Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FB3862529E205770549D2C9C549C9466E5CB21B5.cer
File:                     FB3862529E205770549D2C9C549C9466E5CB21B5.cer (raw, json)
Hash identifier:          N7ggUxAv8KMphV7XOSU+gUCYlgUjcw1eCr/zTmgV3ig=
Subject key identifier:   FB:38:62:52:9E:20:57:70:54:9D:2C:9C:54:9C:94:66:E5:CB:21:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7632BC63F70D2BDE20429CD6DBB6EE9364286EF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/FB3862529E205770549D2C9C549C9466E5CB21B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jan 2024 15:55:10 +0000
Certificate not after:    Tue 21 Jan 2025 16:00:10 +0000
Subordinate resources:    AS: 269435
                          IP: 45.186.196.0/22
                          IP: 2804:6490::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:32:bc:63:f7:0d:2b:de:20:42:9c:d6:db:b6:ee:93:64:28:6e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 15:55:10 2024 GMT
            Not After : Jan 21 16:00:10 2025 GMT
        Subject: CN=FB3862529E205770549D2C9C549C9466E5CB21B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:60:b3:ad:68:2d:3b:88:f6:34:79:31:83:
                    b8:78:09:3a:8a:2a:62:cd:4f:ec:42:32:21:64:68:
                    e2:28:b5:b8:cb:66:e4:f5:3f:52:9c:26:59:ae:7c:
                    c8:3a:9b:ca:bd:7f:3b:85:76:fc:6e:f5:19:a0:02:
                    a2:a9:59:eb:da:01:0c:4b:09:63:f7:2c:a1:4d:6b:
                    ee:51:19:a0:2b:9c:4f:fd:01:18:69:3c:18:ee:f0:
                    11:70:ae:65:84:be:7e:4a:0a:41:12:66:6e:ac:e5:
                    01:17:26:da:67:ea:a8:22:94:35:0c:f0:e4:f1:e7:
                    3a:cb:d0:37:c6:c8:e2:de:62:40:f3:11:34:9b:eb:
                    95:93:f5:98:28:1a:5b:7b:45:63:e1:c3:e8:8b:d4:
                    d6:ed:88:94:83:d6:a5:c7:56:a9:01:d2:79:06:2a:
                    25:1c:8a:ec:0f:6d:db:8d:4b:07:35:74:28:fb:c0:
                    be:52:41:b4:5a:32:f5:19:2c:f7:fa:37:79:fa:5d:
                    a3:ff:81:97:55:00:ba:26:ca:17:0f:91:59:7e:88:
                    c5:d2:db:0b:a1:03:7e:40:41:a4:46:d9:84:e9:52:
                    63:39:a1:b2:67:07:9d:a7:c4:b0:d2:54:a5:e6:87:
                    6d:16:61:14:d5:e1:37:23:34:14:9d:68:90:98:f6:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:38:62:52:9E:20:57:70:54:9D:2C:9C:54:9C:94:66:E5:CB:21:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/FB3862529E205770549D2C9C549C9466E5CB21B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.196.0/22
                IPv6:
                  2804:6490::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269435

    Signature Algorithm: sha256WithRSAEncryption
         39:62:ff:e8:c2:88:e2:ac:3b:93:4c:7f:3c:e4:f1:c8:cc:71:
         8a:18:3d:16:22:8e:ae:d9:83:56:36:13:e9:89:8c:43:ba:87:
         45:77:8e:7c:06:23:9f:3d:48:b1:a7:33:ce:52:5e:75:a0:58:
         b9:35:73:73:d3:8c:0e:b7:01:36:cc:4e:61:59:db:a4:f7:3b:
         80:21:0f:32:a9:d7:c9:a2:5a:3c:d0:e9:48:a5:7e:bf:cf:ac:
         5e:e0:0f:d4:08:15:1c:66:b1:ca:92:15:55:eb:c1:1a:66:73:
         6c:7e:a5:75:68:9f:a5:36:f6:96:18:ad:18:5b:9d:b2:d8:5d:
         57:ae:92:87:25:19:10:b1:b2:13:8a:ff:2b:f2:1a:3e:aa:b0:
         70:fe:6a:7d:b6:90:cb:06:c3:30:af:12:0e:41:3f:cf:64:2d:
         ea:fc:6d:b4:a2:79:d9:31:9c:4a:0f:26:bc:38:84:cc:72:31:
         43:8b:25:47:75:0b:d4:74:44:ab:f3:2f:b2:c3:af:21:51:ec:
         bc:40:1c:b5:53:4f:37:dd:6b:db:09:b3:ff:80:58:3c:bb:41:
         32:ef:99:78:3a:08:e9:05:69:dd:2d:e9:e1:31:be:05:e3:66:
         46:1e:91:be:76:ad:33:51:86:07:c4:40:ae:8b:ed:43:02:53:
         95:f6:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----