Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FADF18FB60D804E7EB8C508AB2A1A3E4921FDD96.cer
File:                     FADF18FB60D804E7EB8C508AB2A1A3E4921FDD96.cer (raw, json)
Hash identifier:          YFE6BV7/hu93WInBUCevoIcWRWJr1F9slDMYHFckBjw=
Subject key identifier:   FA:DF:18:FB:60:D8:04:E7:EB:8C:50:8A:B2:A1:A3:E4:92:1F:DD:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5AC6007DE6501DC5AD8B027BA6E4500CB1EFD558
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/FADF18FB60D804E7EB8C508AB2A1A3E4921FDD96.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Jul 2023 14:28:33 +0000
Certificate not after:    Wed 03 Jul 2024 14:33:33 +0000
Subordinate resources:    AS: 267278
                          IP: 45.232.224.0/22
                          IP: 2804:4b04::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c6:00:7d:e6:50:1d:c5:ad:8b:02:7b:a6:e4:50:0c:b1:ef:d5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  5 14:28:33 2023 GMT
            Not After : Jul  3 14:33:33 2024 GMT
        Subject: CN=FADF18FB60D804E7EB8C508AB2A1A3E4921FDD96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:aa:05:ea:4a:28:99:a8:88:5e:29:2d:c8:
                    19:97:51:ac:b7:1b:b8:72:51:48:05:d2:2e:1c:28:
                    bb:36:8b:ec:ca:95:ed:ba:41:d5:69:5d:61:be:6c:
                    9c:ea:2a:0b:5a:18:68:7b:e7:74:c2:cc:72:9c:b3:
                    03:63:64:44:f2:ba:63:9d:c3:ad:6e:9a:11:42:76:
                    b5:25:1c:f6:d4:e7:09:b0:49:20:08:6f:6e:6d:c2:
                    50:28:ea:f4:69:e8:94:17:5f:a1:5f:6a:03:cb:f5:
                    a5:cc:63:b3:51:06:94:fd:fd:dd:43:46:68:29:98:
                    9e:76:26:fc:79:72:d2:b0:2f:86:6a:11:f4:b5:8e:
                    e0:fc:bf:5d:6a:7c:b7:9d:07:75:e5:fc:58:75:ef:
                    fa:27:ac:16:5a:55:fc:dd:bb:99:a1:13:a8:e1:6e:
                    5e:cd:cf:15:f2:18:b4:11:a1:38:fc:95:a4:77:c0:
                    96:b2:6b:1e:dd:e1:76:9f:2a:d2:f7:cc:9d:58:0f:
                    96:08:b2:cd:46:e6:8c:d8:c3:99:1d:f4:14:25:7d:
                    89:d8:c3:78:3d:c5:36:31:00:c5:5d:58:be:75:3d:
                    47:29:50:8b:b3:6e:f0:12:d9:8a:5d:f9:dd:a6:94:
                    87:3b:62:c6:26:5a:69:37:55:cd:2f:0a:3f:c7:dd:
                    07:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:DF:18:FB:60:D8:04:E7:EB:8C:50:8A:B2:A1:A3:E4:92:1F:DD:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/FADF18FB60D804E7EB8C508AB2A1A3E4921FDD96.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.224.0/22
                IPv6:
                  2804:4b04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267278

    Signature Algorithm: sha256WithRSAEncryption
         87:6b:78:f1:37:23:80:9b:a9:13:49:79:4e:49:8c:e5:05:08:
         83:db:22:4a:bf:ff:d7:ba:61:c2:ea:4d:5c:76:02:90:d4:e3:
         7d:ff:d4:b5:f4:6b:91:87:b5:ce:8e:f1:67:33:ef:0b:8e:0c:
         65:bc:2c:9a:3c:5d:cd:9d:5c:11:a0:35:46:68:ca:14:31:b9:
         51:42:e7:75:bf:c1:f7:e4:04:d2:c2:d1:35:5f:a3:22:43:e7:
         b4:1a:9c:05:3a:f0:ff:8a:c6:c8:07:62:68:01:cb:75:3c:86:
         c3:50:ce:06:bf:f3:1c:69:f4:dd:e3:50:94:2c:92:37:74:82:
         ca:7f:8a:a0:01:df:96:1b:d7:ad:9c:ec:d8:a8:24:60:f4:28:
         bf:a2:88:07:ce:6a:42:cf:bb:f7:49:b0:60:e8:20:84:b7:18:
         3b:03:fa:a1:9e:45:43:79:88:f7:50:d4:93:c4:0a:16:4d:d2:
         dd:98:08:b7:fa:e3:5f:d0:92:a9:dc:2e:16:d5:75:47:56:ca:
         44:71:6a:4f:87:9d:9a:03:96:23:bd:c7:7f:52:2f:3d:8f:ef:
         af:b7:43:c5:c5:65:74:3c:cd:99:be:58:d4:c1:80:cf:10:f6:
         0e:81:fc:7e:ab:e8:48:ed:50:84:1b:49:6f:b0:ac:d6:49:ec:
         eb:7c:b1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:39:41 2025 by rpki-client