Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FD874116DB78A7ED2BE150325A5CF55C8B6625FA.cer
File:                     FD874116DB78A7ED2BE150325A5CF55C8B6625FA.cer (raw, json)
Hash identifier:          DYEFiVU6l9BjOf6qJkOWQakfBvvF0gwanLr+Uub1Wvk=
Subject key identifier:   FD:87:41:16:DB:78:A7:ED:2B:E1:50:32:5A:5C:F5:5C:8B:66:25:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       558C7125C1B9B28D034138EB5EE5B0B78EB97B86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/FD874116DB78A7ED2BE150325A5CF55C8B6625FA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Sep 2023 18:39:26 +0000
Certificate not after:    Tue 24 Sep 2024 18:44:26 +0000
Subordinate resources:    AS: 266266
                          IP: 45.65.180.0/22
                          IP: 2804:3d4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8c:71:25:c1:b9:b2:8d:03:41:38:eb:5e:e5:b0:b7:8e:b9:7b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 18:39:26 2023 GMT
            Not After : Sep 24 18:44:26 2024 GMT
        Subject: CN=FD874116DB78A7ED2BE150325A5CF55C8B6625FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:db:f1:a6:aa:69:f4:52:0f:9b:4f:a4:ba:
                    9f:00:d3:c9:37:05:31:63:c2:5d:aa:35:15:93:51:
                    8b:41:71:2b:e7:3d:af:67:43:ef:8a:29:56:f7:0c:
                    10:8d:de:de:83:4b:62:fc:b8:ba:fc:ce:27:a3:3a:
                    a8:51:fb:69:e3:36:b8:bd:b0:14:33:be:59:ea:af:
                    fd:2d:d1:32:c6:b7:0b:0d:52:4a:e3:e9:49:cb:64:
                    33:cd:31:5c:05:20:c8:c8:bb:96:7f:8e:ca:4f:ad:
                    eb:09:ab:d5:9b:7a:99:ea:b4:16:73:90:5b:fd:78:
                    a5:f3:a8:45:53:7c:26:ca:77:01:7c:e8:1e:44:89:
                    9a:65:17:83:8a:62:a1:a5:a4:d0:78:98:b7:d4:5c:
                    e9:f6:46:4d:1d:37:97:86:f7:f2:71:81:fc:7f:58:
                    e8:92:7a:d5:68:c0:60:d0:d6:17:4d:17:20:f8:1a:
                    ea:6b:40:2a:55:7b:f6:7b:1e:61:5a:1b:82:30:c5:
                    e8:22:bc:8e:ed:b6:91:c2:c7:99:d9:a7:5b:17:6b:
                    b3:1d:16:34:f3:bc:74:2a:2a:55:fe:04:b4:68:a8:
                    1b:f6:23:47:54:96:37:24:df:54:73:d6:91:ba:66:
                    bd:8d:72:49:49:90:d1:d6:75:94:e2:a1:89:07:99:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:87:41:16:DB:78:A7:ED:2B:E1:50:32:5A:5C:F5:5C:8B:66:25:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/FD874116DB78A7ED2BE150325A5CF55C8B6625FA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.180.0/22
                IPv6:
                  2804:3d4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266266

    Signature Algorithm: sha256WithRSAEncryption
         6c:56:80:ff:61:ec:06:c7:c3:12:7f:c6:aa:f7:33:4d:89:b9:
         d0:0a:6c:5d:97:cf:23:d8:00:85:63:aa:b7:be:41:5e:a7:4d:
         11:b7:4a:ad:ba:5f:a5:a9:cc:ae:07:41:2f:7d:31:3a:65:9e:
         ff:3b:ce:c4:db:72:c8:7f:32:1f:ff:7e:ce:65:8b:6a:25:e3:
         6c:3b:77:af:98:db:73:45:cb:c6:dc:23:22:a7:d0:95:d9:ca:
         8e:a8:9f:e1:d4:5d:a1:b2:58:93:17:8d:15:71:c9:d1:f0:cc:
         0f:87:ae:43:24:92:35:12:3d:4a:9f:84:ce:bf:25:99:9a:27:
         ff:52:63:07:c7:e3:d8:9d:38:20:c3:f1:fc:62:26:ad:88:a7:
         01:37:8f:10:44:77:d9:e3:70:48:cc:70:24:0f:e8:ad:a8:28:
         34:04:9e:a8:9e:7e:5a:84:1b:7d:cd:8a:15:86:e3:79:4b:12:
         60:b8:bf:77:78:9b:9e:e3:66:63:89:16:8f:b0:57:e6:b3:5c:
         39:58:2b:e7:80:69:23:c6:51:59:4e:ba:ac:b7:1c:3c:a8:01:
         b8:ef:ab:a9:f2:58:7b:74:23:ff:c6:82:79:d3:75:57:4b:b6:
         f1:b5:90:36:b0:67:7b:5c:70:86:00:32:72:b8:78:66:fa:20:
         cb:a6:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org