Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FD05AACA7E76430DC04752F1F19211882E529A78.cer
File:                     FD05AACA7E76430DC04752F1F19211882E529A78.cer (raw, json)
Hash identifier:          2VM9ZCBhc5z7Uy9cmFRaVJ1rebB4bYOYD0LOW8wSDyk=
Subject key identifier:   FD:05:AA:CA:7E:76:43:0D:C0:47:52:F1:F1:92:11:88:2E:52:9A:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6AFA56EE0BF35FAD6B030D2175E3C5EC8CA61CB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/FD05AACA7E76430DC04752F1F19211882E529A78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Feb 2023 11:38:52 +0000
Certificate not after:    Sat 03 Feb 2024 11:43:52 +0000
Subordinate resources:    AS: 264359
                          IP: 131.161.24.0/22
                          IP: 168.0.192.0/22
                          IP: 2804:1d4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fa:56:ee:0b:f3:5f:ad:6b:03:0d:21:75:e3:c5:ec:8c:a6:1c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  4 11:38:52 2023 GMT
            Not After : Feb  3 11:43:52 2024 GMT
        Subject: CN=FD05AACA7E76430DC04752F1F19211882E529A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:84:27:95:02:dd:b2:39:bd:33:69:e5:25:
                    98:6c:06:93:9c:31:f4:fe:f9:ab:6a:ca:b0:ed:5b:
                    5c:2b:42:d6:15:fc:10:68:cb:72:31:03:f4:2d:0f:
                    00:d4:7e:2b:6f:b0:57:d5:1c:df:64:a6:42:07:f4:
                    4f:cf:17:bf:23:85:d0:5a:34:43:09:9e:a0:55:28:
                    a6:85:79:2b:4b:2f:62:89:54:a6:2f:e9:71:96:99:
                    d8:dc:9f:b7:af:0f:b3:30:3a:9c:84:1e:bf:cd:e0:
                    13:d1:cb:ef:7c:65:14:da:d0:12:cb:9e:73:7f:74:
                    dc:fb:13:f6:0e:b1:42:b0:bf:fc:77:7d:1f:77:0a:
                    f3:91:ab:c4:ff:92:19:e6:1c:09:67:51:cd:5b:c7:
                    07:8e:63:80:79:c0:e3:86:10:a3:be:2e:de:bd:b1:
                    cb:34:43:b2:e5:6e:8d:4f:c0:ba:e8:4f:ce:af:14:
                    94:32:36:74:ee:60:10:ec:0b:13:88:f8:5f:f2:83:
                    1e:24:49:11:a1:7f:d7:e8:4a:98:89:ba:1f:07:0c:
                    10:bc:78:df:72:dc:6f:e9:85:43:2b:5b:69:51:ad:
                    c3:1f:50:87:60:d1:3c:29:f1:93:84:46:8b:0f:ea:
                    c3:ef:2c:c1:ec:ad:57:7d:c2:d4:9a:eb:8d:3d:99:
                    2b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:05:AA:CA:7E:76:43:0D:C0:47:52:F1:F1:92:11:88:2E:52:9A:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/FD05AACA7E76430DC04752F1F19211882E529A78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.24.0/22
                  168.0.192.0/22
                IPv6:
                  2804:1d4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264359

    Signature Algorithm: sha256WithRSAEncryption
         79:b7:2b:de:fc:33:16:81:69:18:58:71:c3:8e:79:c6:3c:5c:
         e7:44:e7:63:bf:b9:d7:89:ac:53:0a:9d:bf:d3:cd:fc:b2:39:
         7a:ec:d5:34:d6:41:42:fc:3e:c0:b0:42:a9:ae:e5:d7:a0:43:
         06:85:fb:01:ec:67:78:17:50:f4:e6:e8:95:43:16:0e:f2:10:
         87:c8:90:d3:7f:0e:33:ff:71:af:8b:14:fd:e0:55:f9:02:fd:
         12:2f:e9:31:9e:ed:0e:ea:23:6e:c8:dd:4e:1f:83:14:77:a7:
         4e:a3:28:50:e9:97:66:c3:97:4a:5a:07:4d:4a:30:ad:57:dc:
         ee:be:ae:00:9e:03:9a:c2:c1:8e:0c:07:1e:48:55:04:8c:69:
         a0:e7:3f:c1:f6:1a:d1:d5:d7:df:42:5b:03:a1:aa:85:52:24:
         04:fe:a7:46:be:e2:1b:1b:a8:26:18:eb:79:7e:e9:07:76:25:
         da:cc:46:40:71:e5:ac:4f:22:29:79:2d:4f:41:b8:77:24:83:
         53:e7:51:50:10:95:ac:a0:5d:a0:05:0b:d0:da:f4:f2:77:e0:
         e3:b7:c1:cd:9c:7d:7a:ab:4d:42:20:b1:f1:32:4e:9c:db:99:
         36:ef:eb:f8:45:59:0b:72:3b:26:c5:39:c8:6c:98:fa:d9:00:
         a0:d6:6b:65
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUavpW7gvzX61rAw0hdePF7IymHLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMDQxMTM4NTJaFw0yNDAyMDMxMTQzNTJaMDMxMTAvBgNV
BAMTKEZEMDVBQUNBN0U3NjQzMERDMDQ3NTJGMUYxOTIxMTg4MkU1MjlBNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEoYQnlQLdsjm9M2nlJZhsBpOc
MfT++atqyrDtW1wrQtYV/BBoy3IxA/QtDwDUfitvsFfVHN9kpkIH9E/PF78jhdBa
NEMJnqBVKKaFeStLL2KJVKYv6XGWmdjcn7evD7MwOpyEHr/N4BPRy+98ZRTa0BLL
nnN/dNz7E/YOsUKwv/x3fR93CvORq8T/khnmHAlnUc1bxweOY4B5wOOGEKO+Lt69
scs0Q7Llbo1PwLroT86vFJQyNnTuYBDsCxOI+F/ygx4kSRGhf9foSpiJuh8HDBC8
eN9y3G/phUMrW2lRrcMfUIdg0Twp8ZOERosP6sPvLMHsrVd9wtSa6409mSuBAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9BarKfnZDDcBH
UvHxkhGILlKaeDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DRG1YMTVCeGJaejI0R243VW9OQnlyZ1pSd2RxcUxqTjRx
TVVzNGNOc2dQYS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DRG1YMTVCeGJaejI0R243VW9OQnlyZ1pSd2RxcUxqTjRx
TVVzNGNOc2dQYS8wL0ZEMDVBQUNBN0U3NjQzMERDMDQ3NTJGMUYxOTIxMTg4MkU1
MjlBNzgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAoOhGAMEAqgAwDANBAIA
AjAHAwUAKAQdTDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECKcwDQYJKoZIhvcN
AQELBQADggEBAHm3K978MxaBaRhYccOOecY8XOdE52O/udeJrFMKnb/TzfyyOXrs
1TTWQUL8PsCwQqmu5degQwaF+wHsZ3gXUPTm6JVDFg7yEIfIkNN/DjP/ca+LFP3g
VfkC/RIv6TGe7Q7qI27I3U4fgxR3p06jKFDpl2bDl0paB01KMK1X3O6+rgCeA5rC
wY4MBx5IVQSMaaDnP8H2GtHV199CWwOhqoVSJAT+p0a+4hsbqCYY63l+6Qd2JdrM
RkBx5axPIil5LU9BuHckg1PnUVAQlaygXaAFC9Da9PJ34OO3wc2cfXqrTUIgsfEy
TpzbmTbv6/hFWQtyOybFOchsmPrZAKDWa2U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org