Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FC814859C3783804CA66F872CE9BEB19227ED64F.cer
File:                     FC814859C3783804CA66F872CE9BEB19227ED64F.cer (raw, json)
Hash identifier:          kO0s4DVqkLiqnrBY5XhU/dOFrC2J7hQpu8d0oAIiYdc=
Subject key identifier:   FC:81:48:59:C3:78:38:04:CA:66:F8:72:CE:9B:EB:19:22:7E:D6:4F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       753B1794DD2F72042ECAD185EB6239A3664E64A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/FC814859C3783804CA66F872CE9BEB19227ED64F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 22:52:09 +0000
Certificate not after:    Tue 18 Feb 2025 22:57:09 +0000
Subordinate resources:    AS: 263926
                          IP: 138.219.112.0/22
                          IP: 2804:27dc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3b:17:94:dd:2f:72:04:2e:ca:d1:85:eb:62:39:a3:66:4e:64:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 22:52:09 2024 GMT
            Not After : Feb 18 22:57:09 2025 GMT
        Subject: CN=FC814859C3783804CA66F872CE9BEB19227ED64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:4d:dc:90:c8:91:73:d4:14:ec:e0:3f:7d:
                    e7:12:b9:67:3b:ab:85:de:34:07:55:85:24:c3:e6:
                    40:fa:fc:03:94:27:d3:b9:a1:ca:ad:e9:ab:ce:cf:
                    49:4c:81:15:01:6e:51:8d:ad:68:6d:50:9e:43:1b:
                    1f:7f:84:11:5a:ac:4a:7a:2e:3e:ec:3d:58:26:c8:
                    15:27:71:46:5e:6c:e5:b8:be:ea:c5:80:fe:96:7f:
                    26:f1:ed:69:d9:c0:fd:ff:38:18:07:c6:0f:48:ca:
                    ae:50:9f:ae:f5:99:10:79:10:87:fd:1e:01:56:1f:
                    a4:44:9c:cb:50:5d:d2:d5:56:1a:ce:97:a6:0b:c4:
                    9b:90:60:d8:c5:ba:4b:b4:d5:76:4c:32:4e:a6:e4:
                    94:a2:14:ed:2c:eb:83:c3:d2:dd:9d:cc:b0:57:ec:
                    c0:60:c1:73:2d:90:a0:b5:7a:e4:0d:87:54:fe:92:
                    93:af:f0:6b:9d:90:41:2b:be:59:3e:6d:07:b9:0a:
                    6c:db:a5:4b:eb:d0:36:92:a1:d0:50:c2:12:e7:74:
                    3f:7f:51:c5:7f:9a:17:e1:c4:d5:48:d8:d4:ff:70:
                    ea:7e:b1:16:ad:7c:e4:48:41:a3:b7:2f:b9:9e:8a:
                    4a:89:4a:7a:53:f2:ee:06:b2:fe:31:92:24:69:53:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:81:48:59:C3:78:38:04:CA:66:F8:72:CE:9B:EB:19:22:7E:D6:4F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/FC814859C3783804CA66F872CE9BEB19227ED64F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.112.0/22
                IPv6:
                  2804:27dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263926

    Signature Algorithm: sha256WithRSAEncryption
         42:6c:d4:a4:30:19:6c:a1:90:7f:ec:9e:b8:4a:c2:eb:44:5c:
         cf:38:c6:53:c4:96:aa:e3:27:b9:96:7f:59:e2:50:83:b3:c2:
         22:d9:23:b8:c4:35:50:f9:7e:46:80:18:fa:a4:86:2f:5c:18:
         34:65:0b:cd:40:60:72:5f:3e:9a:f6:6f:2f:b0:e4:d0:04:f8:
         28:2d:b6:76:a1:24:bf:b6:c0:b1:11:fb:9b:f2:06:bd:e1:3e:
         d9:e3:9e:b9:ee:34:79:fa:7f:29:11:90:b4:6a:a4:2d:27:23:
         98:2c:ac:69:37:6e:94:54:2a:7e:96:2a:82:25:2d:d7:95:3d:
         f0:dc:19:03:20:55:d9:68:09:8d:32:88:7a:53:bc:51:f8:5d:
         6a:c3:67:24:76:82:30:a9:3a:4d:c6:ad:4b:c9:c1:91:4f:3f:
         e7:ae:3a:d0:14:86:66:40:fb:e0:b4:0d:b4:e5:ae:9d:6f:6f:
         e0:93:ff:f6:2b:b2:ba:fb:64:9c:26:c8:22:99:bc:4d:ee:d5:
         55:4e:0a:1d:31:bb:86:6a:32:97:9a:a1:fa:11:57:12:b1:ec:
         1b:41:f4:3e:52:12:7a:f0:bc:17:f1:0a:c5:fe:fc:70:67:7a:
         b3:b5:0c:17:df:fe:bf:b6:25:40:4b:78:b6:fe:68:bc:e4:c4:
         02:46:14:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:37:59 2025 by rpki-client