Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FBEDF3AFC502041514E14325830C0FB72B924D5E.cer
File:                     FBEDF3AFC502041514E14325830C0FB72B924D5E.cer (raw, json)
Hash identifier:          nt/0QuzVlpfzADINUcIEMVuS1qA/Vo/U2Ex195odWWg=
Subject key identifier:   FB:ED:F3:AF:C5:02:04:15:14:E1:43:25:83:0C:0F:B7:2B:92:4D:5E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01BABAA52D4443852A431938187FCC2A38138EC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/FBEDF3AFC502041514E14325830C0FB72B924D5E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Feb 2023 17:50:16 +0000
Certificate not after:    Thu 15 Feb 2024 17:55:16 +0000
Subordinate resources:    AS: 267035
                          IP: 45.227.148.0/22
                          IP: 2804:4728::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ba:ba:a5:2d:44:43:85:2a:43:19:38:18:7f:cc:2a:38:13:8e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 17:50:16 2023 GMT
            Not After : Feb 15 17:55:16 2024 GMT
        Subject: CN=FBEDF3AFC502041514E14325830C0FB72B924D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:f0:a8:8c:af:bb:00:a9:14:ec:cf:af:e1:
                    73:21:e5:e1:67:ca:70:7b:30:14:d8:df:24:08:f7:
                    f8:9b:ba:0a:0b:ac:1e:5d:7a:39:9a:fa:4d:4f:69:
                    07:36:71:19:2e:80:22:21:dd:4d:00:77:0f:ad:64:
                    0e:e7:86:fa:f4:ab:ff:59:da:fb:aa:dd:f5:17:d1:
                    4e:8a:ec:ca:e8:9a:4e:68:f5:f0:77:10:c4:64:c0:
                    dd:b8:d5:5a:23:16:b4:d9:1f:ff:aa:51:80:d8:2c:
                    cd:2a:d7:2b:b5:45:f8:2b:1b:f8:7a:65:40:fc:eb:
                    bc:b1:79:7d:4e:f8:99:e8:e3:f1:51:a7:8b:de:c2:
                    d6:db:93:7a:ee:d8:86:58:63:42:29:66:95:e6:7c:
                    05:5e:32:f8:e7:c1:3a:48:c7:65:39:26:48:c0:31:
                    46:2c:40:06:25:dd:1e:f2:b0:17:1f:9a:97:72:c4:
                    f6:d2:6c:5c:1f:fd:5b:d7:a2:ef:de:64:ad:be:8b:
                    9e:8d:00:d1:4a:70:58:d0:c5:fc:fc:8c:28:16:fc:
                    50:a0:28:b0:37:d2:72:16:b1:12:3b:bc:5d:af:d8:
                    e7:9e:06:52:1b:84:94:5e:ee:13:98:91:4e:62:a7:
                    d3:1b:e2:81:3b:f3:cd:a3:99:4f:7f:9f:c6:33:49:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:ED:F3:AF:C5:02:04:15:14:E1:43:25:83:0C:0F:B7:2B:92:4D:5E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/FBEDF3AFC502041514E14325830C0FB72B924D5E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.148.0/22
                IPv6:
                  2804:4728::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267035

    Signature Algorithm: sha256WithRSAEncryption
         5b:39:06:cf:e8:70:08:5f:b0:30:8e:20:e0:0b:8c:0e:27:b7:
         f2:8b:6b:25:33:a1:4b:a3:1f:cc:05:28:6a:f1:8b:5a:dd:f8:
         4c:4b:d7:a5:14:40:7b:e5:d0:37:d4:1c:a0:f8:86:13:45:36:
         26:e7:94:ad:72:f2:37:fc:e6:dd:83:de:a1:25:25:21:65:19:
         d0:21:35:c8:7a:73:e9:74:56:2e:62:90:15:e2:e0:8b:2f:1a:
         71:16:46:69:ea:2e:db:b1:5b:77:c0:40:8f:a0:52:82:fd:ea:
         78:91:5a:92:c7:bd:d2:fb:21:ba:24:4c:95:27:a4:c7:4e:a6:
         55:a2:bb:53:b7:6a:c5:18:98:3a:0a:df:36:e5:73:b9:70:93:
         6b:b2:da:d8:ee:b0:29:89:99:02:75:73:6e:7a:81:68:4a:40:
         bc:18:79:d3:36:1c:0b:c0:96:9c:04:5f:f0:da:d9:90:8c:4b:
         b1:31:01:a6:66:cc:24:ab:02:55:cb:85:1c:0f:04:72:68:e1:
         83:00:fc:2f:f0:1f:a6:84:28:7f:dc:05:9a:29:27:13:41:9e:
         96:d9:de:66:1b:4a:6f:63:bc:5e:21:b0:ed:f7:c6:49:64:95:
         7c:f7:32:31:47:49:17:97:6f:3a:ff:63:a6:ae:6e:0b:0b:de:
         97:29:42:44
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIUAbq6pS1EQ4UqQxk4GH/MKjgTjsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMTYxNzUwMTZaFw0yNDAyMTUxNzU1MTZaMDMxMTAvBgNV
BAMTKEZCRURGM0FGQzUwMjA0MTUxNEUxNDMyNTgzMEMwRkI3MkI5MjRENUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCorvCojK+7AKkU7M+v4XMh5eFn
ynB7MBTY3yQI9/ibugoLrB5dejma+k1PaQc2cRkugCIh3U0Adw+tZA7nhvr0q/9Z
2vuq3fUX0U6K7Mromk5o9fB3EMRkwN241VojFrTZH/+qUYDYLM0q1yu1RfgrG/h6
ZUD867yxeX1O+Jno4/FRp4vewtbbk3ru2IZYY0IpZpXmfAVeMvjnwTpIx2U5JkjA
MUYsQAYl3R7ysBcfmpdyxPbSbFwf/VvXou/eZK2+i56NANFKcFjQxfz8jCgW/FCg
KLA30nIWsRI7vF2v2OeeBlIbhJRe7hOYkU5ip9Mb4oE7882jmU9/n8YzSW8TAgMB
AAGjggMYMIIDFDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT77fOvxQIEFRTh
QyWDDA+3K5JNXjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ZSm5SQlVvTFZyZ1Y2dktvTDdtaVVwZ3E1b0xLa25MZFlG
eTRoaWRVM0U2LzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL1lKblJCVW9MVnJnVjZ2S29MN21pVXBncTVvTEtrbkxkWUZ5
NGhpZFUzRTYvMC9GQkVERjNBRkM1MDIwNDE1MTRFMTQzMjU4MzBDMEZCNzJCOTI0
RDVFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt45QwDQQCAAIwBwMFACgE
RygwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBMbMA0GCSqGSIb3DQEBCwUAA4IB
AQBbOQbP6HAIX7AwjiDgC4wOJ7fyi2slM6FLox/MBShq8Yta3fhMS9elFEB75dA3
1Byg+IYTRTYm55StcvI3/Obdg96hJSUhZRnQITXIenPpdFYuYpAV4uCLLxpxFkZp
6i7bsVt3wECPoFKC/ep4kVqSx73S+yG6JEyVJ6THTqZVortTt2rFGJg6Ct825XO5
cJNrstrY7rApiZkCdXNueoFoSkC8GHnTNhwLwJacBF/w2tmQjEuxMQGmZswkqwJV
y4UcDwRyaOGDAPwv8B+mhCh/3AWaKScTQZ6W2d5mG0pvY7xeIbDt98ZJZJV89zIx
R0kXl286/2Omrm4LC96XKUJE
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org