Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FD540348EF2925ADF91C06E391E87CE9B816AEF1.cer
File:                     FD540348EF2925ADF91C06E391E87CE9B816AEF1.cer (raw, json)
Hash identifier:          1WOgGr6+8P9iXOO+euwyeNikTs8ojPSFcseMBlS9W4M=
Subject key identifier:   FD:54:03:48:EF:29:25:AD:F9:1C:06:E3:91:E8:7C:E9:B8:16:AE:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       22F761EB0F54F6DA60F8BE9CDBEA86F63196CF8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/FD540348EF2925ADF91C06E391E87CE9B816AEF1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 13:26:34 +0000
Certificate not after:    Thu 11 Jul 2024 13:31:34 +0000
Subordinate resources:    AS: 265122
                          IP: 143.208.92.0/22
                          IP: 2804:2ad8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f7:61:eb:0f:54:f6:da:60:f8:be:9c:db:ea:86:f6:31:96:cf:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 13:26:34 2023 GMT
            Not After : Jul 11 13:31:34 2024 GMT
        Subject: CN=FD540348EF2925ADF91C06E391E87CE9B816AEF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:a9:be:4b:ee:7b:4a:23:31:c6:7a:c3:89:
                    1f:ab:a9:d4:a1:59:40:61:b4:7d:7a:77:0c:7a:23:
                    1b:2c:99:bd:53:72:5e:13:6e:aa:ab:76:e4:ec:de:
                    52:b0:4b:65:ce:8e:6e:d2:9a:3f:09:b9:11:2f:6c:
                    83:ae:f0:54:c7:26:71:81:66:08:40:0d:74:b5:c4:
                    1c:78:68:c5:2c:0a:ae:af:05:05:d1:21:dd:26:10:
                    aa:51:41:51:15:ac:f6:0e:5a:90:e0:cd:9d:ac:08:
                    47:25:b9:6f:a3:b0:a0:33:3a:99:b4:99:51:dc:7f:
                    be:eb:da:50:aa:d1:1e:ab:f6:2f:d9:56:6b:30:da:
                    86:5d:31:af:8a:2f:58:00:3c:7e:8d:93:b8:9d:f9:
                    2d:c0:19:81:98:3e:e2:49:5d:4b:66:5b:51:7a:41:
                    a7:b5:c0:40:00:b0:11:9a:2a:ec:a6:1e:9a:97:6a:
                    07:80:99:42:85:e2:31:b5:20:65:24:32:bb:0d:08:
                    25:17:d4:5a:3e:16:e6:8e:8d:bf:f8:6b:ac:2d:a1:
                    9a:63:f6:66:5e:f5:77:5a:7d:08:42:71:e6:93:68:
                    1f:c3:51:76:ba:b8:cf:04:d0:64:da:48:13:ec:e4:
                    0c:10:77:5d:7b:c9:5e:15:10:ad:77:93:8b:ee:a3:
                    8d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:54:03:48:EF:29:25:AD:F9:1C:06:E3:91:E8:7C:E9:B8:16:AE:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/FD540348EF2925ADF91C06E391E87CE9B816AEF1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.92.0/22
                IPv6:
                  2804:2ad8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265122

    Signature Algorithm: sha256WithRSAEncryption
         53:ff:00:3c:0e:a6:3a:8b:ff:6f:aa:78:3e:c5:5f:5b:67:9c:
         c5:40:f4:be:dc:28:f8:e4:f5:fe:be:26:f6:51:78:9e:5f:61:
         12:46:9c:7a:78:9c:3f:b6:52:ed:8d:21:a6:f2:95:f3:23:46:
         80:90:7d:ad:81:81:f5:b5:42:00:e4:01:4a:cd:50:1e:d3:c9:
         ff:16:11:a6:35:bb:bb:0f:12:c1:d4:4e:3a:91:91:18:82:91:
         72:66:56:60:5e:a0:6c:fd:eb:c7:5b:d5:06:7a:b9:ac:3f:c2:
         c8:93:d8:74:5e:5c:8c:64:ca:17:cf:9f:78:88:ad:5b:77:1a:
         8b:8c:00:8c:d7:e5:e9:de:02:ce:54:a0:0b:43:d4:e8:1e:6c:
         01:aa:e8:2a:33:7f:da:54:6a:7e:b1:3d:71:e6:ed:b9:9d:02:
         ae:38:41:dd:96:1c:e6:9a:c2:7d:1f:7a:34:99:05:4f:05:52:
         98:22:63:35:b6:61:9d:b5:f0:6a:f3:15:73:c7:5f:c0:46:93:
         b7:c0:3d:1f:24:4b:c1:7e:4d:66:c1:da:98:40:41:b5:3d:59:
         a5:92:d9:e1:ca:cd:61:11:ca:0b:37:d6:59:ea:4d:53:19:71:
         19:43:61:ca:1b:38:5c:8a:69:e7:d4:2e:75:02:2e:37:83:2e:
         f1:fd:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org