Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FA86FE2D056416CC0DB0643754AE56BA4FB35A44.cer
File:                     FA86FE2D056416CC0DB0643754AE56BA4FB35A44.cer (raw, json)
Hash identifier:          nVaPTZhHcpSzk5HMpN9BKxR7vVdshsOlKxMS3GuG+vM=
Subject key identifier:   FA:86:FE:2D:05:64:16:CC:0D:B0:64:37:54:AE:56:BA:4F:B3:5A:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       57D414D35600A76B7CF81272AF886B3539CFFE98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/FA86FE2D056416CC0DB0643754AE56BA4FB35A44.mft
caRepository:             rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Apr 2023 14:47:30 +0000
Certificate not after:    Fri 26 Apr 2024 14:52:30 +0000
Subordinate resources:    AS: 267557
                          IP: 45.70.4.0/22
                          IP: 2804:433c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d4:14:d3:56:00:a7:6b:7c:f8:12:72:af:88:6b:35:39:cf:fe:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 28 14:47:30 2023 GMT
            Not After : Apr 26 14:52:30 2024 GMT
        Subject: CN=FA86FE2D056416CC0DB0643754AE56BA4FB35A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:df:e5:b4:d1:ef:bf:fa:ef:17:59:ae:60:
                    9d:9b:dc:b9:98:4f:08:c3:d6:e8:49:a0:f4:67:76:
                    ee:24:89:a0:85:4f:85:0f:cd:a2:20:f0:42:1b:75:
                    08:93:a2:67:fb:f8:80:4a:ef:fe:88:ef:13:91:c6:
                    07:0b:fa:f9:78:7b:10:96:da:af:e3:bf:2c:20:79:
                    79:67:c0:2b:be:3a:0b:cc:ef:7f:ab:c4:89:cf:34:
                    12:df:87:c6:9f:c1:74:3e:0b:5e:19:24:c4:37:ee:
                    75:3b:a4:84:d0:db:a8:96:91:05:77:1d:1d:0e:6d:
                    3d:18:94:96:d3:e4:1d:09:71:11:71:00:7a:38:ce:
                    1e:9b:f8:ff:6d:cd:79:8f:06:e5:d0:96:ec:48:8d:
                    81:c3:04:d5:08:7c:7e:99:88:58:c3:e1:31:bc:87:
                    9e:34:34:b7:a8:95:fd:52:cb:ab:23:61:02:7e:0a:
                    16:91:1a:1a:53:7a:93:e2:a1:c8:79:a8:be:91:a7:
                    16:7f:53:cc:59:a8:7c:84:3b:19:85:65:c6:e5:31:
                    83:67:6b:83:40:77:b7:8f:04:c7:ab:54:bd:b8:6a:
                    e3:d3:b9:f2:b8:7d:54:8f:06:85:c2:59:55:14:97:
                    12:75:86:38:c5:91:5d:15:0e:73:c1:40:0c:e6:f2:
                    3c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:86:FE:2D:05:64:16:CC:0D:B0:64:37:54:AE:56:BA:4F:B3:5A:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/FA86FE2D056416CC0DB0643754AE56BA4FB35A44.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.4.0/22
                IPv6:
                  2804:433c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267557

    Signature Algorithm: sha256WithRSAEncryption
         46:7e:51:88:31:2b:67:27:5c:62:26:6a:f1:2d:19:21:e9:00:
         62:b7:05:83:ae:bc:eb:1b:91:42:64:29:4e:14:d7:2a:38:13:
         34:f2:6a:a1:24:98:2c:e5:ed:9f:36:03:30:d8:b5:c8:56:5d:
         18:0e:96:fc:97:f6:81:20:4a:fb:d9:1a:43:0c:c8:ba:41:08:
         b7:53:b3:0a:3d:c5:c1:6c:df:c2:eb:67:03:31:00:dd:fd:58:
         5c:31:03:7c:07:7b:04:83:1d:21:4c:e3:60:2d:2c:7f:01:d9:
         a5:0f:cd:a3:64:df:27:cb:46:8f:a2:86:97:dd:23:a9:94:54:
         da:e9:e2:bb:e1:c7:67:6f:00:94:82:85:b4:75:c5:86:b0:41:
         79:f8:64:d1:d9:18:44:c2:4e:1b:90:89:17:58:0a:d8:a7:65:
         a3:51:04:75:e7:73:21:a1:76:0d:14:75:87:70:f7:fd:21:58:
         45:12:55:c2:94:59:89:05:ca:6a:04:2a:87:ec:83:48:9e:d1:
         b6:f6:e3:30:da:6a:d2:ee:ab:cd:0b:f2:69:3b:e4:c2:aa:f3:
         99:0a:c5:91:1d:20:32:d9:42:74:1c:be:c5:a6:12:5e:4d:85:
         3e:82:a9:0c:6b:df:87:7d:6d:bc:2a:ab:60:9d:0f:1a:b3:87:
         40:02:84:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org