Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FF861D858835AF9AA140FBB590B4E00FB71D923B.cer
File:                     FF861D858835AF9AA140FBB590B4E00FB71D923B.cer (raw, json)
Hash identifier:          8JYM8aECs9oC2bIXQ8H45mA20FXF6FDt1OxHvrSrdRg=
Subject key identifier:   FF:86:1D:85:88:35:AF:9A:A1:40:FB:B5:90:B4:E0:0F:B7:1D:92:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       9C28DB304607FAA16289516C7A8A5EB156DF2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/FF861D858835AF9AA140FBB590B4E00FB71D923B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Mar 2023 11:22:44 +0000
Certificate not after:    Fri 15 Mar 2024 11:27:44 +0000
Subordinate resources:    AS: 263025
                          IP: 177.10.200.0/22
                          IP: 2804:a24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9c:28:db:30:46:07:fa:a1:62:89:51:6c:7a:8a:5e:b1:56:df:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 17 11:22:44 2023 GMT
            Not After : Mar 15 11:27:44 2024 GMT
        Subject: CN=FF861D858835AF9AA140FBB590B4E00FB71D923B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:34:32:ab:87:da:d0:a1:3a:38:a4:0e:cf:
                    c8:8e:6a:28:d3:13:75:4d:20:cd:b1:c4:11:f1:60:
                    d5:76:8b:2c:3a:9c:d3:3d:9b:10:d2:04:37:15:c5:
                    4c:c2:c8:26:52:f2:ea:0a:82:44:7d:e7:a4:86:a8:
                    69:cc:21:0b:bf:9f:3e:0f:7b:98:26:72:b6:1c:64:
                    35:c4:65:28:4d:d3:9f:44:ff:94:64:75:b3:c0:0b:
                    ea:47:37:99:23:f8:df:d8:90:0a:07:34:31:ab:49:
                    6d:18:d3:0a:dc:77:1d:48:c5:22:d6:a0:5f:f5:5c:
                    a4:83:b2:96:ff:2e:da:8f:20:5d:38:32:03:ce:97:
                    69:ad:a1:51:18:6b:a9:91:8a:e2:22:9a:39:68:14:
                    30:32:d3:60:bb:af:65:8b:73:aa:ff:73:47:6a:dd:
                    29:cb:80:e3:15:17:b2:a2:49:65:44:5d:9f:75:a0:
                    16:a1:e9:73:1d:e6:b1:60:07:04:fb:06:30:0f:e5:
                    79:1e:b0:f9:53:d4:74:4d:99:55:2c:2d:40:54:c0:
                    98:e5:1f:e8:30:b3:3b:c1:2d:1f:17:f4:1a:5a:cb:
                    35:6e:dd:3d:2b:20:b3:ab:61:ea:0a:8d:74:65:46:
                    d9:a9:3e:7b:6f:7b:77:e3:2f:47:9b:9a:0d:0e:74:
                    4f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:86:1D:85:88:35:AF:9A:A1:40:FB:B5:90:B4:E0:0F:B7:1D:92:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/FF861D858835AF9AA140FBB590B4E00FB71D923B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.200.0/22
                IPv6:
                  2804:a24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263025

    Signature Algorithm: sha256WithRSAEncryption
         9e:50:2f:4a:64:e4:d9:8e:19:c9:90:3c:00:0b:a0:d6:70:3a:
         b7:5b:98:42:6d:25:93:ba:b1:65:48:42:b6:74:24:71:fd:2d:
         3a:f7:56:9f:a4:7d:95:6f:07:77:38:75:1f:4d:94:ae:e6:c3:
         1e:93:20:25:d3:52:08:8d:65:0d:e7:a2:0a:7f:72:bd:82:03:
         23:20:7b:6e:92:6c:e8:da:3d:b9:a5:13:ad:e8:6c:d5:0a:1b:
         11:79:55:e2:6c:b3:ab:34:62:26:61:d8:0a:68:f2:80:cc:d7:
         e8:b1:ff:df:66:9e:6d:e7:8a:5b:4c:b0:71:f2:7b:aa:0e:9f:
         6f:c9:f5:8b:fb:8c:93:08:b7:da:5b:fb:08:07:2e:d9:83:75:
         5d:58:7c:be:81:32:62:22:06:bb:d8:74:04:ef:86:cc:8f:fc:
         db:28:56:ea:99:da:95:7e:14:3f:c6:6a:fc:bc:ed:df:03:e4:
         22:cd:ac:be:23:65:1b:21:48:e2:4e:ba:38:ee:56:89:f8:5d:
         d4:07:64:4c:f2:ad:68:ad:5f:56:88:2c:ba:00:f2:fe:89:28:
         0a:53:c5:bf:21:94:72:70:f0:f6:bb:96:a4:d9:f1:0d:5f:00:
         fb:86:8d:7e:b5:97:95:79:08:1b:bf:fc:ce:c1:72:e7:60:c5:
         82:ce:c2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org