Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B.cer
File:                     FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B.cer (raw, json)
Hash identifier:          JPWVE5kCuA6TPqjgTzaYJQBl0hMizlRchHKsiMuNYvY=
Subject key identifier:   FA:BD:83:A9:A4:04:3A:0D:F1:BF:A7:64:01:87:B4:19:CB:2E:3A:2B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       26142A05CC6FE54F1D86D505BBBB1B51ED51F3D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 12:36:58 +0000
Certificate not after:    Thu 20 Feb 2025 12:41:58 +0000
Subordinate resources:    AS: 52814
                          IP: 177.72.8.0/21
                          IP: 2804:45e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:14:2a:05:cc:6f:e5:4f:1d:86:d5:05:bb:bb:1b:51:ed:51:f3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 12:36:58 2024 GMT
            Not After : Feb 20 12:41:58 2025 GMT
        Subject: CN=FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:2b:77:a3:ea:20:d9:04:7c:05:b8:6f:43:
                    5a:5b:32:6c:3f:8c:b6:1d:d8:52:65:06:14:af:1e:
                    f5:81:a9:18:40:1b:d9:59:77:f9:0c:f6:99:30:f1:
                    7f:d0:bf:e2:df:51:f7:1d:a0:8f:31:eb:00:04:1d:
                    53:40:c6:83:e3:c2:ba:f1:70:9b:96:b4:af:7e:86:
                    04:90:c6:a8:fe:a5:26:5d:d1:d0:ad:82:9e:8f:51:
                    28:bb:1f:d0:0d:b9:d5:4f:5e:fa:5d:ae:38:e5:8a:
                    5b:0e:38:3e:dd:a8:21:41:ff:51:d0:84:d8:c2:6a:
                    b6:ac:94:d8:74:3e:63:bf:e5:eb:b7:75:3f:48:06:
                    75:6f:3b:6f:59:c4:23:72:ef:70:1f:e6:3a:bc:08:
                    87:c9:c5:5c:c8:66:d7:5d:d1:67:b4:8e:26:98:9a:
                    69:2d:91:42:1a:f8:a8:30:ea:17:7c:69:bf:92:cc:
                    72:3f:83:61:4e:28:c5:7e:36:3a:35:50:7a:d8:6a:
                    73:55:15:7e:40:18:2f:03:65:6d:14:4a:32:17:b7:
                    8f:89:88:8e:b6:3c:72:53:a4:f7:89:03:d0:b1:90:
                    53:73:39:4a:57:37:74:44:c1:cb:75:64:37:53:3d:
                    a6:32:14:be:56:09:cf:34:57:3d:86:c1:16:7a:46:
                    04:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:BD:83:A9:A4:04:3A:0D:F1:BF:A7:64:01:87:B4:19:CB:2E:3A:2B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.8.0/21
                IPv6:
                  2804:45e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52814

    Signature Algorithm: sha256WithRSAEncryption
         47:ea:a8:0f:35:eb:16:4b:37:9c:a3:21:ad:c7:c9:bf:ec:6e:
         b4:ee:17:98:a9:5d:ee:a4:00:b1:da:64:8e:28:b6:80:18:fb:
         3b:ac:31:f9:9c:17:6c:cc:f2:47:3a:ca:46:fb:8f:0f:a5:f1:
         8d:15:5c:4a:03:18:94:72:c4:ab:77:4c:34:2c:ed:e6:b9:f0:
         19:b7:49:eb:89:74:f3:04:ad:55:6e:be:f9:19:39:d8:29:d0:
         a7:b6:ec:68:1d:be:e5:0a:cd:54:d4:6d:0f:be:30:7f:92:d5:
         ac:cc:8a:6b:87:6d:89:70:fc:ac:99:ad:a7:0e:32:88:2a:c8:
         84:5c:d1:2e:e0:52:7f:15:73:41:e7:d6:8a:81:cf:54:a3:c5:
         ef:88:26:3a:98:e2:7b:ca:ff:72:99:36:89:b7:7d:d4:9b:27:
         38:5a:8b:91:56:e3:c4:20:18:b1:cf:1d:ce:91:25:97:16:7c:
         c9:7a:4d:b4:27:38:3b:e9:7c:09:91:e2:64:e1:20:a8:a4:c8:
         6a:0e:b8:54:7a:8a:ba:52:90:1c:04:9c:1a:58:37:e0:23:96:
         9c:56:b9:18:47:ad:d4:2c:2e:16:97:53:f4:5e:36:11:cc:cd:
         88:3d:c3:52:84:ac:d1:df:08:d2:6b:65:ad:58:cd:19:34:4c:
         9d:c4:c9:58
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUJhQqBcxv5U8dhtUFu7sbUe1R89QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjIxMjM2NThaFw0yNTAyMjAxMjQxNThaMDMxMTAvBgNV
BAMTKEZBQkQ4M0E5QTQwNDNBMERGMUJGQTc2NDAxODdCNDE5Q0IyRTNBMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe1it3o+og2QR8BbhvQ1pbMmw/
jLYd2FJlBhSvHvWBqRhAG9lZd/kM9pkw8X/Qv+LfUfcdoI8x6wAEHVNAxoPjwrrx
cJuWtK9+hgSQxqj+pSZd0dCtgp6PUSi7H9ANudVPXvpdrjjlilsOOD7dqCFB/1HQ
hNjCaraslNh0PmO/5eu3dT9IBnVvO29ZxCNy73Af5jq8CIfJxVzIZtdd0We0jiaY
mmktkUIa+Kgw6hd8ab+SzHI/g2FOKMV+Njo1UHrYanNVFX5AGC8DZW0USjIXt4+J
iI62PHJTpPeJA9CxkFNzOUpXN3REwct1ZDdTPaYyFL5WCc80Vz2GwRZ6RgTxAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6vYOppAQ6DfG/
p2QBh7QZyy46KzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FZGZ1ZWRyTDRCVFdGSkxYZWVKTmhRVWZwYVNiQzhQUGh0
UVpBeU5LU3piYS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRWRmdWVkckw0QlRXRkpMWGVlSk5oUVVmcGFTYkM4UFBo
dFFaQXlOS1N6YmEvMC9GQUJEODNBOUE0MDQzQTBERjFCRkE3NjQwMTg3QjQxOUNC
MkUzQTJCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOxSAgwDQQCAAIwBwMF
ACgERegwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM5OMA0GCSqGSIb3DQEBCwUA
A4IBAQBH6qgPNesWSzecoyGtx8m/7G607heYqV3upACx2mSOKLaAGPs7rDH5nBds
zPJHOspG+48PpfGNFVxKAxiUcsSrd0w0LO3mufAZt0nriXTzBK1Vbr75GTnYKdCn
tuxoHb7lCs1U1G0PvjB/ktWszIprh22JcPysma2nDjKIKsiEXNEu4FJ/FXNB59aK
gc9Uo8XviCY6mOJ7yv9ymTaJt33Umyc4WouRVuPEIBixzx3OkSWXFnzJek20Jzg7
6XwJkeJk4SCopMhqDrhUeoq6UpAcBJwaWDfgI5acVrkYR63ULC4Wl1P0XjYRzM2I
PcNShKzR3wjSa2WtWM0ZNEydxMlY
-----END CERTIFICATE-----