Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.cer
File:                     FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.cer (raw, json)
Hash identifier:          JVpCe5gQxUTPGkI2luBF09hqIM/tK3UzRSpohpCVOL0=
Subject key identifier:   FA:7B:03:3E:BE:45:3D:5B:A6:03:74:6B:D8:ED:0F:0A:F5:B2:BB:38
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E31B7C5E9DD65B4AACC48273EE057BA500D2EE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Oct 2023 16:37:27 +0000
Certificate not after:    Thu 24 Oct 2024 16:42:27 +0000
Subordinate resources:    AS: 263028
                          IP: 177.8.112.0/20
                          IP: 2804:a2c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:31:b7:c5:e9:dd:65:b4:aa:cc:48:27:3e:e0:57:ba:50:0d:2e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 26 16:37:27 2023 GMT
            Not After : Oct 24 16:42:27 2024 GMT
        Subject: CN=FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:b5:94:78:ed:06:55:3e:37:0e:96:16:3f:
                    c3:28:75:3d:73:1c:54:86:9e:18:13:de:25:0a:07:
                    34:22:62:34:d5:2e:bb:08:db:bd:44:34:92:a2:b2:
                    0f:4b:09:a1:8b:20:06:57:6c:99:3b:a4:6a:4d:e4:
                    4a:65:0a:2f:d7:e7:4d:63:79:9d:88:a0:e1:42:ed:
                    a8:00:e4:10:c8:c1:64:fa:61:20:09:c7:88:25:5a:
                    08:24:af:89:3a:ef:40:92:60:05:1c:fc:7e:a5:92:
                    1e:dc:0c:a8:9e:bb:e2:99:ca:59:2d:2f:7f:07:79:
                    c4:ce:8d:5a:cf:f3:c7:25:d9:43:ea:c6:0b:a3:f0:
                    68:4f:8e:be:85:0b:93:ca:6b:2f:6c:b2:4f:72:d9:
                    2d:4b:84:e9:33:e2:c4:70:b5:e1:d6:13:02:d0:f7:
                    46:c8:5d:59:7c:53:6d:9b:ec:8c:b6:0c:76:91:cd:
                    6d:b9:b7:b4:47:b8:e9:19:3c:e5:78:b9:d2:3f:0d:
                    2c:e9:5e:1c:e7:0a:73:e7:7c:20:5a:40:6c:34:94:
                    45:08:c5:25:f7:92:71:a6:e6:97:1e:4c:49:b8:78:
                    1f:ed:5b:ed:c6:2e:67:61:03:ee:87:ff:90:17:72:
                    3e:8c:22:b9:43:13:c0:0b:3c:11:00:c9:60:70:ee:
                    f8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:7B:03:3E:BE:45:3D:5B:A6:03:74:6B:D8:ED:0F:0A:F5:B2:BB:38
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.112.0/20
                IPv6:
                  2804:a2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263028

    Signature Algorithm: sha256WithRSAEncryption
         67:c1:dc:4f:70:cc:f1:3c:c1:cf:84:57:d3:af:0a:79:b8:42:
         ed:33:70:77:eb:58:91:ae:7f:a3:a6:b5:4e:c1:7f:19:ed:9b:
         83:57:cd:1a:ec:cf:61:a4:aa:66:8d:2a:2c:af:de:e8:eb:73:
         cb:07:e1:1a:b5:5a:98:f8:f5:ba:4c:f7:48:87:b5:36:45:00:
         cc:56:4a:7e:b1:8f:e7:d6:fc:01:3c:4a:36:43:e4:01:2b:18:
         9c:aa:1f:2b:16:3f:10:37:bb:73:eb:5c:b3:57:91:69:4d:78:
         12:5c:a6:48:2f:7e:3b:50:17:9b:a1:56:5d:d6:10:ee:5f:da:
         9c:13:d0:23:5c:48:7b:1c:f3:f2:8d:c3:6d:33:a9:75:a0:12:
         46:b8:b3:e8:60:32:77:4d:6e:93:c2:f7:c0:c6:40:54:ba:b6:
         84:aa:ec:b3:64:f0:39:bd:cf:dd:06:5c:49:76:40:e0:17:88:
         06:b8:e0:a0:bb:a6:df:37:98:83:2f:c1:33:65:24:96:ad:07:
         6b:79:4d:86:88:e5:ae:d9:ee:d3:47:0b:c1:57:74:1e:c4:15:
         ac:c6:7d:fe:c1:f9:0c:d1:b9:5a:c0:7f:fe:a8:54:a4:9b:f5:
         4a:43:eb:d9:b6:97:22:65:7e:3b:c5:0e:71:c2:bd:80:bc:a5:
         22:19:dd:60
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUXjG3xendZbSqzEgnPuBXulANLucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMjYxNjM3MjdaFw0yNDEwMjQxNjQyMjdaMDMxMTAvBgNV
BAMTKEZBN0IwMzNFQkU0NTNENUJBNjAzNzQ2QkQ4RUQwRjBBRjVCMkJCMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/bWUeO0GVT43DpYWP8ModT1z
HFSGnhgT3iUKBzQiYjTVLrsI271ENJKisg9LCaGLIAZXbJk7pGpN5EplCi/X501j
eZ2IoOFC7agA5BDIwWT6YSAJx4glWggkr4k670CSYAUc/H6lkh7cDKieu+KZylkt
L38HecTOjVrP88cl2UPqxguj8GhPjr6FC5PKay9ssk9y2S1LhOkz4sRwteHWEwLQ
90bIXVl8U22b7Iy2DHaRzW25t7RHuOkZPOV4udI/DSzpXhznCnPnfCBaQGw0lEUI
xSX3knGm5pceTEm4eB/tW+3GLmdhA+6H/5AXcj6MIrlDE8ALPBEAyWBw7vitAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6ewM+vkU9W6YD
dGvY7Q8K9bK7ODAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82VGNOTnhvSktYNEtLWDlISGJxUE5DcUdMc2lNcHp1QnB5
aU5YQkxEcVhIZy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNlRjTk54b0pLWDRLS1g5SEhicVBOQ3FHTHNpTXB6dUJw
eWlOWEJMRHFYSGcvMC9GQTdCMDMzRUJFNDUzRDVCQTYwMzc0NkJEOEVEMEYwQUY1
QjJCQjM4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBASxCHAwDQQCAAIwBwMF
ACgECiwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAN0MA0GCSqGSIb3DQEBCwUA
A4IBAQBnwdxPcMzxPMHPhFfTrwp5uELtM3B361iRrn+jprVOwX8Z7ZuDV80a7M9h
pKpmjSosr97o63PLB+EatVqY+PW6TPdIh7U2RQDMVkp+sY/n1vwBPEo2Q+QBKxic
qh8rFj8QN7tz61yzV5FpTXgSXKZIL347UBeboVZd1hDuX9qcE9AjXEh7HPPyjcNt
M6l1oBJGuLPoYDJ3TW6TwvfAxkBUuraEquyzZPA5vc/dBlxJdkDgF4gGuOCgu6bf
N5iDL8EzZSSWrQdreU2GiOWu2e7TRwvBV3QexBWsxn3+wfkM0blawH/+qFSkm/VK
Q+vZtpciZX47xQ5xwr2AvKUiGd1g
-----END CERTIFICATE-----
Generated at Thu Feb 20 17:39:50 2025 by rpki-client