92:a2:6b:8a:41:3e:47:e4:e0:ae:17:b2:1b:c0:d6:b0:ba:b9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 16:43:22 2022 GMT
            Not After : Jul 20 16:48:22 2023 GMT
        Subject: CN=FF71661DF3D46D07FC37BD72F1B79D1D5E87961B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:8f:8a:df:c8:04:11:34:5c:d4:c5:a5:f7:
                    ee:1d:e4:9f:c4:60:a7:66:c8:1d:1b:7e:8c:91:a3:
                    e6:6f:57:72:bc:eb:a4:02:31:9c:20:2c:67:39:2b:
                    71:45:2d:dc:3a:aa:61:eb:fa:87:15:11:9d:80:25:
                    d4:37:57:6a:aa:c7:da:87:28:88:bd:b6:d8:52:22:
                    8e:03:5b:e9:1a:ce:2e:f7:fe:95:f8:9b:e2:ae:f7:
                    a9:f7:ae:53:28:35:eb:45:1a:36:3e:a0:c2:f9:50:
                    12:76:b9:fe:68:0b:1f:e8:20:b8:c4:26:fd:bd:46:
                    db:23:15:d8:68:34:f9:95:63:59:6d:98:69:cd:cf:
                    42:34:c5:c5:91:f8:01:0a:97:07:f7:4c:e3:84:a1:
                    e8:b0:98:dd:1f:39:58:54:c8:36:46:13:59:15:28:
                    64:24:48:cc:7a:ab:21:23:c5:1c:df:2d:99:57:9f:
                    a9:53:ed:98:db:01:d4:19:f1:9f:89:c5:4f:ea:8f:
                    c4:61:c8:ff:c5:69:32:04:5c:44:93:9b:3a:d5:7f:
                    6f:44:e5:fa:5f:d7:61:f7:af:74:74:01:3c:e6:02:
                    b4:4b:aa:c3:5b:8f:bb:f6:4c:94:ec:fe:ed:46:83:
                    03:c7:be:74:e1:23:47:9b:cf:5b:8f:56:75:d0:a5:
                    f9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:71:66:1D:F3:D4:6D:07:FC:37:BD:72:F1:B7:9D:1D:5E:87:96:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.44.0/22
                IPv6:
                  2804:2228::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264595

    Signature Algorithm: sha256WithRSAEncryption
         02:47:31:39:9a:1f:6a:b4:48:ce:86:c1:99:de:46:1e:7a:97:
         7b:01:42:02:6d:8a:77:f2:1c:bb:4a:68:d7:bd:d0:39:1b:9f:
         5b:16:6c:9c:47:42:17:63:6f:8b:bd:ab:e4:ed:93:db:3b:48:
         64:c6:e1:15:19:fc:a3:2e:33:01:54:98:35:9c:8f:38:31:ef:
         14:57:dc:f5:65:e8:d0:42:ac:6c:a6:d1:75:08:17:14:34:cf:
         02:7d:2a:14:7a:93:ce:fb:6b:e3:39:6d:59:31:92:37:55:d4:
         05:1d:3f:80:1d:64:f8:2d:db:55:ab:c0:0c:78:99:ab:c6:ad:
         4a:50:a4:4c:d8:c6:11:8d:ce:d9:19:77:7f:ec:01:1f:b4:c1:
         37:47:6d:41:cd:4d:13:fc:a3:83:18:a5:21:4d:ee:e9:ab:b1:
         7e:3f:22:28:7f:c0:62:6f:26:37:1f:eb:21:c1:2f:d2:b4:27:
         8d:ec:4d:1e:21:f9:3f:b1:b5:e8:bc:a1:5c:76:2a:c2:fa:98:
         fd:b3:38:86:db:5c:8d:8a:49:0e:39:a6:aa:9d:32:b5:aa:dc:
         ef:58:be:6a:eb:ca:1a:3e:54:57:d2:0d:4e:72:20:0d:ed:69:
         d8:78:9e:01:a8:e8:f4:f4:95:ba:56:a0:db:48:89:f8:44:42:
         6b:d0:b5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org