Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer
File:                     FB77F49574CBE0843961A23238230FA3417E4159.cer (raw, json)
Hash identifier:          A7XlcxH3HNyqCI7qXBA4bhi1yA/aXcP+iI/MNUbBLxg=
Subject key identifier:   FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       52890DAEA8C9C65F39B2503B67B9BB5E386B97B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/FB77F49574CBE0843961A23238230FA3417E4159.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2024 13:27:35 +0000
Certificate not after:    Fri 24 Jan 2025 13:32:35 +0000
Subordinate resources:    AS: 53112
                          IP: 138.97.4.0/22
                          IP: 143.255.60.0/22
                          IP: 170.231.72.0/22
                          IP: 177.23.8.0/21
                          IP: 187.109.16.0/20
                          IP: 189.90.144.0/20
                          IP: 2804:d0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:89:0d:ae:a8:c9:c6:5f:39:b2:50:3b:67:b9:bb:5e:38:6b:97:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 26 13:27:35 2024 GMT
            Not After : Jan 24 13:32:35 2025 GMT
        Subject: CN=FB77F49574CBE0843961A23238230FA3417E4159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:04:ed:48:5f:89:dc:90:18:3a:c2:a6:cb:dd:
                    e1:a4:b9:c5:6a:a5:2e:0e:44:8c:cf:52:67:ff:0c:
                    ec:1f:7a:89:ad:ae:df:4f:f2:58:39:96:da:9f:ca:
                    52:50:e0:12:ba:66:ee:7c:28:df:c3:2e:bf:e6:83:
                    91:6f:a1:20:d2:8f:9a:ad:2b:b5:aa:a1:1f:ab:63:
                    78:9c:89:0d:68:91:8c:f4:5c:04:cb:df:79:49:9e:
                    b5:37:a9:69:62:fc:c0:f7:fb:e9:76:48:e1:73:04:
                    ff:64:e5:7b:f5:f0:9f:4e:72:71:71:e2:20:91:2b:
                    86:22:90:e4:19:42:cf:98:5c:27:c6:85:ea:1b:71:
                    cb:36:df:44:78:92:a1:bd:9e:4c:56:5b:34:ff:03:
                    c4:48:41:65:d0:a4:c4:24:02:d1:8a:b8:45:35:42:
                    2a:66:15:e0:69:d3:f7:99:93:da:d6:04:c8:eb:1d:
                    ae:e0:b6:b9:85:e8:96:2e:c9:7b:de:ab:b8:8c:c4:
                    15:2f:e6:ee:93:5d:e9:b8:c5:0a:26:ce:21:3a:f9:
                    cd:1c:f8:9c:e2:4d:bc:2f:d2:5d:09:a6:d0:0e:5b:
                    7b:60:82:de:e7:e3:71:2d:71:15:1b:d3:94:38:8b:
                    ce:87:6b:11:3c:c5:cc:4e:50:1b:4f:73:09:39:81:
                    94:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/FB77F49574CBE0843961A23238230FA3417E4159.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.4.0/22
                  143.255.60.0/22
                  170.231.72.0/22
                  177.23.8.0/21
                  187.109.16.0/20
                  189.90.144.0/20
                IPv6:
                  2804:d0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53112

    Signature Algorithm: sha256WithRSAEncryption
         3e:9f:02:5e:4f:22:53:81:ac:c0:dd:b3:cb:ec:9a:7c:0f:16:
         8c:5d:86:94:b1:8e:81:a4:ee:55:ca:8a:f1:c6:a5:3f:c6:4b:
         c9:c7:07:77:c7:85:da:06:67:a3:c1:e3:03:f7:05:c6:ac:ff:
         6d:78:fa:b1:d5:6a:45:a6:b2:8e:27:29:fa:53:5a:f6:6f:f8:
         98:78:4f:ff:60:47:40:bd:a4:8c:18:8d:7e:ef:49:f6:90:4c:
         c4:22:bb:cf:0e:b3:60:03:f3:4f:3e:44:99:d9:13:c3:5f:6c:
         64:9f:45:3f:4b:d3:54:d3:6e:c8:76:90:35:d9:43:38:91:f7:
         72:e1:3f:75:f0:fd:87:3d:96:31:0b:78:05:20:03:59:86:ac:
         ef:7d:1e:44:bc:aa:dd:c7:26:66:ad:7c:ea:bb:45:28:ac:19:
         f8:41:ea:a2:48:45:f9:c3:9a:af:dc:92:95:dc:e4:1b:28:7f:
         fc:db:0d:0c:0d:06:a0:a2:fa:b4:8e:f4:0f:74:d4:6b:a0:98:
         21:95:41:47:d8:6b:64:3e:aa:17:48:b0:db:9a:01:8b:82:84:
         41:52:54:37:e4:0a:ff:d1:19:1b:e8:bf:f5:cf:0a:43:f7:6f:
         e9:08:b5:f2:14:f7:d7:a2:05:e0:02:6b:ff:7f:ab:1b:e6:40:
         81:d2:46:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org