Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FF823F80E1880256E7090AF76567F22D905D1C47.cer
File:                     FF823F80E1880256E7090AF76567F22D905D1C47.cer (raw, json)
Hash identifier:          6E9/W2VfyAI1/EZXpZGmLWZK3wKF+6gi9hTdgkfgZgQ=
Subject key identifier:   FF:82:3F:80:E1:88:02:56:E7:09:0A:F7:65:67:F2:2D:90:5D:1C:47
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60F35DA37DEAD8932B3F34ADE823318817260B00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/FF823F80E1880256E7090AF76567F22D905D1C47.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Aug 2023 12:10:42 +0000
Certificate not after:    Fri 23 Aug 2024 12:15:42 +0000
Subordinate resources:    AS: 270419
                          IP: 190.115.64.0/22
                          IP: 2804:6bb8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f3:5d:a3:7d:ea:d8:93:2b:3f:34:ad:e8:23:31:88:17:26:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 25 12:10:42 2023 GMT
            Not After : Aug 23 12:15:42 2024 GMT
        Subject: CN=FF823F80E1880256E7090AF76567F22D905D1C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:28:47:d3:a3:00:54:84:40:7e:bf:e6:86:
                    67:bc:be:fa:47:44:b4:e1:1b:77:3d:f1:fb:4b:4a:
                    4b:67:6c:29:02:3e:c8:69:1b:a5:37:29:bd:33:06:
                    40:a3:da:0e:2c:da:5a:c6:2b:88:5a:6c:d2:c2:01:
                    ba:d9:ae:99:8d:11:a2:a0:3d:e6:34:45:9d:36:d3:
                    df:3c:85:19:49:68:e2:79:8c:08:41:81:2b:40:8c:
                    95:bf:8a:19:c7:9e:d1:4c:00:24:c1:a5:97:c4:75:
                    25:34:58:2d:c9:e5:c8:b0:82:b9:50:74:2f:fa:99:
                    5a:01:36:0d:fd:0d:a0:d0:d2:df:7a:43:24:c1:04:
                    f4:eb:37:0f:a9:f0:39:af:c5:ca:c7:82:38:8c:b9:
                    db:6d:ac:86:fc:45:81:26:be:76:bc:d9:e4:d5:e3:
                    24:4b:06:b7:e5:1e:b2:7f:87:0b:0d:9e:56:41:07:
                    f9:f5:68:6f:15:8a:b1:07:ef:9e:46:54:91:57:f6:
                    e3:28:36:16:3e:90:4d:26:f7:f5:66:c1:12:28:e9:
                    ae:3d:9f:48:9a:20:c6:1b:25:01:43:9a:03:4b:4f:
                    16:48:38:5e:94:20:78:19:14:c4:f5:1b:5f:b6:65:
                    29:d4:0f:e4:ca:46:90:76:25:f0:3d:e4:fa:2a:be:
                    54:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:82:3F:80:E1:88:02:56:E7:09:0A:F7:65:67:F2:2D:90:5D:1C:47
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/FF823F80E1880256E7090AF76567F22D905D1C47.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.64.0/22
                IPv6:
                  2804:6bb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270419

    Signature Algorithm: sha256WithRSAEncryption
         29:00:a5:75:88:86:11:3f:ee:ae:4e:be:ea:3e:7d:f0:4d:6e:
         f4:85:6f:a2:e7:04:89:4c:24:e3:6c:ac:ff:3c:ba:b0:c9:87:
         30:41:22:6c:85:72:46:ff:d4:23:8f:88:60:9c:53:cf:52:4b:
         bd:51:61:0a:6a:34:36:ed:bb:40:1a:64:02:2a:80:60:b6:55:
         6a:ec:39:17:67:b1:ad:b6:e1:da:85:eb:26:67:b4:a2:07:c4:
         f0:2c:b8:19:fd:66:76:d0:2f:bf:95:92:1d:09:d4:f8:f5:cf:
         4e:42:8c:63:b9:ec:17:be:33:63:1d:01:4f:59:42:a4:2a:da:
         91:bf:62:3f:95:a1:3c:3e:cf:07:15:9a:3b:10:44:07:61:8a:
         be:45:fc:04:a3:e1:e5:ab:7c:9f:d1:ad:c7:bb:45:c2:65:72:
         4f:fc:18:1d:7c:59:96:60:01:f1:3e:0a:ac:ab:6a:55:ef:90:
         ca:05:ca:47:0f:93:76:3a:15:e0:13:ff:41:e2:9d:98:67:bd:
         d6:de:7a:d9:b3:48:4e:ee:8b:01:01:b9:12:0d:d2:be:59:5d:
         da:08:7e:c8:4d:ce:de:19:93:14:a1:2e:77:6f:37:26:b6:66:
         74:2d:88:2a:8a:9d:74:83:c3:f5:77:2c:f3:6f:94:49:49:9d:
         ac:b5:36:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org