Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer
File:                     FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer (raw, json)
Hash identifier:          m07huC78UwG4mzb/wTeMmRZoGMZS3VMhWtm7Y+9bkVA=
Subject key identifier:   FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2A331532CB00732317B4D972DCADF9BCFEB132C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 21:37:56 +0000
Certificate not after:    Thu 30 Jan 2025 21:42:56 +0000
Subordinate resources:    AS: 269084
                          IP: 45.179.120.0/22
                          IP: 2804:5f38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:33:15:32:cb:00:73:23:17:b4:d9:72:dc:ad:f9:bc:fe:b1:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 21:37:56 2024 GMT
            Not After : Jan 30 21:42:56 2025 GMT
        Subject: CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:4f:7b:61:fb:57:98:cb:ea:f5:20:73:bd:
                    0f:56:80:3b:f4:60:bf:ed:88:cf:d6:89:fa:1f:e8:
                    d6:9c:8b:e8:e9:f6:4d:65:3a:0c:05:4c:aa:d9:c1:
                    f9:0d:c5:91:b3:7a:fd:1c:f8:1f:be:3f:71:8f:cc:
                    1a:6e:c1:51:9e:86:8f:8e:34:b3:db:6e:02:0b:0d:
                    d6:84:c9:16:c7:32:f5:87:9e:c6:b5:d7:e0:1b:d5:
                    ff:e4:b6:6a:94:61:9f:ea:ad:f6:d1:ed:06:54:3e:
                    bc:2d:7e:1c:c0:5a:15:84:56:8e:8b:b2:06:30:c3:
                    60:59:d5:7f:40:1a:dc:fd:57:01:19:02:70:75:de:
                    36:b7:fc:33:35:84:d2:45:7e:1e:61:fc:41:fc:26:
                    f1:3f:b3:82:45:c8:1f:47:0b:f4:fd:fc:9b:91:e4:
                    a4:aa:97:bd:96:ab:e9:cb:a6:2a:54:a3:06:67:ca:
                    43:8e:f6:82:02:e8:a1:2f:17:ef:8a:cc:c7:ba:d6:
                    24:f5:d5:70:7a:67:c2:39:a5:9d:5e:0f:b1:8f:2c:
                    d1:be:2a:b4:46:3d:fa:90:09:fb:86:ac:d6:c7:ab:
                    0d:6e:ef:9b:97:88:c4:46:6e:2d:c8:ab:7d:d9:87:
                    99:3b:ec:fa:e0:09:6e:62:5a:04:22:8e:33:b4:87:
                    b3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.120.0/22
                IPv6:
                  2804:5f38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269084

    Signature Algorithm: sha256WithRSAEncryption
         5e:f5:2f:2d:06:ad:fd:ac:e1:f2:ec:25:86:2a:79:55:97:c5:
         6e:6d:b7:e9:e3:41:9e:73:29:2b:27:5f:8f:bc:25:a3:e1:fd:
         a0:cd:0f:3c:bf:4f:7a:34:2a:67:cb:08:a3:58:68:23:a6:57:
         11:3d:a4:11:ff:46:30:02:c3:3e:e2:0e:7a:c4:71:21:09:d5:
         35:18:6e:a8:ca:e6:b7:68:e6:79:44:23:16:71:35:52:8a:df:
         b0:ab:4d:7c:be:92:d8:30:27:50:93:6b:63:89:79:5f:7f:78:
         06:38:14:af:89:d7:a5:56:03:0a:92:3c:50:81:5f:45:f9:ad:
         94:7c:3a:c9:d9:67:97:e7:e7:42:d3:a8:f8:cc:fe:2e:e2:e6:
         c7:ee:a7:8a:8e:e8:e5:a9:da:7c:0e:d4:9d:a7:bb:a7:cf:18:
         82:23:a5:10:69:56:79:d6:e4:0c:93:77:ea:0b:ee:a5:0f:bf:
         ec:d7:77:88:65:95:86:0d:42:1f:cd:29:21:90:36:56:48:3b:
         f9:1a:1c:51:83:99:e9:ad:be:0b:5d:7e:bf:80:a4:2f:53:c6:
         6f:b9:25:bd:b8:80:d0:49:e7:0d:9c:51:f8:64:f3:f4:a7:ae:
         94:ed:dd:98:07:02:af:31:ea:a5:38:9f:b7:83:36:ac:48:21:
         67:7d:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org