Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer
File:                     FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer (raw, json)
Hash identifier:          NW/pc3aN5YarLUlyGSkr0g/k+yyvwhG/QkLOzYZFYuo=
Subject key identifier:   FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E4730BA9141FDB7CEA81D1696F0692C963D831A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 16:25:37 +0000
Certificate not after:    Tue 03 Dec 2024 16:30:37 +0000
Subordinate resources:    AS: 263625
                          IP: 179.125.16.0/22
                          IP: 2804:1038::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:47:30:ba:91:41:fd:b7:ce:a8:1d:16:96:f0:69:2c:96:3d:83:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 16:25:37 2023 GMT
            Not After : Dec  3 16:30:37 2024 GMT
        Subject: CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:93:66:ce:79:3a:e1:4f:95:6a:d8:7b:69:
                    d1:47:18:a8:55:fc:21:2b:08:df:46:46:4c:95:ad:
                    c8:b4:d2:9c:3a:0c:01:34:a2:4b:0d:b7:37:f8:87:
                    45:48:dc:05:2e:7c:4f:b9:78:e0:f6:62:2c:1f:b1:
                    98:2b:77:68:c9:86:67:d9:18:7d:77:a3:44:1c:80:
                    81:1a:cc:0b:12:e9:82:18:e1:00:8f:62:21:dc:21:
                    25:b5:32:50:99:c9:cf:e6:9b:d2:a5:b1:02:7e:87:
                    01:3d:96:5d:e4:10:69:65:bb:e5:38:ac:bc:fc:fd:
                    77:a6:41:85:36:51:2b:2c:24:43:9d:a0:ae:78:be:
                    ec:ef:4c:f6:08:ef:fb:f6:68:27:a7:a0:37:92:bd:
                    05:a2:3c:37:f4:c3:64:67:d8:5c:fd:1c:e6:d1:b3:
                    e3:4a:00:b3:9d:b3:fa:31:98:5f:36:22:77:fc:73:
                    b8:06:4a:32:ff:cc:4f:e9:bd:24:68:e6:70:6b:3b:
                    0d:26:0b:07:eb:80:4b:a9:e1:5e:15:0c:5a:5f:78:
                    7a:8f:6f:3d:b2:b7:b2:e7:66:b0:81:28:f0:ce:f2:
                    95:0f:e4:b4:c0:9e:4b:a8:84:c1:99:5a:b1:8e:5f:
                    57:01:6a:ce:6e:b8:33:36:52:2c:bd:ec:a5:f0:83:
                    b5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.16.0/22
                IPv6:
                  2804:1038::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263625

    Signature Algorithm: sha256WithRSAEncryption
         18:44:55:d7:33:03:9f:22:92:11:a2:e6:89:2f:63:c1:0b:9b:
         f4:19:7c:bf:6f:fe:33:b8:4d:f2:74:d9:7b:ec:5e:65:3f:10:
         ce:75:cc:f8:24:06:2c:a6:2d:29:8a:6f:7c:10:39:68:b5:61:
         5c:dc:30:ff:a1:e9:1d:c6:56:b0:f9:2b:d6:a4:fc:be:63:ba:
         18:a0:ed:2f:99:e3:16:7d:51:e0:b9:3f:d3:fe:33:78:4d:16:
         21:0e:32:c3:19:26:0e:8f:ee:b4:84:fa:c7:11:f0:d3:2c:34:
         84:13:03:16:f4:89:79:28:cb:61:6c:1b:47:a5:f0:14:75:7a:
         41:d1:a7:29:c5:5c:19:ff:a1:d6:de:c7:a0:13:cc:b1:d8:60:
         e3:bf:48:b3:be:50:93:16:fe:21:c7:17:59:b1:bb:04:cc:23:
         2f:5b:07:df:1e:69:58:eb:e3:4b:87:a5:91:6b:51:20:cf:bc:
         93:b3:37:8d:6b:f9:06:2f:93:9a:15:0e:38:13:93:c6:42:f9:
         8a:e3:26:f4:7b:81:10:6d:68:df:e2:3c:e8:22:7b:35:07:3a:
         a6:59:da:a7:08:9e:8e:db:86:70:ae:d6:a2:1c:38:b9:6e:37:
         10:26:ca:c5:6e:52:29:b5:73:65:04:8e:6c:6e:fc:03:d5:90:
         00:71:95:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org