Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C.cer
File:                     FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C.cer (raw, json)
Hash identifier:          FxkBKL08QgGU8NBDXGYe4mwvkylG7MxM8o+SFDlreio=
Subject key identifier:   FA:5A:A3:1B:D7:66:8C:AE:0D:5B:DB:65:1D:2C:AF:27:97:36:BE:8C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7102333F82B7139F4EFF1E07F3DBE019837D9DCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8PHPLhP5owGawwS56p4gF26tp7QQvRAfs4yWMpCuNmVK/0/FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8PHPLhP5owGawwS56p4gF26tp7QQvRAfs4yWMpCuNmVK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Aug 2023 07:38:06 +0000
Certificate not after:    Fri 09 Aug 2024 07:43:06 +0000
Subordinate resources:    AS: 271661
                          IP: 187.63.232.0/22
                          IP: 2804:7f04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:02:33:3f:82:b7:13:9f:4e:ff:1e:07:f3:db:e0:19:83:7d:9d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 11 07:38:06 2023 GMT
            Not After : Aug  9 07:43:06 2024 GMT
        Subject: CN=FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ca:a7:d4:2c:25:5e:37:5a:5d:f9:78:39:7c:
                    48:34:f0:1c:7a:2a:08:8e:81:9d:0e:ad:71:49:39:
                    a4:28:68:c8:6a:60:dc:7e:f6:16:a8:0f:2d:97:c5:
                    7e:07:cb:18:fe:cc:31:d4:b4:cb:8e:cd:fe:46:ff:
                    ed:dd:e0:e5:51:59:bd:8d:70:d6:e2:ad:a7:07:8f:
                    d1:8d:3d:5f:47:6a:c2:d6:00:a6:a6:79:87:42:30:
                    d6:e3:4f:09:81:48:53:30:47:0c:80:a3:2a:10:33:
                    8d:27:26:23:7a:10:bd:8b:50:76:fe:3b:5a:e9:18:
                    3b:33:6b:d1:39:6a:12:a7:00:c4:4e:5d:79:b7:f5:
                    60:af:e1:c9:c6:1b:ab:98:62:35:08:76:bc:b3:31:
                    3f:07:b2:2b:a4:7b:21:e4:76:5e:ae:4d:10:3c:49:
                    de:4c:2a:87:6a:95:2c:45:c6:64:2a:28:69:f3:e7:
                    5b:bf:7f:95:86:e6:02:2b:70:b1:a7:4f:4e:b4:ce:
                    db:1d:ac:5d:9c:6e:a3:7a:ea:c4:39:81:cb:4c:4a:
                    b2:a2:02:3b:4a:a3:f8:df:7c:63:17:bc:e5:4c:7d:
                    99:5c:7f:92:12:37:8e:ba:26:97:64:27:b9:df:3e:
                    62:04:43:62:9c:c2:c3:a7:5e:d2:08:48:36:b5:9c:
                    44:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:5A:A3:1B:D7:66:8C:AE:0D:5B:DB:65:1D:2C:AF:27:97:36:BE:8C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8PHPLhP5owGawwS56p4gF26tp7QQvRAfs4yWMpCuNmVK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8PHPLhP5owGawwS56p4gF26tp7QQvRAfs4yWMpCuNmVK/0/FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.232.0/22
