Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23.cer
File:                     FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23.cer (raw, json)
Hash identifier:          RO9rWXctxGWiQtcpTMJ+eXJVFXFVtsdx00XlmIHux2A=
Subject key identifier:   FD:B6:3F:9D:B6:01:8A:8F:08:7A:2B:97:EA:59:E0:B3:19:AA:FB:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E873703FF125C42358EA5AEABCDD3EBA3E7F466
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3zB68RhqGS1z2CY1wnmtyGEYtdpFJR3vCFoWoTnzcN7e/0/FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3zB68RhqGS1z2CY1wnmtyGEYtdpFJR3vCFoWoTnzcN7e/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Nov 2022 13:32:29 +0000
Certificate not after:    Mon 20 Nov 2023 13:37:29 +0000
Subordinate resources:    AS: 267976
                          IP: 45.166.120.0/22
                          IP: 2801:80:2e00::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:87:37:03:ff:12:5c:42:35:8e:a5:ae:ab:cd:d3:eb:a3:e7:f4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 21 13:32:29 2022 GMT
            Not After : Nov 20 13:37:29 2023 GMT
        Subject: CN=FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:74:df:fa:03:24:f5:33:4e:d0:1a:ea:ff:22:
                    4d:35:6d:9c:c5:8a:44:40:ac:15:bf:e6:64:bb:0f:
                    1c:63:79:b2:91:42:d5:be:ad:d1:a3:b6:20:cb:a4:
                    25:67:b9:56:bb:0a:a4:e9:4b:a7:61:9f:ed:c4:e6:
                    f6:df:b0:0e:bd:e4:3c:79:08:71:45:66:4c:3b:ce:
                    65:2b:c8:4f:50:c2:d0:89:e9:0e:48:e1:9c:a2:2b:
                    59:35:ee:da:a2:6b:30:f1:fe:a8:dd:aa:63:36:f9:
                    04:7b:40:99:1c:3a:2f:8f:cb:38:ce:14:3f:ff:b5:
                    ea:24:ce:98:f3:f0:28:37:03:23:3c:72:fb:e7:9a:
                    51:94:ad:32:0e:83:ce:58:f2:1e:07:bd:67:17:c8:
                    49:e9:9f:02:3f:a8:ef:9f:d0:66:2c:33:92:fc:0a:
                    07:fb:f0:ac:ef:10:24:7e:6f:b5:43:85:3f:d6:23:
                    74:11:72:46:00:44:5a:56:58:e6:69:69:1d:b6:6c:
                    a0:b4:14:ab:b9:08:69:29:c3:d0:5a:4b:34:6b:e9:
                    34:b9:6f:ff:93:41:e8:3d:32:d9:8c:5f:29:c9:ff:
                    ec:47:52:ed:b6:f7:43:71:5c:40:5b:3c:9e:83:1d:
                    c1:05:ec:3c:d7:f3:c5:86:22:68:97:8a:f1:97:15:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:B6:3F:9D:B6:01:8A:8F:08:7A:2B:97:EA:59:E0:B3:19:AA:FB:23
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3zB68RhqGS1z2CY1wnmtyGEYtdpFJR3vCFoWoTnzcN7e/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3zB68RhqGS1z2CY1wnmtyGEYtdpFJR3vCFoWoTnzcN7e/0/FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.120.0/22
                IPv6:
                  2801:80:2e00::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267976

    Signature Algorithm: sha256WithRSAEncryption
         27:35:a7:eb:6c:90:42:77:57:20:02:c9:5d:49:9a:34:e0:50:
         86:d8:0a:66:d3:be:e2:21:00:2d:ac:eb:2d:e9:b2:7e:2d:48:
         97:9c:df:0b:33:90:d4:a4:96:0d:fb:88:e6:81:94:4c:12:95:
         a3:7f:ed:86:8b:ee:d2:56:62:45:01:65:c6:55:b7:8a:8d:2e:
         59:96:99:80:8e:84:0c:db:af:b8:ce:7d:57:f0:3a:6a:2b:35:
         09:01:44:81:9f:0c:4a:22:4b:35:81:45:cc:5f:1a:cc:14:bb:
         44:d0:d8:fb:f8:69:96:bb:55:42:a9:b4:a3:7c:e8:5a:8f:5d:
         fd:7b:00:13:b9:e2:3d:ca:d6:31:61:12:17:85:b8:b3:fc:07:
         c0:e1:bd:91:2c:3f:11:8c:d7:4e:dd:18:72:77:7b:cd:87:cf:
         4b:ec:01:68:81:a4:96:1b:9a:79:47:01:2c:c1:ff:fa:57:1b:
         1b:1c:15:ed:cc:66:ea:38:77:a5:da:d1:29:c4:a6:6c:d9:55:
         be:90:b6:82:9f:dc:bd:10:1e:ff:70:f7:ac:e1:93:06:7b:a5:
         04:00:71:6a:7c:dd:d9:06:4c:46:bf:8b:11:8a:bc:e4:a1:01:
         3e:fc:25:88:c9:4a:af:e7:ed:17:77:3f:ad:2e:16:4c:2c:12:
         6d:72:0d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org