Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FA5DD4A99CE33D3AE72F86A394621F08627407D3.cer
File:                     FA5DD4A99CE33D3AE72F86A394621F08627407D3.cer (raw, json)
Hash identifier:          JCAoW1DgQz4PTa1Wc9/iK1PqrIgpo7oXAqSZvMRz4Ic=
Subject key identifier:   FA:5D:D4:A9:9C:E3:3D:3A:E7:2F:86:A3:94:62:1F:08:62:74:07:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C5AE378CC91CB3EBE0FEAF7681593CE239345A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FA5DD4A99CE33D3AE72F86A394621F08627407D3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2024 15:35:11 +0000
Certificate not after:    Tue 18 Mar 2025 15:40:11 +0000
Subordinate resources:    AS: 268564
                          IP: 45.162.212.0/22
                          IP: 2804:531c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5a:e3:78:cc:91:cb:3e:be:0f:ea:f7:68:15:93:ce:23:93:45:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 19 15:35:11 2024 GMT
            Not After : Mar 18 15:40:11 2025 GMT
        Subject: CN=FA5DD4A99CE33D3AE72F86A394621F08627407D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:f4:d1:a7:b8:2e:02:8a:b2:dc:67:4a:87:
                    24:92:07:9e:80:c6:5e:7d:34:88:2b:85:a7:71:2b:
                    cb:ca:de:1b:1d:13:ed:ad:dc:02:9f:4a:ca:c2:72:
                    82:a8:c3:fe:0f:e9:84:fb:57:c2:cd:4f:51:27:fa:
                    3c:ca:ba:dc:3e:87:14:d5:7f:4e:85:31:bf:83:22:
                    73:94:24:15:3a:2d:f9:7d:1d:24:45:d2:e6:7a:29:
                    b5:90:61:92:86:2b:b1:56:f6:b0:22:c0:12:6e:4a:
                    59:72:19:6c:44:91:57:72:76:68:30:80:ee:16:d2:
                    3d:00:68:dc:d0:fa:ad:08:d1:7e:f3:e1:3f:21:be:
                    a2:ad:be:94:fb:1d:01:a6:d2:8f:5c:86:de:6a:5a:
                    a5:94:bd:13:e4:19:b1:d3:86:b9:ca:54:fb:79:41:
                    a9:52:2c:57:d1:25:25:fe:3a:53:8b:28:89:04:f5:
                    a4:74:dc:88:68:a2:bf:ed:cb:54:a5:1e:97:15:8e:
                    a0:50:b8:97:a7:85:12:70:14:8a:10:80:24:7a:05:
                    9f:cf:2e:87:05:e1:42:b0:32:70:d3:33:6c:4f:c7:
                    83:20:8e:b3:9f:cf:4c:1c:a4:ff:96:cc:0a:2f:d7:
                    60:c7:9b:b9:2c:32:ad:4c:d3:4f:14:5a:89:28:66:
                    10:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:5D:D4:A9:9C:E3:3D:3A:E7:2F:86:A3:94:62:1F:08:62:74:07:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FA5DD4A99CE33D3AE72F86A394621F08627407D3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.212.0/22
                IPv6:
                  2804:531c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268564

    Signature Algorithm: sha256WithRSAEncryption
         28:cf:f6:c8:29:00:81:3d:f0:68:00:b4:a4:22:0d:34:32:a6:
         60:89:80:a0:ae:af:22:0e:79:df:55:d6:30:65:bc:60:ef:ac:
         ba:40:5c:7d:f1:c4:5e:f6:ed:ea:f3:a3:20:c3:e3:c8:a0:b3:
         3c:53:a9:07:36:3f:65:50:67:d3:91:ee:6b:1b:eb:6b:23:0f:
         02:c3:ad:9e:32:ca:37:24:89:cb:ab:27:64:bc:2f:4d:43:87:
         43:19:ed:c2:eb:05:7b:06:17:9d:ca:01:a3:5f:aa:fe:cc:65:
         5d:3a:f5:c1:ec:24:2c:d8:82:f4:c9:7b:e7:05:58:86:b8:ea:
         ef:a5:17:0c:de:e0:ee:8e:a8:c7:11:82:67:0c:5f:6b:df:e1:
         f2:e7:cf:0b:21:d1:8a:91:37:42:c3:33:b2:5c:cf:cd:44:38:
         a0:07:26:97:9f:41:bf:87:0d:b4:21:f7:db:c1:ae:e3:1e:f2:
         69:04:7f:52:c8:22:fc:6b:e5:a1:8a:a1:9c:ff:5f:24:ca:72:
         3c:fd:cf:4e:4b:39:a5:fb:db:46:bc:3f:6c:f6:d0:78:04:5b:
         4d:e2:1c:f8:3b:d2:11:2b:49:f3:94:91:54:4a:ad:98:13:f1:
         11:c6:7e:bc:90:07:4d:7f:19:b9:ad:52:19:ef:1c:98:4a:95:
         2b:c2:1f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org