Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7.cer
File:                     FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7.cer (raw, json)
Hash identifier:          3P/EwX3afIqwZmN4ugnXTPGpqPHzGQtpYYFKbtWdGU8=
Subject key identifier:   FB:7F:7A:B2:33:D9:2C:DB:B9:AB:0F:85:98:ED:11:CE:CC:B3:B1:B7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2CDFDEE6461804F82187D0AD532DAD02F1E99FC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5xkesWsWvLGC2XLJRLKdJWjJfyGiGU736CjZoHoozvt5/0/FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5xkesWsWvLGC2XLJRLKdJWjJfyGiGU736CjZoHoozvt5/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Nov 2022 11:48:28 +0000
Certificate not after:    Mon 20 Nov 2023 11:53:28 +0000
Subordinate resources:    AS: 269507
                          IP: 45.187.232.0/22
                          IP: 2804:65ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:df:de:e6:46:18:04:f8:21:87:d0:ad:53:2d:ad:02:f1:e9:9f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 21 11:48:28 2022 GMT
            Not After : Nov 20 11:53:28 2023 GMT
        Subject: CN=FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:4e:80:cc:86:d8:29:2d:2a:0b:26:c6:00:
                    a2:73:bc:63:68:08:9b:3d:e9:34:ed:9f:4b:6c:ba:
                    96:a4:5f:50:8d:25:2f:5e:e4:12:2e:30:54:f8:65:
                    0c:39:8f:03:97:73:5a:75:f1:b6:2c:83:cb:12:cb:
                    66:70:66:13:4e:11:0f:2c:43:41:1b:86:68:8a:ca:
                    fe:2c:02:34:d9:49:77:71:45:3c:40:2f:db:6e:1e:
                    59:8b:f1:3c:db:63:68:6a:d4:8c:33:a1:4a:cd:19:
                    c7:1b:33:3c:cd:c0:76:8a:b8:9f:e4:6d:22:d9:3d:
                    15:55:2b:14:c1:48:a0:4e:d3:fa:e0:59:b8:ec:f9:
                    18:ce:eb:40:a5:51:80:10:f4:83:23:4f:87:74:77:
                    38:17:f8:47:cd:c0:23:c2:6f:34:76:02:3a:de:4f:
                    e8:fe:d7:99:39:53:d2:ee:09:79:ca:f3:9a:1e:a8:
                    4f:fd:53:b6:34:35:6c:48:d3:e4:38:11:39:9f:02:
                    ab:1a:1a:91:a5:b7:9f:52:7b:cc:f5:c0:d6:e8:4a:
                    2d:6b:96:43:9a:5d:8f:8b:d7:06:d7:17:e6:aa:73:
                    00:29:d3:d3:bb:ba:a0:ae:3e:4c:ac:83:b8:97:ab:
                    43:a6:66:43:52:9e:6a:36:7b:ea:b2:18:b5:c9:cc:
                    61:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:7F:7A:B2:33:D9:2C:DB:B9:AB:0F:85:98:ED:11:CE:CC:B3:B1:B7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5xkesWsWvLGC2XLJRLKdJWjJfyGiGU736CjZoHoozvt5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5xkesWsWvLGC2XLJRLKdJWjJfyGiGU736CjZoHoozvt5/0/FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.232.0/22
                IPv6:
                  2804:65ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269507

    Signature Algorithm: sha256WithRSAEncryption
         13:ec:d8:53:95:b6:82:5f:35:ed:df:ca:05:ec:f9:2b:8a:14:
         37:f4:7d:9c:80:72:e4:40:1b:e9:3f:3d:18:dc:76:a9:db:57:
         8b:10:1d:bf:b6:ed:30:6a:e4:08:ff:c4:58:d6:be:2c:74:cc:
         48:41:f2:f4:2c:61:21:3c:50:b6:57:6d:49:85:bd:04:27:96:
         3f:10:c4:e0:41:7e:b8:cc:26:11:0a:90:13:d6:a6:50:93:ca:
         ec:d2:e0:d8:9c:fe:4d:f1:ca:80:13:89:21:97:f3:d3:01:91:
         2a:69:c6:a5:39:fa:0d:8c:ae:b3:d6:7b:ee:72:3f:58:80:0e:
         f1:46:9d:43:fd:1c:6e:c6:00:db:b2:8b:b6:bf:5e:69:4a:4e:
         5f:1b:bb:a6:d3:ad:90:c7:b5:03:82:c9:d3:59:8c:1d:ec:1a:
         33:af:16:79:08:9f:bf:42:d7:1a:32:1b:da:4d:ef:0e:19:43:
         e5:8d:6e:07:9a:75:6f:c1:c3:3b:84:69:84:f0:7d:b0:16:90:
         8b:dc:46:ca:53:8b:f3:9a:eb:46:3a:95:e7:67:83:56:ee:94:
         44:f1:45:00:4c:6b:b5:22:b6:e5:4f:3d:ec:61:1a:75:86:ce:
         1b:1b:ce:45:b6:54:a6:30:6c:4e:fa:1f:e5:56:f3:45:48:50:
         25:bf:56:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org