Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FBF388B0042209AF06DF8A84ADB7AE694276263D.cer
File:                     FBF388B0042209AF06DF8A84ADB7AE694276263D.cer (raw, json)
Hash identifier:          /6Yl7jG0MMpeiMyWEsvF74GuH6pciBbkj2dl+56X5IA=
Subject key identifier:   FB:F3:88:B0:04:22:09:AF:06:DF:8A:84:AD:B7:AE:69:42:76:26:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       416A7A57E2FA9FD91A8B1E03D00449367A4BE2A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/FBF388B0042209AF06DF8A84ADB7AE694276263D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 14:31:45 +0000
Certificate not after:    Wed 04 Sep 2024 14:36:45 +0000
Subordinate resources:    AS: 266196
                          IP: 45.6.160.0/22
                          IP: 2804:3c34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6a:7a:57:e2:fa:9f:d9:1a:8b:1e:03:d0:04:49:36:7a:4b:e2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 14:31:45 2023 GMT
            Not After : Sep  4 14:36:45 2024 GMT
        Subject: CN=FBF388B0042209AF06DF8A84ADB7AE694276263D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:5f:6b:70:e6:21:8c:1c:72:f9:f8:80:a2:
                    d8:4f:30:70:d5:9a:af:82:42:0f:00:10:24:8c:db:
                    12:73:0e:80:15:08:e4:9c:c2:33:bc:0f:6a:1c:a2:
                    cc:c7:6a:11:ef:f8:06:d2:ab:88:8d:40:08:12:15:
                    81:cd:42:57:ef:fa:0a:68:0b:ad:f0:ae:87:9f:5c:
                    c7:29:e0:4a:35:df:af:94:10:5b:6d:1b:07:6e:58:
                    9b:b3:a9:73:79:e4:ab:a9:52:f8:c3:1c:b9:6a:e1:
                    18:9f:be:25:68:a2:bf:4e:f8:b1:aa:88:7d:03:87:
                    e3:bb:d7:6a:bc:5c:3f:ea:7e:e3:31:a0:6a:63:73:
                    15:60:87:60:14:45:6c:01:62:20:02:5f:f1:b6:ce:
                    8f:0d:37:41:e1:72:ef:d8:9a:b5:dd:83:cb:1f:d3:
                    90:f3:01:bf:29:b5:39:ac:c0:53:62:2b:95:de:34:
                    88:c2:f5:65:85:98:df:f9:ea:c8:78:cd:4a:81:40:
                    95:b8:d2:3d:77:d6:ad:18:1a:3e:f8:f4:7e:aa:7d:
                    54:8f:16:fc:dc:af:eb:a2:64:3b:5e:b4:65:e0:1a:
                    a9:20:2e:8a:9a:0a:38:87:6b:1e:c5:95:60:11:1b:
                    0a:30:b2:b2:7a:05:f9:df:4d:69:ba:f5:8b:9c:48:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:F3:88:B0:04:22:09:AF:06:DF:8A:84:AD:B7:AE:69:42:76:26:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/FBF388B0042209AF06DF8A84ADB7AE694276263D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.160.0/22
                IPv6:
                  2804:3c34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266196

    Signature Algorithm: sha256WithRSAEncryption
         9d:53:77:85:77:fe:c8:39:a1:09:2b:30:ec:55:dd:53:99:fd:
         fa:3d:24:51:01:d3:be:4a:08:a3:3a:57:8c:ea:f9:77:d5:22:
         ab:30:d2:e9:ff:30:a2:a8:d4:c0:0a:ef:fd:ee:83:bf:60:79:
         e0:6b:29:16:90:6a:b9:ed:65:79:21:d3:a1:cd:ce:1f:d3:9c:
         47:fe:e2:36:b1:c7:88:58:54:e2:ba:b1:5f:ba:71:0a:a1:37:
         1a:21:fe:03:9a:48:12:e7:f2:2e:1d:28:f1:cd:de:d6:a4:e8:
         3b:7f:1c:1a:93:00:4b:97:1f:78:29:40:e1:62:cf:1a:67:06:
         96:ce:78:f0:ba:de:af:28:7c:5c:af:05:f6:63:d0:84:a2:2b:
         ec:72:d7:54:e8:07:68:59:ca:77:34:9c:16:51:46:55:46:98:
         fd:29:2f:af:66:f3:e0:a3:fa:7b:c2:29:b8:2e:9a:35:5c:35:
         79:da:9c:7d:64:8f:9f:93:61:12:ac:1b:a5:d7:f7:74:f8:15:
         03:34:c7:ae:48:36:27:07:26:c5:24:7f:d4:42:cd:15:26:3a:
         77:1a:8e:0a:3b:2a:5b:b5:40:f6:b3:e5:cc:3b:46:af:cb:9f:
         ac:bf:93:4c:2f:eb:e8:9f:64:78:63:9a:f1:c4:93:26:b4:59:
         80:b2:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org