Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FCB34B81E3C561DC6345161BD5466F6D7B4A984A.cer
File:                     FCB34B81E3C561DC6345161BD5466F6D7B4A984A.cer (raw, json)
Hash identifier:          /wAmGViImXlS5ZhzlyvG40Hkl1ErCTA4gyk1uk718Gc=
Subject key identifier:   FC:B3:4B:81:E3:C5:61:DC:63:45:16:1B:D5:46:6F:6D:7B:4A:98:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C7D51B9B6D8AA1985C288F03C5D94427D90985F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/0/FCB34B81E3C561DC6345161BD5466F6D7B4A984A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 04:57:46 +0000
Certificate not after:    Wed 25 Dec 2024 05:02:46 +0000
Subordinate resources:    AS: 264444
                          IP: 131.221.224.0/22
                          IP: 168.194.236.0/22
                          IP: 2804:1eb0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7d:51:b9:b6:d8:aa:19:85:c2:88:f0:3c:5d:94:42:7d:90:98:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 04:57:46 2023 GMT
            Not After : Dec 25 05:02:46 2024 GMT
        Subject: CN=FCB34B81E3C561DC6345161BD5466F6D7B4A984A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d4:e9:59:a6:6a:6c:f0:c0:48:a7:96:6f:4a:
                    db:76:1b:47:b5:77:5a:51:5d:3c:9e:44:b0:9e:ce:
                    27:5f:e6:15:88:7d:c3:de:1b:87:7b:a2:b9:95:b0:
                    5f:e7:82:c8:4c:e9:4b:6c:5e:3c:68:44:5c:12:2d:
                    aa:6e:be:cd:43:81:9b:b5:93:ec:d8:a7:c6:12:a8:
                    40:d8:0e:ed:bd:a2:3a:c6:9d:92:ed:67:ef:a8:6c:
                    33:89:b7:d7:16:26:90:13:be:ed:4d:d7:24:9d:44:
                    c3:25:9d:0e:fd:7b:4e:34:2f:a8:0e:2d:1b:40:ae:
                    59:9f:a2:84:a9:ad:0b:2c:a5:3e:b5:6d:18:73:d9:
                    43:0d:2e:0e:e1:ff:8a:68:9e:65:7c:7f:55:af:76:
                    74:e2:eb:c6:58:ed:1f:d5:25:eb:96:7d:e4:b0:1c:
                    85:99:4a:a5:cc:03:94:e6:9e:09:a6:6f:6f:a4:f4:
                    02:d6:06:0b:eb:d2:f9:25:78:0f:c3:df:9a:a5:3a:
                    fb:c6:41:a2:2e:f6:04:aa:64:b6:c6:ec:f7:8b:fb:
                    7e:72:12:43:87:eb:26:d7:ee:ef:12:5d:9f:24:10:
                    77:68:f6:ee:f5:b0:16:35:8f:1d:87:d9:3e:63:6d:
                    48:b0:00:0b:d4:d9:69:b2:23:47:98:b1:84:7b:39:
                    8f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:B3:4B:81:E3:C5:61:DC:63:45:16:1B:D5:46:6F:6D:7B:4A:98:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/0/FCB34B81E3C561DC6345161BD5466F6D7B4A984A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.224.0/22
                  168.194.236.0/22
                IPv6:
