Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FB8339435145A20213F790D3F180A4E390A95A2A.cer
File:                     FB8339435145A20213F790D3F180A4E390A95A2A.cer (raw, json)
Hash identifier:          Sx7y/sUJn2c0H4zMDf5rNUSP67/shOPlE7WKDtxiobc=
Subject key identifier:   FB:83:39:43:51:45:A2:02:13:F7:90:D3:F1:80:A4:E3:90:A9:5A:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       02A0E56049CA6C7DC2468C4E84C2AF45D3AB3FB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9FbNHx7Mpi32dcm1v4bT7vTyurf44gPkxs6PjjJGbbYw/0/FB8339435145A20213F790D3F180A4E390A95A2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9FbNHx7Mpi32dcm1v4bT7vTyurf44gPkxs6PjjJGbbYw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Aug 2022 17:46:20 +0000
Certificate not after:    Tue 22 Aug 2023 17:51:20 +0000
Subordinate resources:    AS: 271089
                          IP: 179.48.132.0/22
                          IP: 2804:7618::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a0:e5:60:49:ca:6c:7d:c2:46:8c:4e:84:c2:af:45:d3:ab:3f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 23 17:46:20 2022 GMT
            Not After : Aug 22 17:51:20 2023 GMT
        Subject: CN=FB8339435145A20213F790D3F180A4E390A95A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:ee:88:14:0d:59:9d:22:35:35:48:10:cc:
                    9b:84:db:6e:28:1e:96:df:2c:51:b5:cd:8e:21:de:
                    2e:55:8c:0c:a7:5e:38:b8:24:f1:7f:43:f0:69:bf:
                    e4:75:be:d1:1e:35:8c:f3:d6:9b:2a:ce:77:60:02:
                    a7:93:47:89:af:5b:a9:c0:76:c8:df:1b:de:a8:fa:
                    5a:0d:3e:50:f5:d7:82:8d:52:be:b7:bd:3e:5f:98:
                    6a:4f:e6:d2:3b:f9:97:e8:b4:62:d5:26:95:9e:2a:
                    2b:a3:4c:da:95:96:91:04:dd:7f:ce:6e:08:52:b9:
                    7a:93:5f:01:f5:17:be:71:0c:40:b0:fa:8c:c6:7d:
                    df:1d:ee:cc:2b:d0:6c:bd:3d:77:6a:dd:6a:51:d1:
                    7a:a5:64:88:48:42:d8:47:ae:02:11:a5:7c:08:36:
                    0b:da:83:48:bf:b4:90:1c:3f:68:b7:ae:93:19:d1:
                    e2:ab:ee:f9:15:f3:13:bf:01:16:1b:78:bb:d2:66:
                    7e:62:bc:0b:ec:80:fa:d8:8d:90:e5:ad:31:3d:ad:
                    94:66:07:46:ca:13:01:d6:c8:7c:28:d8:4b:ee:d5:
                    ad:28:0c:f3:e4:d6:c7:a6:c9:2c:a4:9a:45:60:e6:
                    94:80:fc:cf:73:23:07:38:78:b3:6f:a5:cd:5d:71:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:83:39:43:51:45:A2:02:13:F7:90:D3:F1:80:A4:E3:90:A9:5A:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9FbNHx7Mpi32dcm1v4bT7vTyurf44gPkxs6PjjJGbbYw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9FbNHx7Mpi32dcm1v4bT7vTyurf44gPkxs6PjjJGbbYw/0/FB8339435145A20213F790D3F180A4E390A95A2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.132.0/22
                IPv6:
                  2804:7618::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271089

    Signature Algorithm: sha256WithRSAEncryption
         6d:3b:c8:36:78:7e:e5:6e:9d:94:f1:a3:c1:67:be:ca:78:53:
         b0:a1:41:47:ac:41:84:25:c2:ca:d8:df:7a:01:6d:45:c9:ff:
         63:5e:18:73:9f:f4:fc:31:e1:d9:3f:d7:aa:01:f6:27:f1:39:
         77:be:f8:32:3d:87:0b:0b:8d:0c:a7:55:05:66:db:b5:a1:65:
         ab:77:b7:d0:0e:c8:41:0a:b9:71:12:56:9c:81:04:d3:0a:50:
         14:e1:60:f2:2d:52:cf:ba:2d:80:03:87:ac:cd:f8:0e:0f:d0:
         a8:b3:cc:77:63:7f:5a:15:ec:c1:cf:2d:3c:b1:2c:21:14:a3:
         cc:08:ca:b4:24:7f:ba:a3:0e:cc:c3:49:f3:83:a7:3f:59:86:
         1c:bc:02:34:b4:42:c0:44:cb:7e:32:bd:1e:fc:af:8b:db:b9:
         7b:46:a3:74:a5:f4:6c:ea:5e:58:d0:e1:93:ff:3e:23:c3:c2:
         bd:18:4d:c8:55:6d:41:b0:a3:3f:b2:0c:ff:21:a6:f2:3f:ae:
         97:b9:e2:53:61:56:de:e7:e7:ac:ec:48:5c:79:84:4a:ff:2b:
         ec:31:c6:e3:b3:e6:8b:5b:40:d0:20:68:1b:9e:9a:ae:2e:eb:
         51:be:83:5d:b2:1f:b3:33:1f:69:6d:4c:e7:68:66:7e:58:d8:
         15:70:af:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:50:29 2025 by rpki-client