Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FBBB999805E32505BB469C0FE86BBE3FF9063230.cer
File:                     FBBB999805E32505BB469C0FE86BBE3FF9063230.cer (raw, json)
Hash identifier:          a+VLzg7PSi+1OWRU2qLTD5H7ddwELlK7L5jsFYRgVe4=
Subject key identifier:   FB:BB:99:98:05:E3:25:05:BB:46:9C:0F:E8:6B:BE:3F:F9:06:32:30
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1D3AEE865801D9B80D642596C96FF187EA2DB1DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/FBBB999805E32505BB469C0FE86BBE3FF9063230.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Feb 2023 20:14:03 +0000
Certificate not after:    Thu 15 Feb 2024 20:19:03 +0000
Subordinate resources:    AS: 265487
                          IP: 168.197.144.0/22
                          IP: 2804:34e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3a:ee:86:58:01:d9:b8:0d:64:25:96:c9:6f:f1:87:ea:2d:b1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 20:14:03 2023 GMT
            Not After : Feb 15 20:19:03 2024 GMT
        Subject: CN=FBBB999805E32505BB469C0FE86BBE3FF9063230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:b8:9f:05:a8:48:16:e4:bb:69:de:81:d2:
                    5b:01:c7:00:52:17:39:0d:94:2a:33:e2:0e:dc:d8:
                    be:6d:9f:b9:6d:46:b6:16:d6:f6:3b:24:07:4a:a8:
                    7f:aa:60:59:8c:7a:b7:c1:cd:0d:68:dd:6e:5a:32:
                    6c:04:f0:bf:e0:5c:aa:9d:1e:95:29:cc:ed:63:24:
                    09:3d:de:20:0d:29:e5:fc:2e:7d:4a:1a:28:ee:fb:
                    e5:a3:be:a9:b7:70:ce:99:af:fb:89:82:7d:1c:b5:
                    07:49:63:9a:f1:98:f3:62:cc:1f:f1:e8:42:9d:47:
                    34:84:76:cc:bb:2b:a3:73:9b:2c:32:65:7e:a6:94:
                    f4:ef:e0:6d:a0:dd:dc:ee:f1:36:68:e4:01:32:38:
                    a1:79:c7:60:db:9f:65:e0:b3:25:80:59:a0:e6:23:
                    cd:f0:02:e9:cd:7a:a3:da:9c:94:a8:c3:47:f6:65:
                    dd:0e:99:2c:1b:c7:23:16:de:b7:70:2b:ce:b8:13:
                    d8:ca:83:37:d8:d7:f1:15:4c:6a:a8:51:f0:a3:0c:
                    5f:3c:c5:a4:95:34:2f:ec:42:fc:20:a1:3a:66:2f:
                    45:6e:ad:47:98:77:40:63:4f:de:7a:ce:95:77:bc:
                    f1:59:28:3d:ba:0b:41:f9:50:b3:08:8a:fe:88:9f:
                    2d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:BB:99:98:05:E3:25:05:BB:46:9C:0F:E8:6B:BE:3F:F9:06:32:30
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/FBBB999805E32505BB469C0FE86BBE3FF9063230.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.144.0/22
                IPv6:
                  2804:34e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265487

    Signature Algorithm: sha256WithRSAEncryption
         20:98:db:31:04:a1:ce:fd:18:92:ac:00:23:2e:e5:0b:31:f3:
         2b:c5:75:bc:00:57:f1:80:d9:b5:93:3e:8a:cf:be:5e:90:41:
         30:f2:27:20:8c:e6:d5:3b:36:a2:96:75:2c:23:c6:6b:ac:1a:
         ac:56:ea:d7:d8:6d:67:11:e3:01:e8:18:c5:f0:76:3c:13:8c:
         f9:23:06:1e:16:15:16:d7:26:17:06:4d:54:2e:e0:6f:56:4c:
         8a:4e:2b:f7:b9:84:72:56:37:18:75:bf:14:0d:1c:ec:59:8b:
         bf:30:bc:29:d1:e0:3d:07:fe:97:1b:67:38:16:c0:6a:c9:e0:
         e5:9d:08:10:fb:8b:23:52:ee:82:ac:00:8b:aa:47:d2:a2:bd:
         24:55:d9:47:d0:5b:a0:4d:f4:15:cc:c8:f3:21:b7:94:0e:d5:
         e3:4a:2a:3f:52:f5:38:ef:90:19:44:30:a1:47:93:13:af:82:
         76:f3:c3:c2:44:1e:57:04:21:c2:c5:d8:84:4e:50:73:8a:98:
         a9:ad:8c:01:20:7d:b7:78:57:60:29:e0:8a:e4:61:6f:33:8b:
         20:1b:67:16:09:c2:e7:4b:c7:a4:c4:9d:e7:ae:57:46:25:59:
         20:8a:d5:27:9d:d1:96:d1:1a:da:8a:c4:26:99:2e:37:8a:c0:
         08:99:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org