                  2804:1eb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264444

    Signature Algorithm: sha256WithRSAEncryption
         18:99:4f:83:9c:31:45:b6:e1:16:7c:4c:40:dc:76:1d:da:8f:
         ef:0a:4b:1e:a9:e4:ac:d3:e6:b4:06:83:40:a3:fe:49:f7:4e:
         7d:ab:48:e0:be:6c:9e:6b:6a:22:da:a9:db:81:f8:83:02:c2:
         b2:4b:a6:69:8a:eb:4f:ca:7c:8d:e6:42:68:27:82:5e:f0:5b:
         56:84:41:65:af:bf:09:a4:bb:6a:98:d7:86:e3:3f:7c:fd:c2:
         1a:0c:64:ea:67:1c:aa:6f:7b:a9:9f:d8:e7:1b:ae:83:95:5b:
         01:c4:63:a1:b9:e7:6d:4d:3d:b8:73:2a:91:20:e9:39:ed:da:
         79:41:df:db:22:3d:8b:c1:81:13:44:b2:5e:eb:ed:cc:60:70:
         41:b0:78:fd:47:2d:99:22:bb:98:26:cd:38:22:55:bc:40:83:
         0b:4f:8d:2c:cc:ec:a9:2c:e3:df:ed:26:22:8b:d8:2f:2d:0c:
         42:24:ff:80:f6:94:70:de:1c:e7:f2:21:fe:8e:54:62:f7:36:
         aa:2d:f5:70:c9:eb:e1:ec:08:d9:23:02:6d:5c:d2:38:52:f2:
         b8:b9:fd:41:50:20:7d:0e:8d:69:b2:e3:0e:75:6e:47:c0:1f:
         83:68:a8:63:eb:1c:0a:55:3c:13:44:3d:7a:72:94:79:04:d8:
         74:cb:98:da
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUHH1RubbYqhmFwojwPF2UQn2QmF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMjcwNDU3NDZaFw0yNDEyMjUwNTAyNDZaMDMxMTAvBgNV
BAMTKEZDQjM0QjgxRTNDNTYxREM2MzQ1MTYxQkQ1NDY2RjZEN0I0QTk4NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo1OlZpmps8MBIp5ZvStt2G0e1
d1pRXTyeRLCezidf5hWIfcPeG4d7ormVsF/ngshM6UtsXjxoRFwSLapuvs1DgZu1
k+zYp8YSqEDYDu29ojrGnZLtZ++obDOJt9cWJpATvu1N1ySdRMMlnQ79e040L6gO
LRtArlmfooSprQsspT61bRhz2UMNLg7h/4ponmV8f1WvdnTi68ZY7R/VJeuWfeSw
HIWZSqXMA5Tmngmmb2+k9ALWBgvr0vkleA/D35qlOvvGQaIu9gSqZLbG7PeL+35y
EkOH6ybX7u8SXZ8kEHdo9u71sBY1jx2H2T5jbUiwAAvU2WmyI0eYsYR7OY+PAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT8s0uB48Vh3GNF
FhvVRm9te0qYSjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IeEU1WnV4cWpKa1d3OWhmNGc5czFSdjI0dzRYNE55cEFE
SjNEcGdvZ0Fxci8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSHhFNVp1eHFqSmtXdzloZjRnOXMxUnYyNHc0WDROeXBB
REozRHBnb2dBcXIvMC9GQ0IzNEI4MUUzQzU2MURDNjM0NTE2MUJENTQ2NkY2RDdC
NEE5ODRBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKD3eADBAKowuwwDQQC
AAIwBwMFACgEHrAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAj8MA0GCSqGSIb3
DQEBCwUAA4IBAQAYmU+DnDFFtuEWfExA3HYd2o/vCkseqeSs0+a0BoNAo/5J9059
q0jgvmyea2oi2qnbgfiDAsKyS6ZpiutPynyN5kJoJ4Je8FtWhEFlr78JpLtqmNeG
4z98/cIaDGTqZxyqb3upn9jnG66DlVsBxGOhuedtTT24cyqRIOk57dp5Qd/bIj2L
wYETRLJe6+3MYHBBsHj9Ry2ZIruYJs04IlW8QIMLT40szOypLOPf7SYii9gvLQxC
JP+A9pRw3hzn8iH+jlRi9zaqLfVwyevh7AjZIwJtXNI4UvK4uf1BUCB9Do1psuMO
dW5HwB+DaKhj6xwKVTwTRD16cpR5BNh0y5ja
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org