Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FCFD3885C947F8D2AB55FA246892D37D185E881F.cer
File:                     FCFD3885C947F8D2AB55FA246892D37D185E881F.cer (raw, json)
Hash identifier:          W28b4Nphxno3awMZbafu6wts7b2KxdiZqkeifEbVPeM=
Subject key identifier:   FC:FD:38:85:C9:47:F8:D2:AB:55:FA:24:68:92:D3:7D:18:5E:88:1F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       208EDAEFEED2586A6E831C343F692CD7391ADE03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/FCFD3885C947F8D2AB55FA246892D37D185E881F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 Jan 2024 15:29:19 +0000
Certificate not after:    Sun 26 Jan 2025 15:34:19 +0000
Subordinate resources:    AS: 267246
                          IP: 45.230.208.0/22
                          IP: 2804:4a88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8e:da:ef:ee:d2:58:6a:6e:83:1c:34:3f:69:2c:d7:39:1a:de:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 28 15:29:19 2024 GMT
            Not After : Jan 26 15:34:19 2025 GMT
        Subject: CN=FCFD3885C947F8D2AB55FA246892D37D185E881F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:32:aa:c4:f3:c2:ec:f7:24:e7:56:b5:8c:7a:
                    49:32:e8:7b:b5:e3:9d:aa:69:7a:02:24:c6:6e:20:
                    c4:be:44:71:aa:74:89:dd:1c:b9:a7:dd:03:41:35:
                    62:3e:f2:d2:f0:09:c8:54:cf:4c:a6:1e:ff:a8:2f:
                    6f:6b:46:77:65:6f:dc:f9:09:db:35:3c:77:7f:d3:
                    db:2b:ac:90:9d:93:27:ed:4c:54:ab:5c:d8:5e:96:
                    f4:90:2c:1e:72:ff:ad:9b:26:c1:2a:53:5b:4c:22:
                    5e:5f:b3:0b:3f:19:94:f6:eb:61:bd:8b:ba:d0:9f:
                    88:0b:bf:a9:29:4e:50:84:38:c1:c2:3f:52:54:7a:
                    bf:86:7c:61:97:8a:f9:ed:23:dd:38:02:58:a8:1c:
                    2e:68:ea:1a:0f:fe:44:f6:38:71:5f:c3:58:12:6c:
                    05:d4:32:9a:60:bd:a7:86:23:fd:b6:6c:6c:33:a1:
                    9b:27:fc:5c:6f:e1:27:e0:70:a2:8a:49:15:67:8b:
                    35:71:84:ae:ae:b0:aa:66:af:e1:58:b9:69:c1:5f:
                    55:72:0c:58:89:09:0d:c4:a9:91:08:11:9e:3f:4b:
                    b6:ef:74:65:22:25:11:01:9a:bf:b9:c9:c2:75:cc:
                    92:41:f4:af:e2:79:a4:63:be:b4:ce:e7:02:43:b4:
                    e4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:FD:38:85:C9:47:F8:D2:AB:55:FA:24:68:92:D3:7D:18:5E:88:1F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/FCFD3885C947F8D2AB55FA246892D37D185E881F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.208.0/22
                IPv6:
                  2804:4a88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267246

    Signature Algorithm: sha256WithRSAEncryption
         94:55:90:dd:67:d7:a0:36:7d:6f:e0:43:53:37:d3:5a:f3:de:
         59:d1:b1:ee:b1:1a:8c:41:5a:56:d7:6f:95:1a:14:fb:58:b9:
         de:0f:66:9c:04:6d:2a:05:ab:14:16:67:c7:ac:cd:9f:33:27:
         77:84:c5:67:63:b2:fb:a8:2e:49:a2:7d:da:d2:38:a5:47:84:
         ad:68:c0:63:47:6e:ba:9a:32:c0:e2:2f:d9:f5:49:72:55:e0:
         a0:ba:35:41:c1:d5:54:cc:51:2d:9a:f7:45:e3:16:bb:95:96:
         99:30:9a:f8:b5:75:75:a1:97:0e:a1:1c:15:2a:37:cc:43:d2:
         d9:99:c4:f4:06:73:17:78:1e:4f:dd:bf:e0:9c:40:17:b6:2e:
         29:4f:77:28:4f:00:d6:27:ee:7a:65:5f:93:24:3a:1b:5f:5b:
         fe:d4:ec:db:af:ae:15:86:d8:c3:43:1d:8b:83:3a:be:f3:c0:
         f8:36:8b:05:80:d7:83:96:fa:e2:3d:de:eb:a2:60:3e:84:e0:
         19:02:bf:f6:40:9d:b0:29:61:1f:6f:54:f4:13:d3:87:90:82:
         f1:0a:b2:52:55:52:c6:aa:bc:66:ae:38:85:42:03:75:49:cd:
         a6:99:3a:66:d2:9e:db:be:aa:3a:cd:54:63:05:bb:ba:86:a4:
         34:d1:c5:9d
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUII7a7+7SWGpugxw0P2ks1zka3gMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMjgxNTI5MTlaFw0yNTAxMjYxNTM0MTlaMDMxMTAvBgNV
BAMTKEZDRkQzODg1Qzk0N0Y4RDJBQjU1RkEyNDY4OTJEMzdEMTg1RTg4MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMqrE88Ls9yTnVrWMekky6Hu1
452qaXoCJMZuIMS+RHGqdIndHLmn3QNBNWI+8tLwCchUz0ymHv+oL29rRndlb9z5
Cds1PHd/09srrJCdkyftTFSrXNhelvSQLB5y/62bJsEqU1tMIl5fsws/GZT262G9
i7rQn4gLv6kpTlCEOMHCP1JUer+GfGGXivntI904AlioHC5o6hoP/kT2OHFfw1gS
bAXUMppgvaeGI/22bGwzoZsn/Fxv4SfgcKKKSRVnizVxhK6usKpmr+FYuWnBX1Vy
DFiJCQ3EqZEIEZ4/S7bvdGUiJREBmr+5ycJ1zJJB9K/ieaRjvrTO5wJDtOSfAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT8/TiFyUf40qtV
+iRoktN9GF6IHzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KM1Z1NnFxN3pGYWdVMjJ5c210dUpCV3hUQTNOQk1vYzFl
OHF3Q2VZRXJvby8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSjNWdTZxcTd6RmFnVTIyeXNtdHVKQld4VEEzTkJNb2Mx
ZThxd0NlWUVyb28vMC9GQ0ZEMzg4NUM5NDdGOEQyQUI1NUZBMjQ2ODkyRDM3RDE4
NUU4ODFGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt5tAwDQQCAAIwBwMF
ACgESogwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBPuMA0GCSqGSIb3DQEBCwUA
A4IBAQCUVZDdZ9egNn1v4ENTN9Na895Z0bHusRqMQVpW12+VGhT7WLneD2acBG0q
BasUFmfHrM2fMyd3hMVnY7L7qC5Jon3a0jilR4StaMBjR266mjLA4i/Z9UlyVeCg
ujVBwdVUzFEtmvdF4xa7lZaZMJr4tXV1oZcOoRwVKjfMQ9LZmcT0BnMXeB5P3b/g
nEAXti4pT3coTwDWJ+56ZV+TJDobX1v+1Ozbr64VhtjDQx2Lgzq+88D4NosFgNeD
lvriPd7romA+hOAZAr/2QJ2wKWEfb1T0E9OHkILxCrJSVVLGqrxmrjiFQgN1Sc2m
mTpm0p7bvqo6zVRjBbu6hqQ00cWd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org