Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238.cer
File:                     FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238.cer (raw, json)
Hash identifier:          K5fL4cCZKh65PaPoWoUWyN4HSDw3NuiFyOWHW6mJrWM=
Subject key identifier:   FC:E4:41:2C:7E:BF:FE:9F:9A:F8:F2:3B:D8:51:E8:BD:67:3D:22:38
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       739267185065B760A28E73C1B4AC209D87716802
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0/FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238.mft
caRepository:             rsync://rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Dec 2022 12:37:28 +0000
Certificate not after:    Thu 14 Dec 2023 12:42:28 +0000
Subordinate resources:    AS: 270396
                          IP: 190.89.216.0/22
                          IP: 2804:6b60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:92:67:18:50:65:b7:60:a2:8e:73:c1:b4:ac:20:9d:87:71:68:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 12:37:28 2022 GMT
            Not After : Dec 14 12:42:28 2023 GMT
        Subject: CN=FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:a4:71:c4:9a:d3:8d:e9:d6:93:87:6c:f9:
                    27:00:f4:01:41:87:a5:66:74:c7:d6:da:49:7e:a7:
                    9d:36:4c:99:d6:94:e5:08:f4:9f:a2:0c:52:23:dc:
                    8f:09:9a:6c:b9:8e:b1:9d:1c:93:1a:48:c2:e2:d0:
                    cc:17:2f:02:e3:d3:6f:0a:0e:ee:af:d2:8b:83:8d:
                    04:9a:44:1b:8e:eb:8e:4e:ef:dc:d6:ed:48:30:e3:
                    d4:2f:79:8f:1f:42:78:ef:cd:5d:11:42:c0:a2:82:
                    c5:91:89:1f:54:0e:14:43:57:de:53:74:01:32:43:
                    56:e8:16:db:d3:c0:15:8d:fe:e9:b6:e6:58:c5:5d:
                    ec:e4:69:27:2e:7d:17:08:e6:af:23:76:5b:36:90:
                    85:c1:c0:89:15:e2:55:db:c7:a9:47:e3:c1:3c:9d:
                    1b:02:3a:30:b6:40:fc:f5:a7:52:5c:8b:b9:06:db:
                    e4:94:19:21:4d:31:89:0b:ca:b3:db:80:1d:09:81:
                    9b:d5:a6:b3:ef:88:c4:f3:9d:23:c8:31:26:ce:a7:
                    8e:57:0a:e4:53:d4:21:ae:a1:9a:bf:76:7a:5c:ee:
                    6c:32:6b:79:80:b1:1f:02:65:eb:85:50:15:9d:dd:
                    fe:87:ed:1e:b4:24:a1:02:a6:2b:49:c8:bf:0d:10:
                    48:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:E4:41:2C:7E:BF:FE:9F:9A:F8:F2:3B:D8:51:E8:BD:67:3D:22:38
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0/FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.216.0/22
                IPv6:
                  2804:6b60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270396

    Signature Algorithm: sha256WithRSAEncryption
         a1:4a:50:69:e1:3b:84:d8:b7:07:ae:86:fb:e1:45:a2:12:0d:
         60:49:b9:c5:f2:58:74:e7:3f:50:2c:a2:7d:47:9e:8b:4d:94:
         6c:5d:3d:fa:c6:e5:cb:31:24:0e:6a:b7:b4:9d:67:31:77:90:
         aa:dd:5e:86:41:c1:02:8f:3a:b3:9a:27:ec:14:77:72:04:f2:
         1b:07:b2:59:95:83:df:6e:05:34:8d:59:d5:40:17:2a:e5:75:
         3d:76:bd:b5:d6:6e:96:f6:9f:23:55:0c:da:11:a3:06:21:14:
         53:64:44:29:f7:7d:61:ee:6a:c2:7b:bd:be:37:8d:17:31:9a:
         b3:e3:fd:07:12:88:bb:1b:65:ae:75:56:35:48:5f:eb:03:4e:
         c9:4f:f3:c9:51:da:02:df:27:1f:fb:df:16:6e:f5:a6:ff:65:
         a2:59:2c:23:ca:82:78:c5:c7:6d:42:27:37:e6:2b:40:78:a7:
         8f:bd:6d:1b:0a:b3:16:b9:f2:e2:97:b3:f7:b1:87:d2:2c:a5:
         34:49:04:a4:90:7c:47:6a:70:f1:e9:03:44:0b:a8:ae:06:7c:
         ed:5c:70:eb:15:4c:37:4b:76:5c:9a:1f:99:72:17:55:c8:bf:
         84:6e:d7:93:8d:a5:f8:04:32:b1:e6:50:7a:d5:e4:46:81:e2:
         bf:74:9e:6d
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIUc5JnGFBlt2CijnPBtKwgnYdxaAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEyMTUxMjM3MjhaFw0yMzEyMTQxMjQyMjhaMDMxMTAvBgNV
BAMTKEZDRTQ0MTJDN0VCRkZFOUY5QUY4RjIzQkQ4NTFFOEJENjczRDIyMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbqRxxJrTjenWk4ds+ScA9AFB
h6VmdMfW2kl+p502TJnWlOUI9J+iDFIj3I8Jmmy5jrGdHJMaSMLi0MwXLwLj028K
Du6v0ouDjQSaRBuO645O79zW7Ugw49QveY8fQnjvzV0RQsCigsWRiR9UDhRDV95T
dAEyQ1boFtvTwBWN/um25ljFXezkaScufRcI5q8jdls2kIXBwIkV4lXbx6lH48E8
nRsCOjC2QPz1p1Jci7kG2+SUGSFNMYkLyrPbgB0JgZvVprPviMTznSPIMSbOp45X
CuRT1CGuoZq/dnpc7mwya3mAsR8CZeuFUBWd3f6H7R60JKECpitJyL8NEEglAgMB
AAGjggMYMIIDFDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT85EEsfr/+n5r4
8jvYUei9Zz0iODAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9NanNyZERhbnBxNmQ5SDd0U1JpMTVVNmhYQmRGakxRZ3R3
RjJCY0JGM3hVLzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL01qc3JkRGFucHE2ZDlIN3RTUmkxNVU2aFhCZEZqTFFndHdG
MkJjQkYzeFUvMC9GQ0U0NDEyQzdFQkZGRTlGOUFGOEYyM0JEODUxRThCRDY3M0Qy
MjM4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK+WdgwDQQCAAIwBwMFACgE
a2AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCA8MA0GCSqGSIb3DQEBCwUAA4IB
AQChSlBp4TuE2LcHrob74UWiEg1gSbnF8lh05z9QLKJ9R56LTZRsXT36xuXLMSQO
are0nWcxd5Cq3V6GQcECjzqzmifsFHdyBPIbB7JZlYPfbgU0jVnVQBcq5XU9dr21
1m6W9p8jVQzaEaMGIRRTZEQp931h7mrCe72+N40XMZqz4/0HEoi7G2WudVY1SF/r
A07JT/PJUdoC3ycf+98WbvWm/2WiWSwjyoJ4xcdtQic35itAeKePvW0bCrMWufLi
l7P3sYfSLKU0SQSkkHxHanDx6QNEC6iuBnztXHDrFUw3S3Zcmh+ZchdVyL+EbteT
jaX4BDKx5lB61eRGgeK/dJ5t
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org