Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.cer
File:                     FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.cer (raw, json)
Hash identifier:          45zoRsL/HrMjfvOs15K2K3ilqHmu71FpZD3Ajf6G1Bs=
Subject key identifier:   FA:E9:AB:02:BB:A9:AA:12:8E:66:39:4F:DE:AC:DF:67:D5:00:6B:93
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F0310D58678B9702B7EAD11AA7150B85279D335
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Sep 2023 18:52:25 +0000
Certificate not after:    Wed 11 Sep 2024 18:57:25 +0000
Subordinate resources:    AS: 263439
                          IP: 138.185.132.0/22
                          IP: 170.231.0.0/22
                          IP: 177.91.112.0/22
                          IP: 2804:11c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:03:10:d5:86:78:b9:70:2b:7e:ad:11:aa:71:50:b8:52:79:d3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 13 18:52:25 2023 GMT
            Not After : Sep 11 18:57:25 2024 GMT
        Subject: CN=FAE9AB02BBA9AA128E66394FDEACDF67D5006B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:ee:26:f6:08:60:f0:17:16:d3:92:c8:ce:
                    d3:ac:8e:f8:a5:d9:84:48:f7:55:20:e7:01:70:78:
                    62:85:46:08:ea:4b:34:f1:c7:7a:f6:40:50:34:0c:
                    76:c0:a1:e2:75:04:7d:43:a7:fb:9d:ae:f2:e9:12:
                    77:97:e8:f4:77:e9:07:04:51:9f:67:a2:33:31:6a:
                    55:b3:5a:f2:73:5c:47:da:ce:da:a6:39:9a:02:74:
                    fc:0b:d5:c3:9a:a3:f1:e4:e6:c2:f3:81:75:2e:a0:
                    1a:c4:3a:d2:b3:5b:85:0d:e1:5b:8b:3b:ed:d3:cd:
                    13:ba:fb:18:ec:e2:7d:8b:ea:ad:de:26:7b:4a:9e:
                    56:5c:fe:d0:4d:d9:5e:70:d0:b1:4a:05:1f:c9:58:
                    d7:d9:2d:ec:e5:32:66:5b:17:57:43:4f:b2:66:77:
                    49:52:cf:e3:1d:14:b1:4e:1b:f9:a9:c2:0e:ce:12:
                    c7:47:a0:81:0d:61:a6:06:da:52:5d:07:70:5e:1e:
                    b4:36:07:42:9f:3f:d6:96:33:ce:80:c9:40:f1:38:
                    f2:63:d6:d2:29:61:6e:cd:ec:79:b6:44:1d:1d:ec:
                    d1:7b:ef:41:cc:64:ff:cb:f9:dd:1c:91:78:d6:8b:
                    0e:2d:d6:e6:38:3e:64:8b:c4:d3:ca:fe:f3:a3:ca:
                    74:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:E9:AB:02:BB:A9:AA:12:8E:66:39:4F:DE:AC:DF:67:D5:00:6B:93
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.132.0/22
                  170.231.0.0/22
                  177.91.112.0/22
                IPv6:
                  2804:11c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263439

    Signature Algorithm: sha256WithRSAEncryption
         af:4f:b3:27:78:cf:88:79:8f:6a:e4:e9:ba:46:e7:3b:46:9f:
         68:64:f2:c8:44:45:d6:5e:9f:cb:ec:0f:33:c6:d8:f1:f6:1d:
         ec:c8:3e:4b:3e:b5:93:4d:38:07:0f:3d:1e:6b:fc:a5:07:4f:
         e6:24:e9:75:f8:ad:8e:d5:ef:98:4c:b5:e0:23:0f:c8:75:30:
         da:00:c5:2a:10:00:db:8e:65:8c:cd:f1:ff:b1:96:b0:d4:07:
         3a:c7:b1:83:aa:b6:dc:42:6f:d8:d4:4d:a4:02:41:15:05:3f:
         ca:e3:8e:e3:88:27:a1:0c:40:00:c2:2d:07:3b:5b:2a:36:9c:
         27:42:0d:a4:9f:9b:b7:b1:8c:1e:c0:de:fe:26:0e:be:81:a0:
         63:ca:cc:1c:73:63:22:93:68:f8:a1:db:23:98:b0:41:29:86:
         b0:be:97:60:df:7e:96:ce:5e:ad:07:13:83:26:b7:af:6a:7d:
         88:03:e0:39:1a:aa:90:8e:ac:91:b5:00:de:ee:4d:53:b9:8e:
         59:0d:70:7a:b8:bf:45:39:3f:b5:5e:63:02:a2:bb:ef:4f:10:
         f2:e5:83:2d:f2:b9:1d:e7:31:2c:0a:ec:2a:c0:fb:32:87:0e:
         c7:a5:36:a9:84:b3:fc:f2:50:49:aa:7e:c5:65:52:cc:06:89:
         a4:8b:3f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:45 2024 by rpki-client on console-ams.rpki-client.org