Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FB939B107C6385551C1A5238310D5971AD63A71D.cer
File:                     FB939B107C6385551C1A5238310D5971AD63A71D.cer (raw, json)
Hash identifier:          IWImA8dTLx02wN8qnPd+IivXMZ7GG7cTCo4S4jgPn0w=
Subject key identifier:   FB:93:9B:10:7C:63:85:55:1C:1A:52:38:31:0D:59:71:AD:63:A7:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04763692CFF1D7A3D2D2F36906A3B5817A4D43F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/FB939B107C6385551C1A5238310D5971AD63A71D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Sep 2021 18:33:15 +0000
Certificate not after:    Mon 05 Sep 2022 18:38:15 +0000
Subordinate resources:    AS: 271459
                          IP: 179.0.64.0/22
                          IP: 2804:7bdc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:76:36:92:cf:f1:d7:a3:d2:d2:f3:69:06:a3:b5:81:7a:4d:43:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 18:33:15 2021 GMT
            Not After : Sep  5 18:38:15 2022 GMT
        Subject: CN=FB939B107C6385551C1A5238310D5971AD63A71D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:1d:36:f4:7b:60:47:f6:9b:81:97:8c:9f:
                    3c:5a:a7:9d:7f:69:37:31:67:c1:fa:28:63:d3:b9:
                    f8:59:b1:eb:c5:a3:8f:c8:05:35:39:17:df:33:61:
                    be:1c:8f:67:45:6a:bd:75:c3:98:a9:91:0a:5e:2a:
                    57:6f:3e:32:2e:9c:b2:d9:72:34:3e:27:33:6c:1e:
                    26:e5:53:71:b5:17:64:7f:b0:41:ad:4e:f3:03:79:
                    de:45:39:94:66:40:d5:de:46:a3:ff:9f:17:82:34:
                    13:50:be:7e:7d:84:7d:5c:1b:9d:f0:62:68:3a:94:
                    3e:41:16:f3:1d:c5:b3:4e:a5:8e:c3:f1:91:d5:26:
                    de:53:01:92:63:f6:51:99:b5:19:d6:81:21:93:e1:
                    bb:a3:fb:8c:d0:a5:03:2d:f4:d8:ac:83:2b:5c:18:
                    57:1b:7c:ac:92:10:a8:58:e7:8f:9d:d0:ff:2e:57:
                    60:39:23:76:d8:40:e2:7f:68:0a:73:7f:95:ed:a8:
                    f0:ef:9c:cc:57:45:fc:32:12:80:7c:05:57:74:fb:
                    02:a9:1a:0e:e4:1e:ec:d6:39:47:63:22:78:73:aa:
                    a4:6f:df:22:0b:53:58:2f:51:09:f3:d3:88:36:82:
                    80:ee:ef:ce:c9:0f:60:01:60:5c:71:c9:34:8e:b9:
                    22:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:93:9B:10:7C:63:85:55:1C:1A:52:38:31:0D:59:71:AD:63:A7:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/FB939B107C6385551C1A5238310D5971AD63A71D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.64.0/22
                IPv6:
                  2804:7bdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271459

    Signature Algorithm: sha256WithRSAEncryption
         7c:88:71:87:f9:d7:bc:84:9f:14:20:67:ea:fa:83:95:01:4d:
         80:77:52:11:90:f5:08:4b:d7:b2:d2:18:b9:f8:49:1b:07:30:
         1a:4b:3f:7d:41:df:de:f0:4b:e6:26:58:01:c0:f0:f7:00:ee:
         4b:db:90:6d:60:b3:a0:05:f7:ed:aa:0b:fb:9e:5c:60:29:f4:
         a2:a1:9c:cc:33:d8:6f:3d:5f:0d:b9:46:5f:e7:bb:35:74:46:
         c2:73:80:a1:ca:a8:3e:64:3e:c1:f6:9b:48:e8:bb:e8:e8:a9:
         7e:cf:2b:de:a8:d4:fd:6b:8c:db:82:f3:a3:1f:62:b9:ab:57:
         c4:7b:39:87:39:23:d0:6a:71:a4:12:ca:d9:22:c7:6e:96:8d:
         20:ce:21:02:46:f3:d7:de:b7:31:de:5d:9f:f2:b3:9e:92:b6:
         d8:8f:06:8b:a9:40:14:8b:e8:58:5c:07:ad:4b:6e:49:2c:34:
         8c:97:4d:1c:1b:54:ee:fc:40:9c:6d:61:9f:ea:0c:f4:52:20:
         91:71:67:fd:b7:e4:4d:92:de:87:34:4e:6b:a9:ff:bb:26:84:
         58:ee:2f:04:17:3c:bc:d7:05:de:6a:e2:f5:79:e3:7a:d9:61:
         fe:5c:bf:f5:29:18:ae:bf:f7:df:cb:38:e4:92:fe:96:83:db:
         2d:04:5c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org