Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer
File:                     FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer (raw, json)
Hash identifier:          nQ1TgYfW4Ui2xPGkGqqbO+CAl61T7iJcgJM/kEZR+oM=
Subject key identifier:   FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       665A851F2DAA81335435384BA869B2EBA8875AC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 19:28:53 +0000
Certificate not after:    Tue 12 Nov 2024 19:33:53 +0000
Subordinate resources:    AS: 267224
                          IP: 45.231.192.0/22
                          IP: 2804:4a34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5a:85:1f:2d:aa:81:33:54:35:38:4b:a8:69:b2:eb:a8:87:5a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 14 19:28:53 2023 GMT
            Not After : Nov 12 19:33:53 2024 GMT
        Subject: CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:b9:0c:84:e6:2e:c4:98:2c:04:97:df:c3:
                    8b:d7:7b:79:29:6c:14:40:bc:eb:41:d4:36:c6:17:
                    fe:1c:eb:30:52:95:50:6e:ae:3d:c8:9f:d0:03:ad:
                    48:34:df:09:39:78:85:3c:62:ba:9b:72:d3:d5:c9:
                    01:ba:be:62:45:ff:f7:f4:ab:5b:aa:02:73:e3:40:
                    79:f9:73:37:3f:f9:22:13:23:34:07:5c:e5:67:b1:
                    0d:6a:6e:72:11:aa:44:37:f1:9c:88:20:94:47:7f:
                    e0:6a:5f:4e:64:8b:dd:70:fc:9b:9f:4b:c2:c5:b4:
                    f8:0c:83:34:d1:53:64:a5:6d:2d:a1:31:95:a1:67:
                    c9:95:de:d3:98:a9:64:9c:56:74:0d:82:e6:3b:7d:
                    02:02:fa:7e:bf:bc:db:8d:ae:11:28:ca:46:f0:b7:
                    c3:a1:79:b2:f2:6e:40:ae:32:db:dd:a8:79:bd:d4:
                    0a:3c:3e:3c:3c:50:c2:07:ac:2f:20:de:00:ca:0d:
                    c8:95:a4:95:c1:e2:0f:77:d6:77:40:eb:08:70:ea:
                    7d:82:76:0e:2e:99:c7:e3:ff:47:b3:e7:4e:b8:1e:
                    90:73:39:18:24:a4:20:2b:6b:5c:70:6e:41:8d:bb:
                    54:06:bb:00:65:14:95:74:53:2e:c4:05:ee:7f:b1:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.192.0/22
                IPv6:
                  2804:4a34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267224

    Signature Algorithm: sha256WithRSAEncryption
         58:f0:39:67:c0:de:28:5e:bb:45:e7:15:6e:0b:f8:f2:51:6b:
         4c:48:62:8e:b3:c3:99:ff:05:8e:60:f7:73:30:59:66:91:7b:
         f4:48:7c:d3:56:e3:1a:80:b0:70:a2:26:df:b8:75:e8:f6:d3:
         2b:53:d9:d4:cd:a3:7d:4d:be:b7:51:41:c8:f9:f8:c6:5d:34:
         48:16:e6:92:5d:80:52:67:95:8e:fb:9d:9b:97:53:68:6c:60:
         7f:11:88:e1:36:76:c5:e7:85:37:0a:2d:4b:41:c0:bb:e6:ec:
         5a:a8:a1:33:0d:46:ab:c6:2a:66:e5:b3:74:95:b1:16:cc:75:
         da:d4:52:ca:56:43:21:11:d5:14:54:7d:e0:4b:6b:cc:86:28:
         4b:81:01:62:bd:02:14:b4:6e:58:af:b6:c3:5a:22:61:21:99:
         12:44:8d:15:dd:88:e5:3f:48:a1:c2:c3:eb:b7:89:58:62:38:
         fb:09:8d:84:7b:7a:0f:7b:a6:b8:a5:4d:e5:a5:71:41:6d:30:
         96:a0:93:f1:09:37:2d:ff:bc:98:9c:c1:98:43:2b:48:86:aa:
         4a:ef:a7:d4:8d:96:9b:b6:74:30:89:4e:2e:39:6f:43:03:69:
         bf:42:92:1e:d0:9a:14:13:26:53:0e:f0:bc:a5:f3:b8:d1:19:
         cf:e1:e5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org