Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FC209833BE7BF9197BBFFD6F17F51754C27153ED.cer
File:                     FC209833BE7BF9197BBFFD6F17F51754C27153ED.cer (raw, json)
Hash identifier:          TM3/9IC6lICqNcoqpFQaBUhBAKYsG3ogreOCVS+Fc+I=
Subject key identifier:   FC:20:98:33:BE:7B:F9:19:7B:BF:FD:6F:17:F5:17:54:C2:71:53:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A14079D73A06F8A50627D55D8D9E3752B887751
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/FC209833BE7BF9197BBFFD6F17F51754C27153ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 May 2022 16:23:41 +0000
Certificate not after:    Mon 22 May 2023 16:28:41 +0000
Subordinate resources:    AS: 264196
                          IP: 138.97.204.0/22
                          IP: 2804:23fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:14:07:9d:73:a0:6f:8a:50:62:7d:55:d8:d9:e3:75:2b:88:77:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 16:23:41 2022 GMT
            Not After : May 22 16:28:41 2023 GMT
        Subject: CN=FC209833BE7BF9197BBFFD6F17F51754C27153ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:c6:6f:b4:91:7d:ef:9b:df:e0:47:09:64:
                    fd:58:f8:11:99:49:e6:16:e0:78:4b:c8:8d:c0:a6:
                    30:85:9e:cb:27:9f:29:1d:c6:00:6b:e6:8b:d4:de:
                    eb:ea:86:b4:90:52:6b:80:46:b9:ca:0a:f7:d3:40:
                    5f:2a:66:77:93:71:e4:f2:21:a0:c1:e7:0f:9a:9a:
                    0a:00:fb:3c:9c:d8:29:57:62:08:5a:21:e0:1b:29:
                    04:89:6f:df:f7:ae:ce:23:76:b3:6e:25:44:3c:2a:
                    60:02:63:d9:99:bc:ff:aa:15:48:b1:a2:c4:81:e8:
                    a2:e7:b0:70:bd:24:f3:93:de:3a:65:4e:51:01:f3:
                    a0:44:8b:e3:5a:72:87:2c:e8:86:f3:68:3e:e5:97:
                    00:b9:70:ee:8c:42:6d:b5:66:65:59:cd:15:90:97:
                    60:e1:eb:9a:d2:ca:50:ec:06:e5:dc:e5:6e:56:75:
                    d4:ef:1b:bb:1d:be:75:95:d4:29:73:14:e2:97:b0:
                    ca:cf:24:ad:7e:1d:ca:da:b3:3f:65:83:ba:2d:8d:
                    07:61:44:61:d6:80:a8:96:71:f1:39:64:f3:de:81:
                    15:c1:e5:ee:53:2e:88:78:bb:89:07:2e:31:fe:e0:
                    89:0f:af:56:d5:ae:5d:f9:06:a9:8c:09:4b:a3:a9:
                    3c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:20:98:33:BE:7B:F9:19:7B:BF:FD:6F:17:F5:17:54:C2:71:53:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/FC209833BE7BF9197BBFFD6F17F51754C27153ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.204.0/22
                IPv6:
                  2804:23fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264196

    Signature Algorithm: sha256WithRSAEncryption
         98:7f:95:a8:66:5e:66:3c:ff:a6:ac:19:07:ea:3d:b9:70:41:
         05:6e:62:ad:67:8b:2b:81:af:b1:8e:54:71:55:6d:d4:4a:54:
         b7:a3:72:31:b2:d4:16:f3:14:4c:27:c0:49:33:b4:1d:0f:68:
         28:45:7f:4c:fc:d9:a2:26:8f:94:c8:7a:7d:d2:76:d4:8b:8d:
         11:ca:ed:fb:b6:46:ee:47:9d:7e:5f:ef:e3:18:12:5c:4d:0a:
         01:49:38:83:55:80:74:0e:35:93:b1:22:07:41:c7:9c:ab:c0:
         a4:18:d8:c7:e4:19:66:fe:67:8c:a8:d8:15:b9:85:97:68:3c:
         4a:a0:48:d8:33:a1:9f:76:27:63:4d:2a:98:b6:74:94:66:ea:
         97:8e:23:6c:16:78:ac:36:d3:13:0c:45:e6:5a:40:cb:e2:c0:
         b7:4e:39:0e:40:b3:a0:1d:c9:b7:2f:fd:1c:50:a8:dd:f4:83:
         2a:79:e2:19:1e:7f:3d:fd:34:18:79:b4:a4:ea:45:e6:ed:33:
         b8:f3:9a:8c:28:5e:c1:d6:75:8e:b9:28:88:3b:b5:c5:24:0c:
         8e:7f:3a:48:84:97:7d:9b:1c:99:57:84:6f:1d:aa:c9:fd:7c:
         b2:31:f6:c5:f7:1d:8e:b6:49:4f:3a:04:40:df:c8:ec:d6:73:
         33:0f:e3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org