                IPv6:
                  2804:7f04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271661

    Signature Algorithm: sha256WithRSAEncryption
         35:2e:22:b9:7e:21:ab:75:ac:85:8c:2c:8f:7d:59:89:bd:71:
         1e:13:54:1d:03:02:fe:67:c6:74:d9:b1:e4:ce:04:1a:7c:5b:
         94:41:19:55:8e:29:b7:96:a8:22:e9:32:a3:70:64:e6:90:74:
         da:09:46:10:48:1c:4c:6e:8d:c4:cd:15:3d:ed:59:fb:d7:c3:
         e2:22:0c:78:cf:72:33:30:63:a7:49:ee:8c:aa:ae:48:3e:21:
         56:80:8c:e4:74:18:ba:29:14:86:a2:68:ef:6b:cc:72:67:8c:
         99:0d:3c:22:6f:72:a4:4f:dd:2e:22:76:ff:6a:30:4b:84:65:
         a5:ac:54:74:24:1f:03:72:ab:e9:19:99:70:11:85:5b:04:7d:
         30:d1:c8:a6:6d:c1:a5:75:aa:66:1f:1a:46:55:6d:f8:e7:c6:
         a5:9d:7f:80:34:97:56:45:3c:2f:70:17:ae:dd:b2:b4:4e:f8:
         28:d0:bc:6e:03:57:b4:3a:c6:6b:82:2e:37:bb:18:36:dd:57:
         68:b1:2a:86:e5:35:92:db:e7:37:b7:e3:93:b5:8b:7d:89:d8:
         88:a9:ce:da:f0:30:b8:b3:c3:7d:c3:40:e2:3b:4b:25:a9:f5:
         01:bc:e6:a9:b3:87:17:69:19:3c:ba:6b:d2:db:7d:16:b4:40:
         ec:3e:41:fc
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUcQIzP4K3E59O/x4H89vgGYN9nc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTEwNzM4MDZaFw0yNDA4MDkwNzQzMDZaMDMxMTAvBgNV
BAMTKEZBNUFBMzFCRDc2NjhDQUUwRDVCREI2NTFEMkNBRjI3OTczNkJFOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiyqfULCVeN1pd+Xg5fEg08Bx6
KgiOgZ0OrXFJOaQoaMhqYNx+9haoDy2XxX4Hyxj+zDHUtMuOzf5G/+3d4OVRWb2N
cNbiracHj9GNPV9HasLWAKameYdCMNbjTwmBSFMwRwyAoyoQM40nJiN6EL2LUHb+
O1rpGDsza9E5ahKnAMROXXm39WCv4cnGG6uYYjUIdryzMT8HsiukeyHkdl6uTRA8
Sd5MKodqlSxFxmQqKGnz51u/f5WG5gIrcLGnT060ztsdrF2cbqN66sQ5gctMSrKi
AjtKo/jffGMXvOVMfZlcf5ISN466JpdkJ7nfPmIEQ2KcwsOnXtIISDa1nESBAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6WqMb12aMrg1b
22UdLK8nlza+jDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84UEhQTGhQNW93R2F3d1M1NnA0Z0YyNnRwN1FRdlJBZnM0
eVdNcEN1Tm1WSy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOFBIUExoUDVvd0dhd3dTNTZwNGdGMjZ0cDdRUXZSQWZz
NHlXTXBDdU5tVksvMC9GQTVBQTMxQkQ3NjY4Q0FFMEQ1QkRCNjUxRDJDQUYyNzk3
MzZCRThDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK7P+gwDQQCAAIwBwMF
ACgEfwQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCUtMA0GCSqGSIb3DQEBCwUA
A4IBAQA1LiK5fiGrdayFjCyPfVmJvXEeE1QdAwL+Z8Z02bHkzgQafFuUQRlVjim3
lqgi6TKjcGTmkHTaCUYQSBxMbo3EzRU97Vn718PiIgx4z3IzMGOnSe6Mqq5IPiFW
gIzkdBi6KRSGomjva8xyZ4yZDTwib3KkT90uInb/ajBLhGWlrFR0JB8DcqvpGZlw
EYVbBH0w0cimbcGldapmHxpGVW3458alnX+ANJdWRTwvcBeu3bK0Tvgo0LxuA1e0
OsZrgi43uxg23VdosSqG5TWS2+c3t+OTtYt9idiIqc7a8DC4s8N9w0DiO0slqfUB
vOaps4cXaRk8umvS230WtEDsPkH8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org