Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FA4B516160EDFD77769FEBDC569D37C3D8828626.cer
File:                     FA4B516160EDFD77769FEBDC569D37C3D8828626.cer (raw, json)
Hash identifier:          1ZWfaQe7+o1XTaVP8EYkcKBYg0kLS0YriO7cG9PLZSg=
Subject key identifier:   FA:4B:51:61:60:ED:FD:77:76:9F:EB:DC:56:9D:37:C3:D8:82:86:26
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C1E682633BF8DC8B71E3441E0E17345E7F4453D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/FA4B516160EDFD77769FEBDC569D37C3D8828626.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Nov 2023 12:58:30 +0000
Certificate not after:    Sat 16 Nov 2024 13:03:30 +0000
Subordinate resources:    AS: 269556
                          IP: 45.187.196.0/22
                          IP: 2804:6668::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1e:68:26:33:bf:8d:c8:b7:1e:34:41:e0:e1:73:45:e7:f4:45:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 12:58:30 2023 GMT
            Not After : Nov 16 13:03:30 2024 GMT
        Subject: CN=FA4B516160EDFD77769FEBDC569D37C3D8828626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:64:c5:b5:1f:b0:af:1a:69:41:27:18:82:79:
                    73:35:29:fc:b4:e8:b7:55:dd:38:19:a5:7c:47:b5:
                    12:31:58:e9:75:c0:11:06:d1:7b:b8:4c:33:19:49:
                    38:ff:29:4d:72:94:89:47:3c:35:07:46:e5:62:ed:
                    98:f8:72:3d:28:d6:ea:4b:dd:86:27:87:a0:28:2c:
                    59:06:59:66:9a:1d:2f:f5:a9:4a:1c:ee:a4:dd:a6:
                    59:4b:d0:27:b6:e5:d1:97:7c:e4:63:22:a6:60:54:
                    c6:4d:9c:65:9a:17:81:96:90:c8:11:84:24:98:64:
                    bb:06:ab:05:83:0d:26:30:e5:67:df:4e:e3:18:9e:
                    97:2e:33:85:d5:35:6c:be:f6:a2:95:98:63:36:b2:
                    0e:d6:ba:85:39:53:8c:9a:1a:ad:ee:b8:0d:7a:27:
                    20:71:4b:db:42:cf:e2:ca:b4:8f:82:46:f8:dc:fb:
                    37:4e:35:72:cd:43:b7:47:5f:68:ec:85:b3:1d:f8:
                    ee:fa:05:cf:d4:86:b9:82:88:3e:c4:40:e7:2f:0e:
                    66:69:29:3c:07:9e:2f:81:52:07:48:9c:20:9e:08:
                    a9:10:aa:4c:a8:2d:f0:b0:dc:8e:9b:c0:be:5c:22:
                    37:88:e9:0b:d4:a6:f0:ce:ff:87:99:ce:43:ab:0a:
                    54:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:4B:51:61:60:ED:FD:77:76:9F:EB:DC:56:9D:37:C3:D8:82:86:26
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/FA4B516160EDFD77769FEBDC569D37C3D8828626.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.196.0/22
                IPv6:
                  2804:6668::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269556

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:ab:b4:49:95:84:23:28:4b:33:83:1c:2e:51:18:03:f4:
         5e:cc:09:67:1e:8f:8c:d9:57:52:03:59:71:d3:88:7c:c3:94:
         d6:30:9d:ae:41:05:2f:78:b4:9e:c0:3c:a2:02:6b:76:47:a4:
         3b:95:ff:07:f2:41:42:c5:8c:3e:2f:25:1e:5f:df:09:cd:87:
         c0:19:14:08:0b:6b:aa:81:45:a9:8d:c7:86:e4:15:5c:a6:d7:
         41:34:1c:28:a1:bb:7b:22:34:0d:38:d7:32:3f:c7:38:d6:bb:
         23:aa:f4:67:3b:40:ea:5e:55:35:c7:dc:bb:78:40:8b:52:28:
         24:47:c6:04:68:73:27:64:8c:76:ce:48:1c:93:23:76:25:9f:
         c4:6d:04:72:ad:5f:88:59:98:d6:28:77:07:fe:2c:4c:2f:5b:
         5b:ef:47:b0:ae:b7:4d:25:fc:5f:87:af:a2:65:1e:4a:90:a0:
         9f:7a:ce:69:4e:72:cf:4e:a6:8a:04:a9:e3:d5:f9:0f:6e:15:
         a4:ae:6a:ef:cd:3e:1c:22:9c:a2:a3:42:6c:c9:de:ed:82:6b:
         f2:2e:fc:f9:c8:b2:b0:04:95:59:d5:ab:1b:52:ee:be:de:b6:
         53:1f:11:14:1f:12:e8:40:59:9a:01:00:84:4f:6a:5f:a4:03:
         9e:5a:b9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org