Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FC08546012DBB8FBB52697DB7520556A0E251895.cer
File:                     FC08546012DBB8FBB52697DB7520556A0E251895.cer (raw, json)
Hash identifier:          ObfYEZN6GJ5kAKdsFQXUG0rm4a1typzg5L9Vt2z2Pzc=
Subject key identifier:   FC:08:54:60:12:DB:B8:FB:B5:26:97:DB:75:20:55:6A:0E:25:18:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3D37A6FD53D9DCB08232E1ACF2C3B95BEF038B64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/FC08546012DBB8FBB52697DB7520556A0E251895.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Nov 2022 13:05:52 +0000
Certificate not after:    Wed 29 Nov 2023 13:10:52 +0000
Subordinate resources:    AS: 266394
                          IP: 170.81.76.0/22
                          IP: 2804:372c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:37:a6:fd:53:d9:dc:b0:82:32:e1:ac:f2:c3:b9:5b:ef:03:8b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 30 13:05:52 2022 GMT
            Not After : Nov 29 13:10:52 2023 GMT
        Subject: CN=FC08546012DBB8FBB52697DB7520556A0E251895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2c:ac:33:f0:49:6c:83:ff:49:ac:f2:4d:4d:
                    f7:bd:51:00:69:6e:86:09:f5:09:47:d1:91:5b:94:
                    0c:6d:4b:46:d3:a8:10:e1:1c:40:69:e3:20:6f:48:
                    6d:0a:d5:06:d3:b9:a5:86:03:f6:c9:76:58:ee:a0:
                    d5:ec:e5:b7:28:cb:e7:d8:66:d9:11:6c:62:11:1b:
                    50:de:7d:7c:b7:a8:a2:a3:be:22:36:f7:d2:8c:ea:
                    62:c5:e4:e2:3a:83:40:e1:d7:ae:8d:ec:a3:c0:bd:
                    a2:be:e5:41:9d:62:90:c3:bb:4c:f0:82:b9:26:64:
                    94:92:69:36:57:ea:36:b1:f5:68:0a:bf:75:8d:4d:
                    d3:24:52:a7:20:6d:f7:52:e2:48:a5:55:29:20:21:
                    ac:21:f8:b8:a3:02:6d:02:c5:33:60:40:25:e8:91:
                    f1:90:7c:2f:a7:df:b0:c4:5d:89:18:2c:3a:62:ed:
                    a7:f6:f6:c4:63:75:4b:2b:a0:db:ae:d7:18:a0:8d:
                    14:e6:02:4e:f5:34:07:cb:23:c1:60:7b:0a:bd:e4:
                    32:f7:19:8c:90:91:93:0d:cb:03:8a:ac:6e:59:50:
                    16:6c:2c:e1:05:44:17:58:fd:0b:b4:0d:7a:59:35:
                    6b:96:9a:c1:4e:1c:ba:66:df:47:69:3f:0a:13:da:
                    08:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:08:54:60:12:DB:B8:FB:B5:26:97:DB:75:20:55:6A:0E:25:18:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/FC08546012DBB8FBB52697DB7520556A0E251895.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.76.0/22
                IPv6:
                  2804:372c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266394

    Signature Algorithm: sha256WithRSAEncryption
         85:7e:70:a8:75:8a:1a:87:fb:73:a1:00:e0:ac:4b:0f:b8:27:
         53:8b:fb:5c:0b:85:6b:33:f2:b3:9c:84:f0:4a:07:a9:74:21:
         8f:47:6f:c0:91:f5:02:ad:18:14:9e:32:89:07:a0:71:ab:ab:
         9e:94:0b:bf:88:ce:6f:ba:f0:48:03:b3:98:33:2c:3a:1f:47:
         cb:ea:61:7b:b3:db:bd:ae:37:e8:07:b6:97:a0:af:df:8c:70:
         7b:9d:61:39:12:f5:e5:28:ab:ea:85:63:08:ff:d8:33:e5:9b:
         7c:bd:60:e7:78:c0:b6:48:65:60:7f:f5:61:75:d5:d2:b1:e5:
         b6:a5:61:de:2a:8d:ad:35:ce:7d:95:de:de:27:cf:d2:43:ea:
         41:e5:66:31:8f:fc:42:54:10:43:ee:14:cb:f6:8f:af:5c:90:
         b7:65:a4:12:11:ec:3c:ea:6b:9d:62:6c:94:04:50:ee:c6:8e:
         c1:4c:c1:ee:b8:ac:0c:3d:0b:95:9b:30:a7:58:b1:46:4c:a9:
         1b:c9:6b:f3:96:46:57:7a:04:63:a7:d4:21:4d:94:38:e7:f0:
         64:27:9a:06:43:14:f5:91:ca:d5:20:24:cf:b2:64:1c:1e:f5:
         f8:69:dd:bc:ff:64:c7:ff:87:43:c0:bd:97:38:4d:39:f1:8d:
         fa:2d:ad:fa
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUPTem/VPZ3LCCMuGs8sO5W+8Di2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjExMzAxMzA1NTJaFw0yMzExMjkxMzEwNTJaMDMxMTAvBgNV
BAMTKEZDMDg1NDYwMTJEQkI4RkJCNTI2OTdEQjc1MjA1NTZBMEUyNTE4OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaLKwz8Elsg/9JrPJNTfe9UQBp
boYJ9QlH0ZFblAxtS0bTqBDhHEBp4yBvSG0K1QbTuaWGA/bJdljuoNXs5bcoy+fY
ZtkRbGIRG1DefXy3qKKjviI299KM6mLF5OI6g0Dh166N7KPAvaK+5UGdYpDDu0zw
grkmZJSSaTZX6jax9WgKv3WNTdMkUqcgbfdS4kilVSkgIawh+LijAm0CxTNgQCXo
kfGQfC+n37DEXYkYLDpi7af29sRjdUsroNuu1xigjRTmAk71NAfLI8Fgewq95DL3
GYyQkZMNywOKrG5ZUBZsLOEFRBdY/Qu0DXpZNWuWmsFOHLpm30dpPwoT2ggHAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT8CFRgEtu4+7Um
l9t1IFVqDiUYlTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yRGZ1NGthMTY1TlltU1UxN1hpeDNUYVZGV3FuMzhZYnV0
Y3hEQVBaQ0xBZi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yRGZ1NGthMTY1TlltU1UxN1hpeDNUYVZGV3FuMzhZYnV0
Y3hEQVBaQ0xBZi8wL0ZDMDg1NDYwMTJEQkI4RkJCNTI2OTdEQjc1MjA1NTZBMEUy
NTE4OTUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqpRTDANBAIAAjAHAwUA
KAQ3LDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEJowDQYJKoZIhvcNAQELBQAD
ggEBAIV+cKh1ihqH+3OhAOCsSw+4J1OL+1wLhWsz8rOchPBKB6l0IY9Hb8CR9QKt
GBSeMokHoHGrq56UC7+Izm+68EgDs5gzLDofR8vqYXuz272uN+gHtpegr9+McHud
YTkS9eUoq+qFYwj/2DPlm3y9YOd4wLZIZWB/9WF11dKx5balYd4qja01zn2V3t4n
z9JD6kHlZjGP/EJUEEPuFMv2j69ckLdlpBIR7Dzqa51ibJQEUO7GjsFMwe64rAw9
C5WbMKdYsUZMqRvJa/OWRld6BGOn1CFNlDjn8GQnmgZDFPWRytUgJM+yZBwe9fhp
3bz/ZMf/h0PAvZc4TTnxjfotrfo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org