Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.cer
File:                     FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.cer (raw, json)
Hash identifier:          f3PjPXBW73EI+4GfUt3vm+7AAXZ1nle3wm5jc2Yo/NY=
Subject key identifier:   FC:97:F7:FF:84:FA:8A:0B:59:91:12:EC:69:6E:0B:99:AC:0C:AC:54
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       409E66773E43C63E272251458FDED63D9167CE28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/0/FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Mar 2024 18:45:09 +0000
Certificate not after:    Mon 24 Mar 2025 18:50:09 +0000
Subordinate resources:    AS: 270264
                          IP: 200.108.180.0/22
                          IP: 2804:6958::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9e:66:77:3e:43:c6:3e:27:22:51:45:8f:de:d6:3d:91:67:ce:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 18:45:09 2024 GMT
            Not After : Mar 24 18:50:09 2025 GMT
        Subject: CN=FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:11:e2:de:80:9e:97:be:04:a2:95:67:03:
                    6f:a4:70:87:27:38:4e:3e:8f:da:31:54:00:cc:9a:
                    7c:5f:8a:5b:f2:73:72:4f:23:d1:f3:6c:2b:51:15:
                    3a:93:43:7d:31:90:5c:a9:46:c4:cd:66:a3:55:db:
                    01:7f:b5:dd:73:46:50:9f:4d:c4:c6:34:14:0e:bc:
                    91:8d:44:50:20:0c:bc:b0:9e:ca:bc:a9:7a:5f:01:
                    2f:a8:91:f2:27:14:f0:fe:be:24:4f:0f:3b:a7:8d:
                    84:b5:4a:7b:d0:9a:f1:ce:c2:ef:82:eb:9d:16:9c:
                    a7:d8:33:d3:38:ba:8f:94:e6:7f:81:c2:ed:87:7f:
                    a4:ef:3e:5b:34:d1:3a:6d:5e:f6:2b:67:b5:75:60:
                    4e:47:e3:57:56:f6:48:52:a2:ec:c6:33:7c:b6:fb:
                    b9:cb:b6:cd:bc:a7:c0:ef:fc:28:f5:1f:f0:c7:75:
                    84:1e:b8:c2:9e:16:29:dd:aa:3b:c4:b6:72:2d:ff:
                    25:bf:cd:d5:14:c2:17:ba:3e:59:ef:25:31:1c:64:
                    02:30:1b:33:2b:97:c6:de:6a:02:cb:8b:cf:5c:a1:
                    5f:6a:97:23:27:e6:fe:81:42:77:5c:7f:2b:72:cc:
                    a1:46:1d:43:21:f5:8c:50:3e:c3:1d:e3:52:e9:74:
                    c8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:97:F7:FF:84:FA:8A:0B:59:91:12:EC:69:6E:0B:99:AC:0C:AC:54
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/0/FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.180.0/22
                IPv6:
                  2804:6958::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270264

    Signature Algorithm: sha256WithRSAEncryption
         5a:e1:e7:7e:f1:58:ae:f1:00:84:f1:8b:a4:c5:27:92:a5:a4:
         05:fb:c3:2a:86:91:47:0e:c1:cc:d9:d3:63:a5:c1:0f:68:ca:
         cf:b9:0c:ba:52:89:bc:b3:4f:0a:83:91:4f:4a:ce:b4:8e:6c:
         97:87:1c:6f:5e:78:3a:94:42:2f:ba:e4:7b:51:62:97:f9:3f:
         0f:ee:07:97:fe:0c:6b:e6:fa:00:9e:c0:2f:df:f2:13:65:77:
         00:e0:d2:f5:c6:b5:b1:ce:62:37:f8:70:8b:d1:20:da:d7:23:
         4a:a9:4c:e4:f7:38:92:ef:28:7c:07:7f:58:77:30:a3:a7:5c:
         00:18:11:5c:1e:d6:10:08:9b:61:0f:3e:15:78:f4:bc:5c:ef:
         d4:0f:01:d9:19:da:e8:ea:87:a9:1b:c3:3e:1b:d7:94:8a:50:
         ca:db:e7:59:0e:8f:da:a2:71:ab:5a:b1:72:69:64:4d:05:0d:
         74:da:ee:0b:72:17:42:af:03:52:a5:ae:e6:30:7a:9b:3e:04:
         c5:73:10:a5:d9:9e:01:d8:94:f9:68:fd:44:b3:62:f7:6a:51:
         24:69:ef:db:65:5e:60:35:0b:33:3f:ea:bf:86:7d:fc:e3:fb:
         d1:be:d1:74:6d:58:e7:9e:83:c4:3c:f6:9a:0a:22:5a:9a:2b:
         2a:65:3f:89
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUQJ5mdz5Dxj4nIlFFj97WPZFnzigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjUxODQ1MDlaFw0yNTAzMjQxODUwMDlaMDMxMTAvBgNV
BAMTKEZDOTdGN0ZGODRGQThBMEI1OTkxMTJFQzY5NkUwQjk5QUMwQ0FDNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0qBHi3oCel74EopVnA2+kcIcn
OE4+j9oxVADMmnxfilvyc3JPI9HzbCtRFTqTQ30xkFypRsTNZqNV2wF/td1zRlCf
TcTGNBQOvJGNRFAgDLywnsq8qXpfAS+okfInFPD+viRPDzunjYS1SnvQmvHOwu+C
650WnKfYM9M4uo+U5n+Bwu2Hf6TvPls00TptXvYrZ7V1YE5H41dW9khSouzGM3y2
+7nLts28p8Dv/Cj1H/DHdYQeuMKeFindqjvEtnIt/yW/zdUUwhe6PlnvJTEcZAIw
GzMrl8beagLLi89coV9qlyMn5v6BQndcfytyzKFGHUMh9YxQPsMd41LpdMjDAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT8l/f/hPqKC1mR
EuxpbguZrAysVDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yb1lNcTlOb044TTg2aVRNOW9QcHZOUUx4UVg4R0V1UExz
TU5LeVVGQmhBZS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yb1lNcTlOb044TTg2aVRNOW9QcHZOUUx4UVg4R0V1UExz
TU5LeVVGQmhBZS8wL0ZDOTdGN0ZGODRGQThBMEI1OTkxMTJFQzY5NkUwQjk5QUMw
Q0FDNTQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAshstDANBAIAAjAHAwUA
KARpWDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEH7gwDQYJKoZIhvcNAQELBQAD
ggEBAFrh537xWK7xAITxi6TFJ5KlpAX7wyqGkUcOwczZ02OlwQ9oys+5DLpSibyz
TwqDkU9KzrSObJeHHG9eeDqUQi+65HtRYpf5Pw/uB5f+DGvm+gCewC/f8hNldwDg
0vXGtbHOYjf4cIvRINrXI0qpTOT3OJLvKHwHf1h3MKOnXAAYEVwe1hAIm2EPPhV4
9Lxc79QPAdkZ2ujqh6kbwz4b15SKUMrb51kOj9qicatasXJpZE0FDXTa7gtyF0Kv
A1KlruYweps+BMVzEKXZngHYlPlo/USzYvdqUSRp79tlXmA1CzM/6r+Gffzj+9G+
0XRtWOeeg8Q89poKIlqaKyplP4k=
-----END CERTIFICATE-----