Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4FC5DD8FA2697FEEEC95D79F39D32FFB89E6AEAC.cer
File:                     4FC5DD8FA2697FEEEC95D79F39D32FFB89E6AEAC.cer (raw, json)
Hash identifier:          wXzbcm2/6FmCPN1CLQ3lzO6oZW940z0ej84NHJ2D4Lk=
Subject key identifier:   4F:C5:DD:8F:A2:69:7F:EE:EC:95:D7:9F:39:D3:2F:FB:89:E6:AE:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F003B4218E493A6BDA9A80A7559F45E4420E77C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/4FC5DD8FA2697FEEEC95D79F39D32FFB89E6AEAC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2024 15:09:38 +0000
Certificate not after:    Thu 13 Mar 2025 15:14:38 +0000
Subordinate resources:    AS: 270266
                          IP: 200.115.104.0/22
                          IP: 2804:6960::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:00:3b:42:18:e4:93:a6:bd:a9:a8:0a:75:59:f4:5e:44:20:e7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 15:09:38 2024 GMT
            Not After : Mar 13 15:14:38 2025 GMT
        Subject: CN=4FC5DD8FA2697FEEEC95D79F39D32FFB89E6AEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:b3:4a:15:55:2d:e2:5a:ef:80:b5:7b:7f:
                    1b:77:e6:f3:1a:1c:ca:dd:df:92:d3:5e:ac:c7:e4:
                    c9:2b:3a:ee:ef:96:e0:97:26:2b:b3:83:15:a7:40:
                    ce:64:8e:c3:1d:4e:40:6e:09:08:69:cb:e5:d6:b6:
                    f5:8d:fe:e8:f2:2b:bb:de:00:65:0f:1c:35:35:43:
                    6f:13:7f:89:1b:ba:c6:80:48:b7:c3:a9:5f:c3:5d:
                    ad:85:6f:3f:37:f7:48:d4:e0:f9:6b:68:2f:af:d7:
                    d8:f5:af:92:b4:41:92:84:a4:9f:2b:50:07:29:3d:
                    fd:9c:94:46:e5:b1:9f:85:91:65:53:80:cb:72:b7:
                    2e:46:66:a1:e6:78:a4:62:84:0d:e6:da:ec:ce:62:
                    0c:d7:5d:25:95:59:30:69:2a:f0:80:cb:a4:4c:01:
                    46:12:b3:ca:4a:c3:11:b0:73:98:ff:89:00:95:70:
                    c9:ec:01:d8:ef:81:15:c2:cc:1f:3d:16:05:df:bf:
                    f4:7f:cb:40:22:c4:ef:60:ff:c9:be:1e:75:be:af:
                    e6:da:76:42:86:c9:cf:fb:b9:c4:39:59:93:39:dc:
                    f9:37:67:60:48:d3:b8:4b:f4:e0:c3:1a:28:94:94:
                    d5:f3:18:e8:a4:e5:86:78:2a:27:23:60:f1:2a:52:
                    4c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:C5:DD:8F:A2:69:7F:EE:EC:95:D7:9F:39:D3:2F:FB:89:E6:AE:AC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/4FC5DD8FA2697FEEEC95D79F39D32FFB89E6AEAC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.104.0/22
                IPv6:
                  2804:6960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270266

    Signature Algorithm: sha256WithRSAEncryption
         3d:13:88:45:e7:91:8e:1b:6a:6a:48:d6:39:73:bf:b1:04:92:
         29:c7:22:f7:a0:17:81:c8:54:99:ab:17:b6:f0:90:8b:a6:b6:
         83:b6:34:1a:a6:bc:e7:aa:16:1e:68:77:f1:fa:4e:28:f6:5a:
         af:8b:fc:37:52:f1:bf:d4:3a:ad:0c:c9:48:85:48:fe:b5:27:
         b2:5d:57:0e:9c:bb:f6:22:14:da:ce:73:88:f2:b5:84:c8:35:
         26:47:56:aa:4f:2b:9e:90:f5:75:84:e5:e5:fd:c6:5f:c0:48:
         48:f7:9a:34:de:79:32:b0:9f:66:e7:d5:e9:84:d6:72:df:6e:
         3e:94:98:05:c5:87:56:da:35:68:7e:48:2e:02:df:4e:a1:fc:
         9a:9f:b4:2c:69:7b:0a:3d:d5:4b:d9:05:df:f5:e7:55:82:ec:
         e7:35:3f:03:46:89:ff:4e:db:16:c9:6b:92:b0:86:8c:bf:a4:
         76:79:bf:f3:fe:c9:c9:4a:fb:28:f7:00:0c:1d:5d:c1:04:66:
         89:ef:30:a4:6d:20:a3:d3:ea:79:04:b3:59:88:8e:0b:76:38:
         f5:d5:3a:6c:5d:16:ea:9d:f8:03:18:68:5d:70:43:78:c2:82:
         c9:24:e1:08:6a:79:c6:4e:0f:1f:39:b9:a6:63:f0:06:b2:a4:
         b8:45:1a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org