Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FC264A56450200CCB89788286F7FBCE41CDAA658.cer
File:                     FC264A56450200CCB89788286F7FBCE41CDAA658.cer (raw, json)
Hash identifier:          gZNtRB42+awzxCNQf61HiWXBOnQRR0945bECFaERx3I=
Subject key identifier:   FC:26:4A:56:45:02:00:CC:B8:97:88:28:6F:7F:BC:E4:1C:DA:A6:58
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       671275C10BC0860DCA178753683071C4BD6E97D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/FC264A56450200CCB89788286F7FBCE41CDAA658.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Jul 2023 12:28:30 +0000
Certificate not after:    Mon 08 Jul 2024 12:33:30 +0000
Subordinate resources:    AS: 263543
                          IP: 143.202.120.0/22
                          IP: 191.5.236.0/22
                          IP: 2804:13a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:12:75:c1:0b:c0:86:0d:ca:17:87:53:68:30:71:c4:bd:6e:97:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 10 12:28:30 2023 GMT
            Not After : Jul  8 12:33:30 2024 GMT
        Subject: CN=FC264A56450200CCB89788286F7FBCE41CDAA658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:d7:23:c6:76:a0:8f:6e:a5:20:7c:04:7a:
                    e9:56:e4:ec:52:9c:93:73:a5:7b:b2:f4:1c:91:b3:
                    93:6b:9c:7a:8c:22:df:ea:7d:50:7c:a0:33:b1:20:
                    df:f2:58:89:3a:6f:4e:0c:da:c4:fa:46:d8:01:7c:
                    30:d7:51:6d:ef:f1:18:35:10:7e:17:ac:c5:9f:7a:
                    57:a5:0e:e4:99:c3:08:42:fa:d6:90:13:7e:43:e6:
                    c1:66:a5:23:cf:c9:0f:91:31:29:cd:01:e5:91:bf:
                    5c:2f:ae:3d:1c:66:13:c2:b2:d2:fd:50:a2:b6:ff:
                    49:38:cf:e1:c0:ed:a0:e0:ee:aa:05:2b:f3:eb:5e:
                    b7:3e:4c:96:85:00:67:c5:85:8d:46:d6:c1:3d:75:
                    05:47:88:63:00:23:e8:23:c4:86:a6:eb:9f:86:4a:
                    25:cb:1c:31:f9:85:2d:49:52:12:e2:c1:04:14:4c:
                    dd:f7:06:ae:c0:0c:9a:a6:b9:59:78:31:2a:f3:ee:
                    25:97:cf:65:d7:cd:29:d2:5d:74:71:9e:15:f9:01:
                    74:38:34:9b:ec:88:ae:bb:67:6a:9c:3b:b4:73:f5:
                    20:b6:66:33:35:03:02:17:89:74:9d:c7:7b:59:97:
                    d8:e5:2c:66:d5:ac:68:52:96:4d:a1:7c:e6:c1:aa:
                    d9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:26:4A:56:45:02:00:CC:B8:97:88:28:6F:7F:BC:E4:1C:DA:A6:58
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/FC264A56450200CCB89788286F7FBCE41CDAA658.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.120.0/22
                  191.5.236.0/22
                IPv6:
                  2804:13a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263543

    Signature Algorithm: sha256WithRSAEncryption
         93:c6:4a:c5:52:61:f2:66:aa:c1:85:8d:25:0b:0c:cc:39:26:
         6a:d6:7a:af:38:9e:b3:e3:8c:b1:b3:c7:30:e3:1f:98:98:65:
         23:bb:9a:c6:30:4d:93:5e:77:93:d7:58:94:ee:90:00:04:42:
         58:ed:ff:7e:41:e2:a8:4a:9e:4f:ba:96:34:5a:94:2c:b2:32:
         de:9e:9b:79:4d:61:0e:ab:3c:49:51:75:5c:de:06:3a:f7:b0:
         13:22:c8:8a:ee:13:72:1a:d4:16:a3:05:3e:39:49:fd:27:4f:
         d9:ca:85:e4:3a:74:a7:7f:e6:6b:49:1e:34:c4:d8:dd:49:5f:
         e1:93:c5:07:16:c3:f8:18:c8:98:65:37:d9:2a:cc:a7:56:50:
         c2:c0:b2:bf:e6:51:75:f5:bc:17:44:d7:a1:51:f8:d0:ea:10:
         64:ba:7b:83:b1:c2:76:ed:28:ac:a3:63:3d:8b:64:29:33:a7:
         8f:13:b7:c9:31:78:7b:b8:b0:f0:25:2c:ad:bc:68:69:ab:4d:
         19:86:81:26:93:7f:ef:d4:08:77:a2:a2:cf:9a:d6:5f:c4:f2:
         67:21:2d:b7:53:d8:f8:d8:29:03:85:b3:0c:3b:8a:53:63:e0:
         87:af:07:57:ad:57:d5:89:09:6d:9b:c2:fe:25:aa:bd:b9:25:
         af:41:33:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org