Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FD37B766327DF4FE4A88955D9B3DD44F6494A216.cer
File:                     FD37B766327DF4FE4A88955D9B3DD44F6494A216.cer (raw, json)
Hash identifier:          z2PxeQZ4mry1hEwUlhNE9/jo8Iu8ebm4Hh0n2R4xhd0=
Subject key identifier:   FD:37:B7:66:32:7D:F4:FE:4A:88:95:5D:9B:3D:D4:4F:64:94:A2:16
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E4E7A4EF860B45E4CC4A90F53EA8078B9F974B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/FD37B766327DF4FE4A88955D9B3DD44F6494A216.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Nov 2023 04:43:35 +0000
Certificate not after:    Wed 06 Nov 2024 04:48:35 +0000
Subordinate resources:    AS: 271410
                          IP: 131.196.28.0/22
                          IP: 2804:7b18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4e:7a:4e:f8:60:b4:5e:4c:c4:a9:0f:53:ea:80:78:b9:f9:74:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  8 04:43:35 2023 GMT
            Not After : Nov  6 04:48:35 2024 GMT
        Subject: CN=FD37B766327DF4FE4A88955D9B3DD44F6494A216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:33:0a:a6:9a:10:0a:58:a6:5e:89:0e:f1:99:
                    51:00:f3:05:a0:7a:9d:3f:ec:16:79:f5:a5:39:6c:
                    63:79:ef:f0:1c:27:4f:cd:b3:8c:59:65:ab:23:a7:
                    95:24:43:21:61:4f:9d:62:b1:21:aa:18:39:e7:e3:
                    9e:e1:76:ea:d4:f3:ae:c2:dd:7e:a8:7e:9b:7b:5a:
                    42:f9:40:ce:8e:45:f1:12:3d:86:a7:84:1c:d9:02:
                    9b:24:0d:89:78:7f:fb:67:01:b3:27:0a:0a:6b:76:
                    71:02:6c:c1:17:9f:13:13:fe:22:53:6c:c6:23:ad:
                    11:80:c4:e6:f1:54:e1:e1:f7:1c:4a:9b:75:13:40:
                    33:02:5b:e3:88:38:ec:d7:52:04:1a:de:b3:86:8b:
                    53:cb:96:04:30:90:9b:d2:d0:97:f9:fe:23:7b:ae:
                    1f:69:bb:7e:73:52:27:84:0c:a6:8f:35:e6:d4:44:
                    00:a2:f9:b0:a9:ad:1c:48:88:f7:71:46:75:df:90:
                    74:ab:26:66:2a:66:65:28:cd:ea:23:98:bf:ee:e4:
                    87:fb:0b:f3:c9:98:2a:ce:71:4a:d0:68:8f:9d:5f:
                    98:41:89:a5:b5:d5:19:a1:ad:bc:c9:db:ab:2a:99:
                    55:88:c3:a2:92:09:61:52:42:cf:48:9c:bd:e0:31:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:37:B7:66:32:7D:F4:FE:4A:88:95:5D:9B:3D:D4:4F:64:94:A2:16
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/FD37B766327DF4FE4A88955D9B3DD44F6494A216.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.28.0/22
                IPv6:
                  2804:7b18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271410

    Signature Algorithm: sha256WithRSAEncryption
         5d:d4:e3:f1:c7:c5:38:27:89:5b:c9:4a:56:59:83:82:ec:e7:
         bc:c8:be:3c:50:74:bc:97:a6:8e:8b:be:8b:a3:f1:a4:1a:29:
         42:57:29:8b:00:66:e9:93:84:48:1f:e5:5f:fb:a1:dc:f7:bd:
         36:42:8f:1d:af:b3:a4:e9:5d:f8:1a:75:91:c4:19:c3:5e:72:
         15:18:9a:e7:3c:5f:ef:35:1b:b4:af:91:b2:07:f0:92:ea:6e:
         1a:28:15:82:5a:ee:f0:a5:be:fe:4c:4d:87:a3:cb:1a:ce:78:
         1e:65:5c:19:70:41:26:78:d2:f6:d1:fc:8f:e5:f0:ec:b3:1d:
         5d:c2:c8:a9:5d:ef:e5:ce:5c:27:bf:c1:85:ff:69:32:a7:ca:
         2f:9a:73:22:62:ef:50:a3:a9:f4:69:59:02:a9:fa:61:15:c3:
         3a:f2:17:3d:5c:05:57:cb:fb:f2:c7:ef:2b:e2:a4:b2:07:33:
         34:96:fa:c3:21:d6:c7:28:60:8e:2a:81:ed:a1:02:a7:a6:4c:
         be:5b:33:6e:32:bf:5e:d5:9a:bd:31:52:18:bc:8a:6c:63:e5:
         f5:0a:3c:3b:67:f7:4b:9a:5c:6a:3f:ca:2d:ab:4c:4b:2c:bc:
         0e:63:4c:72:4d:5e:eb:7e:69:a9:2d:1b:7f:11:49:66:b3:97:
         dc:43:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org