Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.cer
File:                     FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.cer (raw, json)
Hash identifier:          jh2C7xYmfxQPCxIuJWeA5NXSssBb6Mq9u4Bw/CehOJM=
Subject key identifier:   FB:69:29:18:40:0F:03:EA:4A:51:C4:E3:6D:DD:21:BB:B7:ED:9D:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C4C62E63C20C1747A73D14044EC55877125D5DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Feb 2024 19:45:13 +0000
Certificate not after:    Wed 19 Feb 2025 19:50:13 +0000
Subordinate resources:    AS: 262499
                          IP: 177.66.152.0/22
                          IP: 2804:860::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4c:62:e6:3c:20:c1:74:7a:73:d1:40:44:ec:55:87:71:25:d5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 19:45:13 2024 GMT
            Not After : Feb 19 19:50:13 2025 GMT
        Subject: CN=FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:93:82:ee:18:67:89:43:cc:20:7b:d9:23:
                    8b:97:be:14:14:03:e4:87:20:3c:ab:40:2a:86:4e:
                    e2:b5:e1:53:77:9f:c7:5d:06:98:6c:a6:7e:8a:d7:
                    df:ad:f2:3f:60:57:02:a7:d8:3d:e8:f1:70:6d:05:
                    68:c7:9f:a1:da:8b:b4:30:80:07:e1:fe:de:06:b8:
                    46:03:65:db:48:ef:36:47:0f:a2:e4:99:49:e1:7e:
                    91:cd:62:00:7a:86:d9:d8:e1:37:e7:6b:e2:15:fb:
                    43:fe:44:02:be:a8:57:13:8c:de:d8:d6:7d:20:d2:
                    98:a5:75:92:90:ae:7f:ba:dd:6d:bd:9b:49:ec:c1:
                    8b:78:dc:a1:81:9b:aa:bb:a1:f0:f6:1a:25:ac:f8:
                    1a:aa:77:3d:97:5c:4e:35:73:48:aa:36:37:8b:9f:
                    37:4b:fb:41:3a:a8:26:da:a3:0a:ae:0c:af:6e:69:
                    86:34:1b:4c:e5:9c:94:9b:d1:ea:a0:89:d2:9c:b2:
                    a9:5f:17:b6:de:d9:14:cb:e5:39:91:d7:33:de:b1:
                    8c:f3:4f:2d:72:21:b6:8a:95:4a:b8:2f:2b:85:49:
                    0b:58:92:4b:d8:48:f0:a4:63:64:24:44:1e:90:b4:
                    14:bb:47:28:ea:9a:b3:c5:e8:e8:35:32:6c:5e:0f:
                    83:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:69:29:18:40:0F:03:EA:4A:51:C4:E3:6D:DD:21:BB:B7:ED:9D:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.152.0/22
                IPv6:
                  2804:860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262499

    Signature Algorithm: sha256WithRSAEncryption
         ae:c4:46:87:b5:ae:c5:ab:5d:32:98:e1:49:7b:1e:ca:37:e1:
         25:cc:67:83:a4:28:df:57:d2:21:c9:c7:f3:5a:25:0e:c1:4a:
         da:e8:94:e2:a1:e8:d6:61:00:0e:c9:36:85:aa:3c:6e:6f:5d:
         c7:9e:db:5f:c1:5b:17:f0:12:29:c4:e2:02:b8:1f:0d:05:c5:
         d7:16:e7:9f:cb:fe:bf:a2:ff:e9:cc:d1:d7:ee:97:cc:4a:22:
         02:f0:85:c4:00:77:02:0e:ac:32:6f:8d:29:d4:67:1a:e8:f2:
         17:b3:0d:45:23:2f:c6:6a:ea:26:50:df:66:d9:26:78:a1:bc:
         c6:9e:68:16:43:b3:a2:29:0d:f8:7f:14:c9:08:49:30:80:3b:
         9e:11:ad:de:a5:18:5d:ae:f1:ba:2b:89:4b:92:45:2d:83:94:
         1e:77:c3:51:89:91:f6:4a:d7:60:73:c8:f0:a2:92:81:d2:21:
         2a:54:22:fe:e2:84:d1:c5:78:a0:cd:a2:58:4a:8c:6f:37:ce:
         56:26:9d:03:51:99:29:fd:29:17:60:8f:90:81:96:9c:4b:ca:
         52:60:21:d3:d1:38:23:ba:6e:f8:95:a3:f0:bc:7c:46:7a:81:
         f6:d1:7c:b1:74:3b:50:51:cb:fb:c6:a7:0b:02:61:1d:59:5b:
         6e:08:f6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org