Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer
File:                     FCC7A10CD64B84116220258C164688796EE17437.cer (raw, json)
Hash identifier:          5iKZtbRTC/0aZWl6gYCwhrmBGe2f3rSzc9Wkhe/J2kI=
Subject key identifier:   FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6FEB37580308F8DB37F8495B7CF08A452C49FECE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/FCC7A10CD64B84116220258C164688796EE17437.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 13:42:53 +0000
Certificate not after:    Thu 13 Feb 2025 13:47:53 +0000
Subordinate resources:    AS: 267395
                          IP: 45.233.196.0/22
                          IP: 2804:4cd4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:eb:37:58:03:08:f8:db:37:f8:49:5b:7c:f0:8a:45:2c:49:fe:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 13:42:53 2024 GMT
            Not After : Feb 13 13:47:53 2025 GMT
        Subject: CN=FCC7A10CD64B84116220258C164688796EE17437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:2c:91:0d:50:5d:16:6b:36:2d:27:f2:b5:
                    34:63:25:88:7f:4c:7a:6b:22:30:77:55:af:f3:1f:
                    c1:ad:e7:ef:5b:a3:38:f3:d9:1b:d4:4b:31:e6:e5:
                    c6:4c:17:31:fb:01:02:69:ce:b3:fd:c3:86:12:d1:
                    24:b6:da:82:dc:58:49:46:f4:85:83:57:68:74:d3:
                    35:6b:1b:bf:55:3e:dd:ea:11:5d:56:69:ab:58:f8:
                    b2:8e:7d:a3:b7:46:31:d0:01:a2:58:4b:30:55:fd:
                    ca:00:0d:1a:07:ff:0b:d8:e3:bd:8c:91:92:b1:fb:
                    15:36:a4:ed:67:fd:eb:c7:4a:67:65:77:b0:a5:e0:
                    96:b3:64:5a:b8:d6:10:41:be:81:29:6e:f8:85:d9:
                    9d:94:da:ef:a0:69:05:a4:f4:b3:de:a8:c2:c5:80:
                    25:80:35:31:33:33:b0:24:24:c0:3a:de:e4:45:27:
                    70:b5:cf:b7:2e:89:b3:f8:dc:0e:77:8b:ed:b2:6e:
                    cc:eb:53:58:cc:b9:d6:18:43:e0:50:1b:da:1e:58:
                    8a:69:72:85:7c:e1:2f:c0:95:20:e6:30:4e:f7:9c:
                    67:6f:97:79:a7:cf:32:67:92:60:15:d6:aa:29:29:
                    a8:46:8e:d2:51:a2:9d:21:73:aa:da:34:23:93:25:
                    34:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/FCC7A10CD64B84116220258C164688796EE17437.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.196.0/22
                IPv6:
                  2804:4cd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267395

    Signature Algorithm: sha256WithRSAEncryption
         af:25:cd:d7:87:c1:4f:b9:1f:2f:fb:4b:e6:01:03:04:5e:49:
         bc:6e:8d:cd:78:35:d2:88:26:96:19:ef:1a:1d:0a:b9:4c:a9:
         24:0a:f1:3f:ec:ce:71:d7:fe:f9:e1:2a:b1:57:63:a7:70:bf:
         ac:a3:1c:c7:ce:b0:e4:4f:d8:2b:94:bd:35:1e:6c:eb:04:16:
         ae:af:f8:79:79:1c:1e:9a:45:0f:e6:f3:79:24:d6:6b:7c:1f:
         78:87:f6:76:b3:98:03:9f:a3:df:13:2f:07:96:95:d3:2a:bb:
         ff:6f:08:2e:c9:bc:05:8b:80:c8:39:42:50:5b:0c:dc:32:6f:
         8a:37:ac:95:c1:4a:87:5a:af:82:8d:0a:95:23:dc:39:d7:ef:
         36:e8:93:e2:c7:6c:04:3e:de:09:a1:83:50:0d:22:32:58:2a:
         1b:21:ff:bc:0a:88:42:c5:a9:d6:b0:ba:55:a7:18:3c:3a:5e:
         f2:a2:4a:e9:50:b6:0a:84:e4:57:c5:e7:33:2f:0b:49:71:6a:
         e4:ad:8e:ba:70:7c:a7:0a:92:bf:ec:11:2b:0f:a0:5a:93:14:
         08:af:31:69:e7:58:06:25:94:55:d1:d2:02:1a:ea:98:b8:c4:
         66:d9:78:44:69:55:01:1d:f4:9a:7e:a1:69:66:b2:97:eb:46:
         93:12:5d:e5
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUb+s3WAMI+Ns3+ElbfPCKRSxJ/s4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTUxMzQyNTNaFw0yNTAyMTMxMzQ3NTNaMDMxMTAvBgNV
BAMTKEZDQzdBMTBDRDY0Qjg0MTE2MjIwMjU4QzE2NDY4ODc5NkVFMTc0MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRFyyRDVBdFms2LSfytTRjJYh/
THprIjB3Va/zH8Gt5+9bozjz2RvUSzHm5cZMFzH7AQJpzrP9w4YS0SS22oLcWElG
9IWDV2h00zVrG79VPt3qEV1WaatY+LKOfaO3RjHQAaJYSzBV/coADRoH/wvY472M
kZKx+xU2pO1n/evHSmdld7Cl4JazZFq41hBBvoEpbviF2Z2U2u+gaQWk9LPeqMLF
gCWANTEzM7AkJMA63uRFJ3C1z7cuibP43A53i+2ybszrU1jMudYYQ+BQG9oeWIpp
coV84S/AlSDmME73nGdvl3mnzzJnkmAV1qopKahGjtJRop0hc6raNCOTJTQXAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT8x6EM1kuEEWIg
JYwWRoh5buF0NzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BS2NQZjZBczh5U3BTalc1bmVIemR5QXdpdXJhUVE2WDNr
ZjZ5YTFUTVZqbS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQUtjUGY2QXM4eVNwU2pXNW5lSHpkeUF3aXVyYVFRNlgz
a2Y2eWExVE1Wam0vMC9GQ0M3QTEwQ0Q2NEI4NDExNjIyMDI1OEMxNjQ2ODg3OTZF
RTE3NDM3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt6cQwDQQCAAIwBwMF
ACgETNQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBSDMA0GCSqGSIb3DQEBCwUA
A4IBAQCvJc3Xh8FPuR8v+0vmAQMEXkm8bo3NeDXSiCaWGe8aHQq5TKkkCvE/7M5x
1/754SqxV2OncL+soxzHzrDkT9grlL01HmzrBBaur/h5eRwemkUP5vN5JNZrfB94
h/Z2s5gDn6PfEy8HlpXTKrv/bwguybwFi4DIOUJQWwzcMm+KN6yVwUqHWq+CjQqV
I9w51+826JPix2wEPt4JoYNQDSIyWCobIf+8CohCxanWsLpVpxg8Ol7yokrpULYK
hORXxeczLwtJcWrkrY66cHynCpK/7BErD6BakxQIrzFp51gGJZRV0dICGuqYuMRm
2XhEaVUBHfSafqFpZrKX60aTEl3l
-----END CERTIFICATE-----