Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.cer
File:                     FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.cer (raw, json)
Hash identifier:          sozScnxOVuW37F/3ARWt7QWrxAjKU+Zrrf5YvL6pzco=
Subject key identifier:   FA:B6:DE:FD:93:5A:1F:D0:91:49:B7:C7:A8:3F:F8:8F:51:D9:2A:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04A3B94449293D064972C07CF612BD4E648863CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Jan 2024 14:10:38 +0000
Certificate not after:    Tue 28 Jan 2025 14:15:38 +0000
Subordinate resources:    AS: 262569
                          IP: 143.137.60.0/22
                          IP: 170.82.72.0/22
                          IP: 177.73.112.0/21
                          IP: 2804:62c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a3:b9:44:49:29:3d:06:49:72:c0:7c:f6:12:bd:4e:64:88:63:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 30 14:10:38 2024 GMT
            Not After : Jan 28 14:15:38 2025 GMT
        Subject: CN=FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:43:f0:bd:5a:cf:46:3b:7b:6d:0e:41:de:16:
                    21:61:79:16:12:6f:6c:70:54:34:22:7f:67:ba:63:
                    8a:25:36:e9:2d:c1:7a:6c:b7:15:d7:c5:de:f4:57:
                    f8:2b:9d:fa:51:26:bd:73:7c:3c:c0:93:46:ae:cf:
                    1a:83:eb:d8:e6:d7:ac:43:12:67:14:88:10:2c:92:
                    3e:c6:78:88:d2:c5:d4:6c:d4:c8:e4:90:b5:14:74:
                    e2:27:5f:20:d6:df:94:22:fb:69:cc:ef:d7:c0:4e:
                    e0:66:12:a9:24:d3:dc:d1:4c:0e:a3:93:dc:43:f6:
                    26:1e:dc:d2:ea:96:15:32:0f:0b:c6:a0:e4:0f:e9:
                    5f:36:65:09:12:33:62:32:83:5c:0c:be:fb:8c:d4:
                    d2:74:73:27:97:4e:f2:c2:9a:38:e5:98:7e:d3:b5:
                    5b:13:fb:1c:16:55:80:75:d7:4c:bf:5a:04:13:f7:
                    6c:fd:18:af:b8:8d:54:73:70:65:b2:41:16:15:17:
                    24:25:d8:70:f3:1d:58:f4:62:5e:fc:66:51:11:c5:
                    c7:2b:40:00:bb:47:db:3f:0b:0a:dc:6f:e6:54:b0:
                    93:9c:23:e7:cd:d8:0e:e1:74:05:fd:a4:f7:71:48:
                    75:ac:3d:cb:56:b4:6a:2f:3c:20:58:51:fb:cb:04:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:B6:DE:FD:93:5A:1F:D0:91:49:B7:C7:A8:3F:F8:8F:51:D9:2A:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.60.0/22
                  170.82.72.0/22
                  177.73.112.0/21
                IPv6:
                  2804:62c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262569

    Signature Algorithm: sha256WithRSAEncryption
         38:e8:fa:a8:b7:54:0f:9f:e6:70:53:86:8e:58:76:31:2e:40:
         fe:01:6c:6d:03:d2:01:ef:14:14:cc:d8:de:38:11:45:f4:72:
         60:73:55:9f:9a:ea:da:5e:12:55:2c:11:11:a8:67:cd:fa:bc:
         c9:a5:39:54:c0:03:cc:5f:27:ad:9a:c9:16:73:12:18:98:46:
         04:33:eb:30:73:ad:02:b8:38:f5:53:5a:0f:ed:71:9e:1e:92:
         c6:74:93:d4:bf:66:23:92:2d:72:51:d7:10:05:1e:36:24:3f:
         6d:5c:c4:1d:48:3d:c0:19:18:3b:25:f6:3d:68:71:f3:f6:78:
         96:50:a0:89:e8:c8:ca:d0:66:6f:4c:52:4a:3a:72:3f:f5:0f:
         d8:e8:e0:eb:af:55:c0:20:20:68:00:ea:b2:20:c1:79:93:6e:
         ea:e2:1e:ae:2e:23:6b:ff:f4:d9:84:c2:04:9f:d1:11:d2:41:
         3b:4a:12:c5:e1:7f:70:31:70:aa:a2:cf:04:37:e0:6f:bd:52:
         8b:b6:3c:bf:15:6d:21:ff:eb:0f:fb:ec:87:e9:1e:54:73:ec:
         55:b6:47:60:e7:04:be:6c:1d:ff:c4:46:d8:83:97:c4:36:bf:
         24:c2:e8:75:8c:1a:8c:97:a8:80:6f:37:53:e9:e1:26:a2:f3:
         8c:8e:82:a9
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIUBKO5REkpPQZJcsB89hK9TmSIY80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMzAxNDEwMzhaFw0yNTAxMjgxNDE1MzhaMDMxMTAvBgNV
BAMTKEZBQjZERUZEOTM1QTFGRDA5MTQ5QjdDN0E4M0ZGODhGNTFEOTJBRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQ/C9Ws9GO3ttDkHeFiFheRYS
b2xwVDQif2e6Y4olNuktwXpstxXXxd70V/grnfpRJr1zfDzAk0auzxqD69jm16xD
EmcUiBAskj7GeIjSxdRs1MjkkLUUdOInXyDW35Qi+2nM79fATuBmEqkk09zRTA6j
k9xD9iYe3NLqlhUyDwvGoOQP6V82ZQkSM2Iyg1wMvvuM1NJ0cyeXTvLCmjjlmH7T
tVsT+xwWVYB110y/WgQT92z9GK+4jVRzcGWyQRYVFyQl2HDzHVj0Yl78ZlERxccr
QAC7R9s/Cwrcb+ZUsJOcI+fN2A7hdAX9pPdxSHWsPctWtGovPCBYUfvLBCtbAgMB
AAGjggMlMIIDITAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6tt79k1of0JFJ
t8eoP/iPUdkq6TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9SS21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25I
VGVYYkVxRjNiLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9SS21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25I
VGVYYkVxRjNiLzAvRkFCNkRFRkQ5MzVBMUZEMDkxNDlCN0M3QTgzRkY4OEY1MUQ5
MkFFOS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCj4k8AwQCqlJIAwQDsUlw
MA0EAgACMAcDBQAoBAYsMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQBqTANBgkq
hkiG9w0BAQsFAAOCAQEAOOj6qLdUD5/mcFOGjlh2MS5A/gFsbQPSAe8UFMzY3jgR
RfRyYHNVn5rq2l4SVSwREahnzfq8yaU5VMADzF8nrZrJFnMSGJhGBDPrMHOtArg4
9VNaD+1xnh6SxnST1L9mI5ItclHXEAUeNiQ/bVzEHUg9wBkYOyX2PWhx8/Z4llCg
iejIytBmb0xSSjpyP/UP2Ojg669VwCAgaADqsiDBeZNu6uIeri4ja//02YTCBJ/R
EdJBO0oSxeF/cDFwqqLPBDfgb71Si7Y8vxVtIf/rD/vsh+keVHPsVbZHYOcEvmwd
/8RG2IOXxDa/JMLodYwajJeogG83U+nhJqLzjI6CqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org