Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FC100DC5B568BA67A953B7D437E5FF8FC8C7254B.cer
File:                     FC100DC5B568BA67A953B7D437E5FF8FC8C7254B.cer (raw, json)
Hash identifier:          /Ar2izTjGO2IGLNV4B62GeEX6Rp9rXnwrNhDW4US2OI=
Subject key identifier:   FC:10:0D:C5:B5:68:BA:67:A9:53:B7:D4:37:E5:FF:8F:C8:C7:25:4B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23F4DBE781555BA1144FFB07FE6E463DA1C65C5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/FC100DC5B568BA67A953B7D437E5FF8FC8C7254B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Apr 2023 11:59:15 +0000
Certificate not after:    Fri 26 Apr 2024 12:04:15 +0000
Subordinate resources:    AS: 52576
                          IP: 177.86.200.0/21
                          IP: 2804:cf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f4:db:e7:81:55:5b:a1:14:4f:fb:07:fe:6e:46:3d:a1:c6:5c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 28 11:59:15 2023 GMT
            Not After : Apr 26 12:04:15 2024 GMT
        Subject: CN=FC100DC5B568BA67A953B7D437E5FF8FC8C7254B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:2b:67:ab:10:71:53:ab:31:20:4f:b4:f2:
                    ce:2a:d6:ad:9e:fd:ea:c1:93:e4:55:f9:4d:11:7d:
                    45:e6:7c:9d:d7:c1:8c:b5:57:23:9e:69:04:f5:3a:
                    21:c0:1c:c4:49:3e:7d:60:03:05:72:89:a5:12:f7:
                    05:65:75:58:ec:48:dd:15:2a:5c:ed:f1:d5:98:c6:
                    e7:3e:96:41:dc:0b:a8:8f:23:42:45:d3:9e:85:ad:
                    da:91:99:95:bc:e3:85:42:b3:bd:0b:43:ce:f7:6b:
                    44:4b:3a:6c:2d:38:d5:cd:ec:ca:4e:a8:2e:3b:fd:
                    4d:f1:62:d8:27:b6:9b:27:c0:8b:40:a7:ba:68:e4:
                    5a:3b:00:49:c2:b9:b7:e6:40:34:03:8f:9e:cc:31:
                    ca:29:c5:cf:d0:ba:ce:48:5d:f1:b4:5f:55:bf:01:
                    83:af:52:e5:af:5f:8c:bb:f1:50:f1:f0:de:68:e0:
                    61:6c:2b:ec:c6:63:d8:48:be:5a:98:0a:7a:3c:cc:
                    91:aa:fa:1d:61:02:1d:6e:ef:67:ea:af:31:86:fd:
                    8e:00:35:05:20:ab:d3:15:cf:06:49:a4:5b:73:24:
                    2f:f6:8f:85:b2:c4:32:13:6d:7a:53:82:2c:0b:45:
                    e4:60:9e:66:2b:c9:93:ea:b5:92:2b:a2:50:7a:b1:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:10:0D:C5:B5:68:BA:67:A9:53:B7:D4:37:E5:FF:8F:C8:C7:25:4B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/FC100DC5B568BA67A953B7D437E5FF8FC8C7254B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.200.0/21
                IPv6:
                  2804:cf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52576

    Signature Algorithm: sha256WithRSAEncryption
         9c:10:e5:a4:b3:1a:fb:b3:62:7e:35:02:68:d2:86:1b:99:f0:
         61:8a:de:b3:c3:84:ef:9e:38:d4:ff:a8:22:8b:61:16:5c:b7:
         bf:62:7c:fc:75:7b:34:2d:8a:1d:ca:9d:30:a6:42:11:b1:b7:
         5d:e5:03:66:02:0e:df:36:17:6c:b4:a9:e2:77:5d:ee:e1:fa:
         03:85:4c:b4:4b:39:5b:82:ff:0b:5e:76:15:73:34:13:e7:c1:
         3d:42:6f:e6:51:df:0e:17:82:93:2b:d9:ee:38:d1:6d:4e:fd:
         3c:de:d6:dd:03:81:db:a7:22:7f:14:93:d9:97:6f:5e:c5:fc:
         e3:20:fe:7c:ee:34:d2:1b:4e:b5:cf:61:73:b7:56:fa:7c:5f:
         8e:d0:b6:9c:04:52:eb:dd:dc:26:ff:a1:fa:6e:5c:72:cc:cd:
         ff:0b:15:d3:5b:ed:be:20:91:75:ba:d5:a8:b9:82:f1:81:6c:
         84:f1:49:d2:fe:2d:3b:05:7e:64:de:43:65:63:6a:c4:da:d5:
         3d:d3:2d:d6:c3:aa:34:c0:97:da:96:10:be:b7:e4:b3:a7:1a:
         cb:f3:23:e1:59:bb:0b:04:06:9c:13:74:c3:38:d4:a9:10:7d:
         67:d4:68:02:e5:25:1d:b7:8f:a0:8c:30:82:27:77:a4:db:39:
         1a:4d:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org