Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FA852750518CB837CC87518F9E27B0D2617AE845.cer
File:                     FA852750518CB837CC87518F9E27B0D2617AE845.cer (raw, json)
Hash identifier:          bwL0lGQCd0qUuz1+X1Fgw55Xo7Zw77+7Cw7XQrYcS58=
Subject key identifier:   FA:85:27:50:51:8C:B8:37:CC:87:51:8F:9E:27:B0:D2:61:7A:E8:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E22C7AF3B4BCF1AC759DE6B4697E3911615141C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/FA852750518CB837CC87518F9E27B0D2617AE845.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 01:14:54 +0000
Certificate not after:    Tue 07 Jan 2025 01:19:54 +0000
Subordinate resources:    AS: 264254
                          IP: 138.117.216.0/22
                          IP: 2804:2508::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:22:c7:af:3b:4b:cf:1a:c7:59:de:6b:46:97:e3:91:16:15:14:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 01:14:54 2024 GMT
            Not After : Jan  7 01:19:54 2025 GMT
        Subject: CN=FA852750518CB837CC87518F9E27B0D2617AE845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1d:66:93:cb:0a:7a:ad:83:50:31:51:f3:11:
                    4a:ea:61:36:fe:9f:b5:46:61:c6:ce:03:3d:75:e1:
                    c7:ec:6b:c6:fb:9e:8a:9b:de:8a:07:c2:2a:2b:11:
                    2f:1a:ad:f4:65:50:0a:82:33:59:65:33:66:4b:19:
                    cb:e2:01:58:de:cb:6a:f4:f3:c2:db:3f:98:60:ce:
                    53:64:78:86:c9:cc:9d:fa:f7:7a:77:3e:d4:ab:72:
                    56:60:91:c0:a4:ac:bf:0f:50:64:3a:75:79:8d:de:
                    57:d8:44:dc:cc:1c:38:77:6e:f6:18:b4:da:e8:6a:
                    8e:cf:5b:71:f4:7a:21:cd:b4:3d:04:66:38:24:5c:
                    bd:58:36:b4:6a:f9:7f:e8:6c:c8:13:5d:21:5a:ec:
                    90:d7:73:e7:45:21:cd:a3:7f:56:67:d8:5d:44:82:
                    91:49:6e:48:2f:ac:e5:df:3e:53:9d:0d:8f:35:b2:
                    53:12:bf:a8:76:65:a2:be:d2:c2:cc:ea:86:c2:34:
                    e8:f9:da:f4:59:d5:11:b8:da:ae:72:44:35:a5:ee:
                    6d:c3:3b:74:1f:c1:d8:36:bf:b0:34:47:6d:23:28:
                    6a:9d:e5:f4:b8:16:a5:63:db:2d:af:dc:cd:81:a1:
                    89:0b:ef:3e:16:59:3b:92:60:49:56:f2:4a:e3:57:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:85:27:50:51:8C:B8:37:CC:87:51:8F:9E:27:B0:D2:61:7A:E8:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/FA852750518CB837CC87518F9E27B0D2617AE845.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.216.0/22
                IPv6:
                  2804:2508::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264254

    Signature Algorithm: sha256WithRSAEncryption
         4b:a2:dd:b8:92:e0:50:57:9c:78:34:e7:98:c9:dc:da:d3:93:
         b1:53:53:a5:ca:16:8c:78:89:d7:50:4b:a5:dc:0c:eb:71:39:
         43:6b:63:be:43:ff:7f:b2:fc:d5:f8:3f:cc:09:25:63:06:fc:
         ab:cb:af:ae:17:05:f5:a3:5f:f2:e8:bc:9b:dc:18:66:f0:af:
         3b:0c:b4:87:55:9f:45:3c:85:55:d3:5f:f4:f0:be:88:d3:ae:
         91:6a:6c:ed:08:38:3a:b4:c0:f6:58:1b:32:f3:c4:51:8b:27:
         b7:1e:9c:9d:9e:13:3c:ad:b0:df:25:81:e1:05:75:dc:86:6a:
         84:a7:e0:f6:6b:ae:8e:c5:2b:36:d2:cf:16:dc:71:81:b3:0b:
         5e:9b:51:ef:13:98:a7:fc:24:35:91:5d:3a:49:9a:12:f8:c0:
         da:3f:dc:d0:b7:13:ca:c4:7a:66:2a:bb:44:be:fe:31:23:b4:
         b7:5b:db:42:de:af:2c:18:72:62:58:4a:b1:74:a0:db:fb:a6:
         8d:58:3c:ff:e2:3e:de:73:24:9a:13:07:41:26:cc:36:69:ac:
         44:1c:e7:d4:36:94:e0:3d:ec:28:67:6f:b3:25:3d:e1:1e:38:
         2e:fb:4e:3e:92:19:1f:06:5c:d3:27:c4:df:be:1b:ff:ac:58:
         07:a2:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org