Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FACADE39A05C0D6EE2D92F07EB9B7703942C91F4.cer
File:                     FACADE39A05C0D6EE2D92F07EB9B7703942C91F4.cer (raw, json)
Hash identifier:          PL89Ehfnk1KZC/0d/xnOW0UMuzi7EWo3PrdLQO+kP1M=
Subject key identifier:   FA:CA:DE:39:A0:5C:0D:6E:E2:D9:2F:07:EB:9B:77:03:94:2C:91:F4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42F3FAA3A6F134A35B2A25E137250F87D2E29ACB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/FACADE39A05C0D6EE2D92F07EB9B7703942C91F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 19:42:29 +0000
Certificate not after:    Wed 26 Feb 2025 19:47:29 +0000
Subordinate resources:    AS: 262407
                          IP: 138.0.92.0/22
                          IP: 177.38.144.0/21
                          IP: 189.76.240.0/20
                          IP: 2804:3f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f3:fa:a3:a6:f1:34:a3:5b:2a:25:e1:37:25:0f:87:d2:e2:9a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 19:42:29 2024 GMT
            Not After : Feb 26 19:47:29 2025 GMT
        Subject: CN=FACADE39A05C0D6EE2D92F07EB9B7703942C91F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:2c:cb:ad:17:10:25:85:d4:1a:37:e9:cf:
                    83:50:0e:9c:d2:15:0b:9b:98:6f:c7:bd:72:35:7b:
                    63:29:c0:f6:cf:6f:65:8a:8c:c4:1e:ac:7f:5f:a7:
                    00:88:c2:7b:21:20:d4:f1:d9:f8:8a:c4:71:46:31:
                    66:11:aa:12:0c:fe:b3:0c:35:28:bb:80:50:6f:21:
                    4d:b4:57:4f:b2:48:bd:ce:c3:2f:55:ef:9e:ec:fb:
                    7c:b2:9f:5e:ae:10:94:bd:e2:02:a5:56:fb:2a:68:
                    5a:31:dd:5c:0a:23:f3:07:f2:4f:6a:3a:fb:c5:c8:
                    a5:76:15:c6:f8:bd:8e:ff:01:68:89:1c:2d:ed:8a:
                    fe:ec:34:5e:6e:09:62:30:5c:47:f2:7f:15:4b:93:
                    7b:55:57:7e:61:d4:41:d0:33:2a:c4:f5:90:9d:43:
                    9e:97:c2:cd:ec:7e:a6:ae:90:43:e1:8e:49:00:52:
                    00:9a:9d:ff:21:35:cf:36:59:0c:00:4c:47:c4:e0:
                    55:71:97:77:83:55:d3:bb:dc:b3:f1:7a:06:c2:f1:
                    c2:0f:6f:76:61:53:2f:3b:62:12:ab:2c:40:c0:8f:
                    5b:30:3a:04:d0:3d:30:a7:1e:81:72:d9:b7:ec:4a:
                    56:89:c6:cd:93:ce:b5:96:9e:1c:06:97:cb:d0:4e:
                    0b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:CA:DE:39:A0:5C:0D:6E:E2:D9:2F:07:EB:9B:77:03:94:2C:91:F4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/FACADE39A05C0D6EE2D92F07EB9B7703942C91F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.92.0/22
                  177.38.144.0/21
                  189.76.240.0/20
                IPv6:
                  2804:3f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262407

    Signature Algorithm: sha256WithRSAEncryption
         6f:ca:78:70:ee:a3:a8:cd:00:2b:8c:92:9f:9c:47:4a:79:bc:
         7d:20:b4:18:e4:37:9c:8d:22:4c:25:74:2a:9a:7f:f1:20:27:
         22:87:bc:b4:c2:1e:5d:f7:72:98:6b:bb:7e:64:5f:cd:9e:77:
         a7:67:96:3e:4a:82:d6:21:2b:6d:c8:b9:44:32:4e:8f:89:1c:
         c5:42:b0:d8:2d:39:50:4e:03:81:b3:a1:8c:8e:db:74:fd:da:
         0a:3c:0f:b7:8c:74:29:0e:cb:d3:ea:e6:33:d3:41:92:45:54:
         cd:c1:45:61:b2:6b:00:16:77:5d:d8:59:84:07:a1:af:28:59:
         f9:ce:7f:49:0b:09:fe:e9:b7:a5:a7:b8:a8:62:9b:db:78:d9:
         3f:46:0d:6b:da:32:e6:a5:a7:1e:f3:90:05:b9:4d:22:5c:5b:
         d0:e0:88:bc:8e:ec:76:69:02:b2:60:ea:05:69:c3:8f:7c:d5:
         6d:25:06:17:98:cc:1f:d6:e0:50:60:6e:32:e2:bb:ce:c4:98:
         b9:f8:c1:3f:67:fe:0e:df:7f:f2:bd:c4:86:be:cc:c7:91:f4:
         3f:9c:ed:ff:3d:b8:41:a9:5f:c8:2f:35:87:db:ee:11:eb:4e:
         5c:e1:c7:18:f6:9a:f3:b6:55:fd:83:6b:e5:c1:84:bf:de:f6:
         99:bc:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org