Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FD2B57412B07A6460C9540EC3F4E51503B32F212.cer
File:                     FD2B57412B07A6460C9540EC3F4E51503B32F212.cer (raw, json)
Hash identifier:          8ktopO4lp3LCPr9L+MuwRdR20Dcqyfa3hV3ribFO3zI=
Subject key identifier:   FD:2B:57:41:2B:07:A6:46:0C:95:40:EC:3F:4E:51:50:3B:32:F2:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       420828461FCEBFA2133BA88EE4A24A108EDCBBF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/FD2B57412B07A6460C9540EC3F4E51503B32F212.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:32 +0000
Certificate not after:    Tue 21 May 2024 09:25:32 +0000
Subordinate resources:    AS: 263289
                          IP: 168.196.128.0/22
                          IP: 177.190.64.0/21
                          IP: 2804:1680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:08:28:46:1f:ce:bf:a2:13:3b:a8:8e:e4:a2:4a:10:8e:dc:bb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:32 2023 GMT
            Not After : May 21 09:25:32 2024 GMT
        Subject: CN=FD2B57412B07A6460C9540EC3F4E51503B32F212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0b:69:3f:fd:da:fd:24:3c:93:fa:ea:f0:aa:
                    2c:a7:0a:38:b1:b6:8e:87:b0:73:c9:c7:de:64:e5:
                    b0:ce:11:00:5d:bf:39:14:ee:0d:d6:71:a0:b7:4f:
                    14:c3:c7:42:34:32:b2:0a:81:77:cc:ca:2b:e9:ef:
                    55:09:eb:2e:55:c8:63:6a:0e:fb:e6:fb:15:fd:ce:
                    06:95:37:7a:f8:e3:9c:ef:43:e4:9f:a3:51:d9:5b:
                    0a:49:58:f0:2b:2c:af:7b:bc:24:70:68:af:56:9c:
                    0e:8d:fb:63:23:f9:77:af:6b:46:71:9d:48:14:14:
                    8a:f1:ae:f1:35:5e:18:e2:5a:08:fd:c5:9c:4f:35:
                    e8:bc:6f:ea:56:4c:e2:7f:85:21:00:08:78:07:b0:
                    e7:38:95:d2:82:68:b1:fc:b2:64:3c:02:f7:75:92:
                    c1:3f:11:66:a7:52:5b:45:c0:e4:0b:ad:68:ec:41:
                    71:bf:d7:56:f9:77:18:6f:06:8c:6b:ce:5d:5c:4d:
                    da:0e:c7:33:55:8b:70:27:ad:81:7d:a8:25:df:56:
                    ff:12:2c:2a:48:35:e7:5d:eb:ec:12:61:12:35:00:
                    51:2e:28:4a:d1:fc:30:8d:d3:a0:a3:4a:65:96:39:
                    62:c3:33:6a:c6:b2:70:5e:e2:83:95:40:19:65:c3:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:2B:57:41:2B:07:A6:46:0C:95:40:EC:3F:4E:51:50:3B:32:F2:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/FD2B57412B07A6460C9540EC3F4E51503B32F212.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.128.0/22
                  177.190.64.0/21
                IPv6:
                  2804:1680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263289

    Signature Algorithm: sha256WithRSAEncryption
         0b:85:8b:a0:a9:13:1e:f5:85:60:87:65:1f:b0:b5:48:ec:48:
         de:ae:e2:c0:71:b6:fd:a3:6d:99:e5:ba:82:81:11:53:c8:47:
         c2:51:84:f5:9e:6d:42:e8:3b:13:3a:79:47:f2:8d:e8:70:76:
         2b:6d:4c:52:29:9b:85:f6:14:1d:50:92:fe:52:06:fd:cf:c3:
         e1:ab:b9:13:f0:e0:40:21:c9:33:8b:2b:a7:d3:67:84:10:0e:
         70:a5:52:d0:7f:7e:cf:8b:78:c5:e9:ce:49:cb:8f:4b:1a:91:
         72:a1:1c:14:cf:5e:b8:9a:e3:d7:a3:e4:f9:36:49:ed:f6:6a:
         0f:50:8a:ae:18:a8:61:0a:d6:e4:a1:24:06:07:be:5b:af:d9:
         09:40:41:43:d2:7f:43:09:b2:2b:c4:82:9f:74:ee:b9:34:d7:
         65:09:8f:7b:ce:13:c6:3b:0f:1c:c2:22:45:9e:f6:69:81:f6:
         a3:a0:1a:3b:77:17:d3:73:a6:c9:52:74:ab:a1:fb:0e:a0:52:
         0e:d2:d8:a4:cf:c6:04:43:a0:36:66:90:63:ae:85:2f:9e:e9:
         bf:eb:96:7e:11:73:19:3d:0f:78:bc:54:f8:33:3c:db:b9:f1:
         f1:bc:f8:66:91:ce:55:b4:54:25:66:1a:49:d2:2b:fd:90:33:
         33:69:29:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org