Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/01FABF6ACFB51AB81D2DBB43961E6C7065E1366F.cer
File:                     01FABF6ACFB51AB81D2DBB43961E6C7065E1366F.cer (raw, json)
Hash identifier:          8pMyjEMochlPKoB04rUySHsEqyZ3S34CxgdJyGACjm4=
Subject key identifier:   01:FA:BF:6A:CF:B5:1A:B8:1D:2D:BB:43:96:1E:6C:70:65:E1:36:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C0EC1391B3AECC5124078D7EE02E92C30BB617A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/01FABF6ACFB51AB81D2DBB43961E6C7065E1366F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 12:23:53 +0000
Certificate not after:    Thu 23 May 2024 12:28:53 +0000
Subordinate resources:    AS: 267113
                          IP: 45.227.140.0/22
                          IP: 2804:4850::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0e:c1:39:1b:3a:ec:c5:12:40:78:d7:ee:02:e9:2c:30:bb:61:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 12:23:53 2023 GMT
            Not After : May 23 12:28:53 2024 GMT
        Subject: CN=01FABF6ACFB51AB81D2DBB43961E6C7065E1366F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:a5:31:a5:37:67:6d:f2:d5:39:5c:46:e1:
                    a3:9b:c7:82:3d:11:ac:49:97:e7:b1:d3:5d:fb:68:
                    b7:72:31:0e:cc:08:b4:8f:61:cc:a5:6e:1b:81:f1:
                    13:9b:5d:46:c6:48:99:7b:7f:fc:e2:c7:45:6e:ff:
                    d6:15:f5:95:b6:e7:c5:83:d4:9e:91:1e:63:a0:0e:
                    db:02:55:af:58:5c:f0:f6:7b:a2:55:33:ca:89:e7:
                    df:73:7a:93:ad:15:14:17:eb:da:5f:57:e8:ee:60:
                    9b:98:80:16:9a:0d:aa:3d:7d:f5:6d:da:c0:31:92:
                    b4:20:06:6e:91:01:a9:ab:5e:80:a3:34:46:0b:01:
                    92:0d:27:17:41:cf:2b:54:67:36:68:8a:64:e2:96:
                    19:2d:ba:51:e4:0d:68:82:bc:fc:c4:15:b0:3e:bc:
                    e1:11:c2:1b:3e:e8:09:b0:b3:ed:f4:44:ee:0f:11:
                    17:96:63:13:8d:60:d6:a7:a7:33:d3:2a:e1:7f:93:
                    08:80:f6:3f:97:25:b1:ca:8e:d3:7d:c1:f3:b2:bb:
                    3f:ba:4e:1f:41:57:c7:cc:e9:29:e5:ab:60:00:24:
                    5b:c1:9f:af:e9:16:a2:06:f3:cd:ba:f1:42:ba:bd:
                    4a:b6:eb:10:61:5d:74:ca:83:9f:3f:67:80:95:25:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:FA:BF:6A:CF:B5:1A:B8:1D:2D:BB:43:96:1E:6C:70:65:E1:36:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/01FABF6ACFB51AB81D2DBB43961E6C7065E1366F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.140.0/22
                IPv6:
                  2804:4850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267113

    Signature Algorithm: sha256WithRSAEncryption
         55:54:55:11:96:42:17:24:ce:bc:5b:37:80:5a:99:f7:62:fb:
         00:48:24:3b:13:24:b6:e6:c7:0f:61:1d:31:97:74:cd:0f:3d:
         c0:e4:5c:fb:dd:a7:9e:9e:8a:a3:0c:e3:c5:a1:ab:6b:54:23:
         91:ea:cf:db:53:c8:77:29:e3:1b:61:5e:a3:51:7c:12:a4:22:
         2e:da:1f:f6:85:f6:d8:70:68:5d:f3:5b:29:54:cf:72:05:f1:
         48:b2:b0:fd:e8:ce:c1:b1:20:e0:82:92:b9:1d:f5:20:31:83:
         49:42:5e:a7:ca:d1:13:40:bb:94:e9:01:80:a7:40:5c:94:05:
         49:15:78:38:d4:0e:42:89:81:a2:bf:be:1c:de:74:b5:50:a5:
         b7:da:84:ed:dc:3f:34:b9:b6:ae:44:2c:ac:9c:29:6d:cb:e7:
         72:af:62:6e:39:f1:db:93:87:a1:f8:e9:7d:75:d3:41:5a:12:
         7b:13:30:f0:c5:e3:3d:14:c4:a0:bb:01:d1:b7:fd:21:96:4a:
         75:65:a4:85:8d:d5:db:d5:e3:0e:80:27:ac:e6:21:6d:d9:36:
         ec:e6:b0:f0:36:c6:4f:82:44:06:92:f2:09:ea:ce:77:8d:3a:
         37:8d:64:a8:c8:eb:d4:9e:58:cc:b9:96:aa:86:09:af:48:63:
         c4:5b:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org