Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
File:                     FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer (raw, json)
Hash identifier:          8YuSOVKqh+bJTcbjjSBk931wzJFUv6ega8ZJtDs0Oqw=
Subject key identifier:   FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1D55556AFB96ACE81C9B26D4F6FF52025BCC5108
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 May 2023 00:15:07 +0000
Certificate not after:    Mon 27 May 2024 00:20:07 +0000
Subordinate resources:    AS: 269502
                          IP: 45.186.0.0/22
                          IP: 2804:6598::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:55:55:6a:fb:96:ac:e8:1c:9b:26:d4:f6:ff:52:02:5b:cc:51:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 29 00:15:07 2023 GMT
            Not After : May 27 00:20:07 2024 GMT
        Subject: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c8:66:83:e8:12:ca:5c:2a:a5:17:f4:f4:df:
                    f8:fb:82:32:07:98:68:02:bd:34:9d:62:3f:b6:83:
                    02:8e:12:4c:3a:35:38:58:0d:dd:a6:4a:13:d1:aa:
                    dc:26:36:a4:e9:27:97:d1:28:21:4e:ff:35:06:01:
                    1f:96:f0:3d:05:b2:7f:d6:f3:3a:bd:a1:56:7e:b7:
                    98:a4:06:a1:d4:98:70:62:c5:b3:bd:2f:60:7f:68:
                    34:5d:26:60:eb:6e:38:9e:94:c0:86:7a:c0:de:84:
                    22:13:0c:cf:96:e5:4e:05:05:02:b5:17:9b:1e:d4:
                    ec:8f:af:63:f7:b5:c5:22:f6:ec:eb:e8:05:73:0f:
                    39:6e:13:60:04:a2:de:45:2d:46:f3:41:76:bb:40:
                    92:41:22:b6:16:d9:0b:dd:8d:20:02:0d:8c:c8:70:
                    59:1a:55:bd:21:c9:3d:af:d3:e3:71:19:1b:32:5c:
                    c9:cd:a7:e4:90:bb:e4:83:06:fc:b7:af:26:1c:25:
                    e6:09:68:ef:25:b8:9e:59:6d:64:4b:12:fa:45:b1:
                    db:ea:bb:0a:ae:97:4e:d1:1c:ec:bf:08:23:30:c6:
                    64:8f:cc:35:93:d7:d0:72:b9:7d:b7:5a:0b:78:88:
                    bd:77:06:9c:7b:9f:06:9e:62:f7:81:7d:b0:77:87:
                    b6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.0.0/22
                IPv6:
                  2804:6598::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269502

    Signature Algorithm: sha256WithRSAEncryption
         93:50:34:9f:43:4a:c6:64:a2:b8:d6:ac:92:c7:f6:0d:a8:f1:
         0d:f7:1d:58:c3:33:71:5d:9b:48:6a:69:28:c8:d3:49:5b:63:
         81:12:0f:cf:6a:cb:2c:44:d2:bf:c9:69:0d:90:8b:42:5c:48:
         9e:f5:2e:65:b4:2b:f9:26:db:56:f3:b0:dc:66:40:e9:41:5d:
         02:59:12:b5:40:7d:47:ba:5a:54:c6:63:6a:9a:03:a6:c4:19:
         32:cd:19:ff:11:18:5b:10:58:f9:e1:2d:a3:50:32:ea:57:9d:
         66:ff:ac:0d:3b:5b:51:0f:33:29:7b:93:37:59:1b:4d:5e:35:
         f5:f3:34:b7:97:b3:e0:d2:b4:e2:51:db:2a:5e:73:ae:43:2d:
         fc:6e:0d:69:3a:ce:24:0b:08:63:49:79:8b:ce:0b:16:cb:5b:
         f7:c3:79:5d:1b:01:01:a9:18:d2:20:9c:34:a7:a9:5f:2a:30:
         ce:08:df:62:c0:21:11:0d:85:78:aa:03:d5:b2:e1:36:c6:9f:
         87:4a:25:25:f1:7c:07:be:40:38:d4:69:7c:33:77:b8:ae:b9:
         e6:c0:0f:34:56:48:57:dc:7a:4e:b6:a9:82:b7:e9:2e:e1:28:
         4b:ed:38:b5:68:13:ae:db:0c:b2:0d:71:33:ac:a0:06:05:2d:
         37:56:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:46 2024 by rpki-client on console-ams.rpki-client.org