Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FECB93CC8DE3AD1A4BE23B79C39AC689335F8BCE.cer
File:                     FECB93CC8DE3AD1A4BE23B79C39AC689335F8BCE.cer (raw, json)
Hash identifier:          rdaPKuFFAfSjPBMoi17J8av/hLjFNBG3ELX0MMs2LMQ=
Subject key identifier:   FE:CB:93:CC:8D:E3:AD:1A:4B:E2:3B:79:C3:9A:C6:89:33:5F:8B:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68E57B91E5C460BC73E7F983967C853A8F3C8EC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/FECB93CC8DE3AD1A4BE23B79C39AC689335F8BCE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 11:35:08 +0000
Certificate not after:    Wed 12 Feb 2025 11:40:08 +0000
Subordinate resources:    AS: 61649
                          IP: 45.6.232.0/22
                          IP: 131.100.188.0/22
                          IP: 167.249.148.0/22
                          IP: 170.238.60.0/22
                          IP: 2804:1c50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e5:7b:91:e5:c4:60:bc:73:e7:f9:83:96:7c:85:3a:8f:3c:8e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 11:35:08 2024 GMT
            Not After : Feb 12 11:40:08 2025 GMT
        Subject: CN=FECB93CC8DE3AD1A4BE23B79C39AC689335F8BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:15:b9:d8:5e:13:c0:03:a9:7f:79:81:41:7f:
                    92:20:2b:16:6d:17:01:85:09:20:a5:82:70:5f:22:
                    ac:c5:fa:50:50:83:62:dd:11:37:db:23:95:a3:b2:
                    1f:6d:c3:19:b8:ad:3b:07:64:90:fb:34:17:17:99:
                    98:52:e3:bf:0b:a0:a0:7e:1a:31:b8:99:ab:ca:df:
                    63:13:44:45:1b:aa:66:7e:a4:60:e9:32:7d:a4:64:
                    75:55:3c:aa:50:28:77:64:59:bd:98:26:7a:59:29:
                    8f:c5:51:37:ff:f0:7d:47:6b:59:92:a1:b6:b9:dc:
                    e9:fa:11:60:89:6b:f8:fc:2d:56:42:04:2e:f4:cd:
                    a0:bb:af:ab:c3:c5:15:e8:5b:33:9d:81:bb:d8:61:
                    25:3c:88:42:89:29:1a:28:3d:33:b2:49:b1:b7:05:
                    42:88:0f:f1:e0:85:b4:18:bb:56:dc:3b:8e:98:94:
                    86:1c:f6:eb:f2:02:6c:b3:38:7d:72:e5:14:bb:24:
                    b6:2e:1f:38:33:4d:26:9d:a1:c1:d4:44:e3:f7:ff:
                    0c:a0:53:44:7d:0f:6a:d5:ef:a4:08:89:56:cb:95:
                    b5:52:3e:73:08:c4:0e:a8:e7:2f:d4:0c:63:42:5f:
                    27:e9:71:8a:46:32:97:94:c7:e3:81:4d:f6:91:c8:
                    07:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:CB:93:CC:8D:E3:AD:1A:4B:E2:3B:79:C3:9A:C6:89:33:5F:8B:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/FECB93CC8DE3AD1A4BE23B79C39AC689335F8BCE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.232.0/22
                  131.100.188.0/22
                  167.249.148.0/22
                  170.238.60.0/22
                IPv6:
                  2804:1c50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61649

    Signature Algorithm: sha256WithRSAEncryption
         64:02:90:10:1f:b8:6c:37:1a:17:80:a5:87:1a:1e:9a:23:e3:
         f3:cb:a0:7f:e0:ac:53:a4:5f:3f:19:21:a7:58:cf:0d:ff:e4:
         17:fc:cc:4a:f8:8b:21:7c:2b:13:f2:9c:00:c2:04:94:43:dc:
         aa:b6:04:71:26:50:76:8a:de:92:66:31:f4:1d:39:0e:7f:05:
         d8:d6:2d:ec:0d:ad:5d:13:0f:7d:08:13:7d:1d:6d:a1:2f:38:
         18:cd:bd:66:76:c3:39:24:0b:c6:88:03:53:a6:4b:bc:2f:64:
         1d:4c:85:ca:91:30:59:d7:cf:1c:83:cb:be:ed:24:eb:5a:e7:
         3f:68:59:63:be:b8:21:70:e2:b2:14:62:1b:cd:dc:de:74:8b:
         36:5f:70:57:7e:36:88:68:6a:15:e4:3b:35:08:4d:aa:bc:19:
         39:f1:90:0b:d0:05:59:fc:4f:4e:a0:22:d4:c8:33:4a:a2:e3:
         0a:d5:c0:d6:05:15:a4:62:61:92:cf:22:ce:e2:5c:15:2c:bb:
         10:d6:e4:be:2e:02:40:84:f2:d0:80:dd:ad:6f:f2:ed:5b:dd:
         ad:19:bc:e9:8c:58:c9:eb:58:ed:9d:7e:2b:77:f1:bc:80:03:
         40:4b:b0:0e:cd:98:2c:87:26:a5:29:b2:59:b3:31:39:cb:f5:
         8b:64:4f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:45 2024 by rpki-client on console-ams.rpki-client.org