Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FCEC7B87350C2E0F48C76843979913F4B5A9709B.cer
File:                     FCEC7B87350C2E0F48C76843979913F4B5A9709B.cer (raw, json)
Hash identifier:          ccxUZsi2LWYlqgAwFUSljsE2TdL6XfXwWmB4QnEMUFs=
Subject key identifier:   FC:EC:7B:87:35:0C:2E:0F:48:C7:68:43:97:99:13:F4:B5:A9:70:9B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       459BA4F1844C023256EE6DF9803E3BCBABFE8339
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/FCEC7B87350C2E0F48C76843979913F4B5A9709B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Mar 2023 21:10:00 +0000
Certificate not after:    Thu 14 Mar 2024 21:15:00 +0000
Subordinate resources:    AS: 273704
                          IP: 2804:8af8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9b:a4:f1:84:4c:02:32:56:ee:6d:f9:80:3e:3b:cb:ab:fe:83:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 21:10:00 2023 GMT
            Not After : Mar 14 21:15:00 2024 GMT
        Subject: CN=FCEC7B87350C2E0F48C76843979913F4B5A9709B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:49:35:9a:72:c4:3f:ab:6d:4d:c6:de:84:0b:
                    97:2c:e5:a4:05:f8:f5:43:92:0d:43:85:4c:1c:b0:
                    45:ff:a3:c3:dd:85:f3:4f:48:ec:de:e9:43:25:fd:
                    99:a4:89:12:bb:a1:a7:02:85:c0:5c:48:5d:bf:0e:
                    a4:7b:33:b7:79:f2:25:ac:96:04:26:59:c4:f2:e4:
                    39:0c:48:19:80:c4:7a:37:1b:27:44:4e:5d:a5:2f:
                    78:95:2c:e8:db:f5:24:9c:09:57:5b:b7:59:09:0e:
                    1e:c5:60:3f:9a:eb:50:63:fa:37:d7:9a:ee:c4:a3:
                    14:85:0c:67:93:9b:3f:30:81:f1:6e:c7:c7:10:86:
                    53:44:4a:21:23:46:e2:00:c8:09:8e:e5:24:8b:00:
                    b7:5d:11:88:b3:e5:89:10:61:86:19:8e:9f:81:72:
                    7a:01:a3:57:19:c9:af:15:01:f7:aa:30:63:8f:f7:
                    e6:fd:e4:b4:e6:91:c1:d9:34:c2:ea:c2:34:6b:0c:
                    b6:86:4f:dd:49:1c:e4:f2:3f:e6:f1:fb:4c:45:70:
                    df:b9:bc:f4:bb:b7:95:73:33:83:84:93:5a:05:de:
                    e2:a1:6e:0a:4b:5c:41:3b:a2:ed:87:08:be:1e:9b:
                    16:92:41:ef:9c:fb:e1:6c:03:c7:62:0b:21:f2:3b:
                    16:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:EC:7B:87:35:0C:2E:0F:48:C7:68:43:97:99:13:F4:B5:A9:70:9B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/FCEC7B87350C2E0F48C76843979913F4B5A9709B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273704

    Signature Algorithm: sha256WithRSAEncryption
         ad:ab:9b:f6:59:2f:8f:7c:99:00:9b:6a:25:39:6f:92:a8:ad:
         ed:c5:d4:32:41:7d:e2:6b:30:e7:e3:6f:d0:70:e8:4d:77:e8:
         86:da:f3:72:c4:ec:21:66:87:c1:e5:4e:13:a0:b6:0d:7d:91:
         b7:a2:aa:47:2d:3c:43:02:fb:95:13:b2:44:2b:89:90:e9:04:
         24:ca:2d:a5:6e:33:f6:37:21:c2:87:63:58:bf:5c:0b:da:cd:
         ec:66:af:5a:58:a1:b1:38:da:45:97:65:bc:bc:0a:4e:de:fe:
         d5:45:cf:9a:51:04:56:69:4a:33:3b:11:aa:8f:e0:54:34:75:
         93:e8:0b:b1:34:f1:54:24:3e:8f:80:0d:c7:01:d0:3b:37:dc:
         a1:2c:a2:cf:07:58:07:3a:a7:6f:cc:96:a2:b5:f0:44:48:22:
         67:dc:2a:ba:49:f2:a3:dc:d7:52:65:fe:02:78:72:78:fb:65:
         33:1e:b9:7f:11:a9:39:37:64:68:93:ea:96:56:81:8a:5c:28:
         7c:67:29:ed:22:55:dd:85:13:14:3c:a9:57:97:c6:36:dc:15:
         b3:06:82:4c:c6:cc:0c:b1:51:8a:c7:d0:12:32:18:93:7c:cf:
         fa:c2:d1:a6:73:1e:6d:ac:fa:10:11:84:c3:d4:08:cb:24:f5:
         90:65:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org