Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FBC432C429E1C822C8A24EF64F37EDA262ED6EA1.cer
File:                     FBC432C429E1C822C8A24EF64F37EDA262ED6EA1.cer (raw, json)
Hash identifier:          Ki2ZUG5RAcKrZuJY2f1dW5TfkZOZmsfXUW3CbqQKxYc=
Subject key identifier:   FB:C4:32:C4:29:E1:C8:22:C8:A2:4E:F6:4F:37:ED:A2:62:ED:6E:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       038D801ABB23094DEC5F6F76DEED3E536F3465CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/FBC432C429E1C822C8A24EF64F37EDA262ED6EA1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Jan 2023 19:59:57 +0000
Certificate not after:    Mon 29 Jan 2024 20:04:57 +0000
Subordinate resources:    AS: 269137
                          IP: 45.180.144.0/22
                          IP: 2804:5ff8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8d:80:1a:bb:23:09:4d:ec:5f:6f:76:de:ed:3e:53:6f:34:65:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 30 19:59:57 2023 GMT
            Not After : Jan 29 20:04:57 2024 GMT
        Subject: CN=FBC432C429E1C822C8A24EF64F37EDA262ED6EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:7b:2a:f2:7c:eb:d8:c4:d0:94:c2:8c:8e:
                    b2:06:d5:b3:7b:b2:5e:5f:65:e5:f8:1b:b7:7b:82:
                    be:2d:16:bf:6e:54:8f:af:ab:f8:4d:c9:0b:21:17:
                    e2:43:51:ac:73:2a:36:4c:29:5a:1f:fa:be:e2:16:
                    1b:37:96:21:e5:45:e2:1b:c1:fe:53:8a:0f:0b:d6:
                    b2:0d:40:b7:86:37:3c:a8:ae:7b:fb:0d:b8:c6:56:
                    76:e8:5c:a6:df:1e:9b:58:3f:9e:3e:da:36:62:64:
                    df:95:79:31:c7:4c:a4:6f:7f:0f:8b:fa:20:79:f9:
                    80:2b:12:ba:a1:3f:ae:e6:72:0e:f9:61:71:5e:82:
                    f0:e1:8a:9d:7b:52:92:b9:51:54:b7:59:ed:e0:08:
                    74:a3:76:52:d4:f7:0d:d8:fe:1c:62:1f:ee:96:25:
                    8a:59:0a:81:86:27:09:b3:36:7a:bc:a2:e0:b0:7c:
                    11:76:6f:69:2d:c1:ac:c2:7d:54:0d:c4:64:80:c1:
                    b1:25:3d:37:5c:bf:f2:c2:1a:cc:cb:c3:4e:92:49:
                    55:87:62:35:cd:43:36:ef:4f:33:7c:36:51:07:69:
                    e1:47:fd:1d:bb:84:fe:fc:a4:4b:b2:2f:fc:5d:2c:
                    3d:dc:96:71:43:eb:31:fa:eb:e1:11:02:12:50:f0:
                    f9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:C4:32:C4:29:E1:C8:22:C8:A2:4E:F6:4F:37:ED:A2:62:ED:6E:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/FBC432C429E1C822C8A24EF64F37EDA262ED6EA1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.144.0/22
                IPv6:
                  2804:5ff8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269137

    Signature Algorithm: sha256WithRSAEncryption
         03:2c:27:df:bf:5e:ed:bc:8d:9a:e6:4f:ab:c4:6b:09:cc:9c:
         c5:33:c4:c6:f1:dd:a0:7a:0a:dc:4a:88:0f:c2:d7:d9:2a:97:
         66:c1:bd:54:da:64:42:0d:e5:1f:22:1b:58:e4:de:01:4a:71:
         89:5c:c7:7d:cf:9f:ed:51:b3:fc:56:ec:82:1b:c8:56:f0:0f:
         29:c7:ad:b4:81:97:9f:ee:a2:8e:36:cc:00:ea:94:9b:64:e7:
         ec:4c:39:f9:33:8f:23:10:d2:60:9a:03:a6:1e:b2:2c:0c:08:
         01:99:30:77:6b:4c:47:4c:93:ae:e0:cd:53:3c:7c:6f:11:31:
         6c:fa:d4:ec:bb:c5:94:ed:7a:37:58:49:ed:2c:87:63:b2:5f:
         07:c0:58:fc:34:f0:21:74:f4:b8:63:d1:85:0e:97:ce:14:a1:
         25:e2:c5:83:15:44:ce:63:0a:60:b8:46:d2:e3:02:f3:70:d1:
         61:35:64:dd:27:5a:54:c6:35:a2:9c:b1:de:71:68:31:4f:e0:
         42:42:5f:de:a4:a9:60:ea:ae:a8:98:5b:36:ec:e2:3b:33:ad:
         0c:14:20:08:62:35:6d:46:86:00:f9:21:f5:da:9d:7a:39:45:
         41:d4:01:de:6a:ad:5a:d7:d9:e5:b3:7f:e4:85:2c:50:eb:41:
         ae:99:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org