Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FCB533D9722570DBB46E5D9BD9255DEA875182FA.cer
File:                     FCB533D9722570DBB46E5D9BD9255DEA875182FA.cer (raw, json)
Hash identifier:          GxvaxhauZCNQ0D2SiEC5WrsLNEfjLNEGh6dBva+JcdI=
Subject key identifier:   FC:B5:33:D9:72:25:70:DB:B4:6E:5D:9B:D9:25:5D:EA:87:51:82:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       50838F20E7456793556A88EB53AF2E91D5F4F2E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/FCB533D9722570DBB46E5D9BD9255DEA875182FA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 15:32:42 +0000
Certificate not after:    Wed 18 Dec 2024 15:37:42 +0000
Subordinate resources:    AS: 268728
                          IP: 45.171.192.0/22
                          IP: 2804:59d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:83:8f:20:e7:45:67:93:55:6a:88:eb:53:af:2e:91:d5:f4:f2:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 15:32:42 2023 GMT
            Not After : Dec 18 15:37:42 2024 GMT
        Subject: CN=FCB533D9722570DBB46E5D9BD9255DEA875182FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:d5:71:59:03:19:d5:99:54:6b:7a:fd:35:
                    53:8c:23:f8:01:ee:f3:52:8d:06:ad:43:2b:6f:36:
                    2a:04:2d:05:fd:c1:0c:3b:24:35:ea:e0:10:15:ac:
                    14:d8:8c:cd:ba:d6:a5:8b:de:64:4e:57:f4:ca:5a:
                    53:17:2c:23:c3:f6:e3:67:9a:61:dc:b6:e4:dd:93:
                    4e:22:83:b7:5e:e4:51:e4:96:0c:6a:25:a5:c5:cd:
                    bf:c5:da:8c:dd:e2:8f:47:cd:af:56:62:20:b1:4d:
                    4e:2d:5a:1c:bf:20:42:29:44:2d:a2:90:73:68:db:
                    3a:3c:78:19:7b:3d:a1:20:00:bb:ee:cb:22:7b:7e:
                    57:57:d8:1b:e4:f7:33:a0:4e:44:90:a2:67:2f:b9:
                    75:90:42:cc:b2:89:e7:05:98:bd:e6:9c:22:20:88:
                    0f:f2:f1:fa:b8:5d:42:f8:3a:bf:94:49:c1:0e:f3:
                    86:f6:a3:4e:2f:08:74:d6:06:60:c9:d8:d6:d9:58:
                    7a:d9:1d:9e:59:60:69:cf:61:d5:54:49:04:14:8f:
                    f9:b9:5f:3a:b3:69:c5:22:fe:d2:a7:b9:e1:f7:b5:
                    c9:79:68:57:5a:62:f8:9b:8b:6d:08:a5:68:a7:a1:
                    15:42:09:c0:99:9a:40:7a:34:aa:c7:3b:50:e8:73:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:B5:33:D9:72:25:70:DB:B4:6E:5D:9B:D9:25:5D:EA:87:51:82:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/FCB533D9722570DBB46E5D9BD9255DEA875182FA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.192.0/22
                IPv6:
                  2804:59d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268728

    Signature Algorithm: sha256WithRSAEncryption
         a5:33:e9:07:89:95:4e:f2:ff:d2:68:ab:ab:5c:24:6b:e4:92:
         bd:27:03:c1:77:13:5a:ce:48:05:e7:5c:03:82:30:6a:90:ab:
         63:39:ca:9f:4b:44:93:2c:ec:05:0a:fd:16:54:ff:b4:00:f3:
         a8:3c:66:e1:11:30:d0:42:62:1c:05:6e:dc:9e:c9:44:cf:7a:
         25:d7:0d:6b:ef:6b:f4:23:ab:e0:b9:4a:ed:ad:44:75:bf:42:
         b2:f4:4d:da:dc:27:f7:43:d4:90:9b:57:0e:fe:84:8e:02:70:
         eb:ea:89:e1:be:fc:2a:f0:f9:9d:3b:cf:91:09:08:40:a8:2a:
         1d:66:94:84:84:70:e2:cb:13:59:73:7e:dc:f8:e6:80:19:a5:
         cc:34:87:15:2e:6c:cb:c1:83:72:2b:21:64:c4:a6:54:1f:d1:
         bd:87:d9:7e:1d:62:b1:90:43:97:d7:85:6e:05:e7:9c:a5:1e:
         55:14:4a:5f:4d:83:06:10:70:5e:3f:80:c8:15:f1:2a:b5:07:
         f4:f5:d4:17:52:e8:70:2f:5b:de:46:4d:da:d6:c6:3c:97:45:
         21:07:6f:db:d6:78:da:5d:b2:cd:5b:8d:81:d9:3c:3e:bb:5c:
         b2:50:17:59:6e:e0:30:98:b9:6f:15:79:0b:e6:2f:46:d0:82:
         fb:94:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org