Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.cer
File:                     FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.cer (raw, json)
Hash identifier:          B/ai7WoMwf5ZPdm083dSKiFw4j04ggpOhOP59LZBJyI=
Subject key identifier:   FB:61:CC:FF:CB:CC:30:40:B5:6E:07:B8:AA:81:73:F9:B5:CC:F8:C3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B82583F1C55B230DAAF9A8E31121546C17B9B00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Aug 2023 13:53:39 +0000
Certificate not after:    Fri 09 Aug 2024 13:58:39 +0000
Subordinate resources:    AS: 265885
                          IP: 128.201.244.0/22
                          IP: 2804:3f54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:82:58:3f:1c:55:b2:30:da:af:9a:8e:31:12:15:46:c1:7b:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 11 13:53:39 2023 GMT
            Not After : Aug  9 13:58:39 2024 GMT
        Subject: CN=FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a8:49:f0:78:da:ed:9b:36:4c:a7:76:b3:fb:
                    41:85:fe:ae:4b:05:9e:30:64:cb:16:5c:2d:a3:04:
                    12:ad:02:ae:13:00:cb:29:c6:4d:4a:5b:f5:c2:3d:
                    6a:01:55:9c:12:17:ce:f0:9a:94:b6:5f:7c:2a:0c:
                    48:5a:24:8c:12:5b:9f:c1:bd:c0:48:5a:47:8f:d1:
                    d3:d3:bd:74:c6:03:67:c7:d3:11:7d:e4:e6:5d:f9:
                    ae:6e:f3:cc:61:19:60:47:6b:d9:8d:d7:0e:62:82:
                    90:53:58:85:2d:1f:d3:02:d7:fa:70:55:e7:bb:22:
                    30:5f:39:65:ab:4b:6f:f9:3b:fb:77:83:a4:6f:05:
                    e4:00:43:f7:3e:ff:65:71:21:6f:14:0f:c0:07:ff:
                    bb:18:6f:9a:0f:8a:6d:80:fb:45:e8:d8:ee:6c:4f:
                    a3:df:b4:9b:db:7d:5b:86:68:27:d3:6f:07:20:1d:
                    74:58:06:6e:2e:67:ed:a8:db:91:54:c7:61:9f:1f:
                    f1:d0:d3:23:d0:85:a1:20:0d:78:5e:02:59:0c:ff:
                    e6:5c:b5:d0:38:f6:75:c3:20:0e:cb:74:2c:8e:b0:
                    c3:b4:16:1f:b2:b8:20:36:e8:90:54:8a:6d:21:fc:
                    d7:34:ec:d2:d5:ac:6f:9f:3f:50:5d:65:1c:e1:e5:
                    a5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:61:CC:FF:CB:CC:30:40:B5:6E:07:B8:AA:81:73:F9:B5:CC:F8:C3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.244.0/22
                IPv6:
                  2804:3f54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265885

    Signature Algorithm: sha256WithRSAEncryption
         9f:cf:ca:88:e2:89:a8:ac:e4:26:14:bb:3d:72:b5:15:0f:f6:
         34:3b:27:71:75:2f:fc:c7:1b:d4:51:16:cd:1b:77:0e:86:70:
         7d:0c:90:9a:25:83:7e:66:80:b3:65:ed:3f:54:5c:0a:1c:03:
         49:0d:9b:38:32:1d:2b:e4:36:2e:4d:2e:53:45:f5:66:96:8a:
         62:2f:02:96:81:f2:c1:63:5c:dc:60:b9:c7:8d:12:d1:ec:e1:
         f0:bd:81:b4:fb:4f:6e:86:e8:13:a6:d5:98:d4:45:6d:4e:b0:
         99:a5:bb:2b:f4:4e:df:cb:1c:eb:fd:c2:54:a3:20:a1:80:46:
         0c:e7:c5:3b:75:d8:ef:da:01:e1:7d:21:21:da:a6:92:65:55:
         13:71:4c:8e:c4:28:b0:15:38:2b:c7:3e:9b:52:0e:73:c3:e7:
         7b:50:06:29:f5:36:a1:fc:83:e4:5b:3a:4b:9c:93:c1:56:8f:
         ad:b1:d4:ef:3f:68:7a:2d:a9:74:ec:59:3c:4b:05:58:6c:8b:
         76:8a:ab:53:d4:de:01:e1:79:35:ad:6e:ce:73:19:2c:01:7d:
         93:f5:56:04:df:b3:d4:7e:70:10:ce:1f:e0:c6:fc:d5:3d:c3:
         d1:ed:dc:1a:13:21:96:39:5b:9b:01:35:2b:6a:57:0b:8b:fa:
         3d:d9:76:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org