Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FDB90968E700E53F0EC25BEB917901830CB29858.cer
File:                     FDB90968E700E53F0EC25BEB917901830CB29858.cer (raw, json)
Hash identifier:          dvJKVch8HHGT/s9/TBnk1DxjiIXLTSEzjUvt6s4/uoM=
Subject key identifier:   FD:B9:09:68:E7:00:E5:3F:0E:C2:5B:EB:91:79:01:83:0C:B2:98:58
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60E54948645D0A7C812F2D6AD12F16971DDF7AFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/FDB90968E700E53F0EC25BEB917901830CB29858.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 19:48:12 +0000
Certificate not after:    Tue 28 May 2024 19:53:12 +0000
Subordinate resources:    AS: 61595
                          IP: 45.165.80.0/22
                          IP: 2804:54c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e5:49:48:64:5d:0a:7c:81:2f:2d:6a:d1:2f:16:97:1d:df:7a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 19:48:12 2023 GMT
            Not After : May 28 19:53:12 2024 GMT
        Subject: CN=FDB90968E700E53F0EC25BEB917901830CB29858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:b6:24:c3:f3:7e:2f:ad:65:e6:bf:f4:2e:
                    50:c7:f2:0e:58:23:36:98:1a:86:4c:75:da:0a:ef:
                    7e:55:8a:17:e5:90:80:4f:af:69:e7:5b:03:1b:80:
                    ad:ab:0a:cb:88:d9:77:69:47:87:3d:aa:2d:fa:79:
                    00:da:0c:70:21:81:ba:d7:5d:1c:08:7c:e4:ee:c2:
                    14:2a:5e:4a:cb:59:66:a7:58:ba:29:ab:88:90:a7:
                    ac:d2:e7:2a:8f:ab:a0:e0:45:7d:78:f1:49:78:ad:
                    d1:52:2f:1f:80:9f:a8:94:b8:f6:0d:0e:8d:58:59:
                    63:f6:66:61:b7:f4:d8:42:26:52:86:31:22:97:51:
                    64:4a:78:bb:e6:33:5e:d5:2f:d0:fe:7c:69:21:4b:
                    ac:ea:5e:35:e0:e3:37:c7:a5:f6:3e:cc:7b:6b:c7:
                    1a:61:99:82:8d:bf:f5:65:ea:24:13:a0:5f:fe:6e:
                    47:ac:83:ec:64:57:50:e2:ce:29:ac:9a:02:39:91:
                    c2:63:01:50:cc:e3:c7:9f:b5:2f:41:04:a5:81:db:
                    d5:a6:08:21:66:43:e1:f9:62:36:88:66:e1:56:4a:
                    c1:96:55:ce:eb:b4:53:f0:6d:12:41:de:62:43:f5:
                    c3:9a:7d:75:df:dc:84:c1:d6:ee:99:02:1e:1a:4f:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:B9:09:68:E7:00:E5:3F:0E:C2:5B:EB:91:79:01:83:0C:B2:98:58
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/FDB90968E700E53F0EC25BEB917901830CB29858.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.80.0/22
                IPv6:
                  2804:54c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61595

    Signature Algorithm: sha256WithRSAEncryption
         8f:0e:00:69:d4:63:08:4a:d5:07:cd:34:98:33:f0:43:cc:64:
         bd:fd:9e:94:68:46:4a:3a:5c:45:30:c9:e2:7c:21:29:79:ba:
         b9:c5:ef:15:fd:3d:04:4b:9b:58:67:03:bf:86:31:13:85:57:
         b8:bc:a7:2a:1a:ce:bc:ef:0c:f2:14:1b:21:b3:e4:08:39:fa:
         50:0e:29:7d:94:3e:9f:cc:80:3b:52:a6:f0:1c:3a:16:9f:1d:
         c7:8f:2f:f8:51:d9:67:10:8b:5c:12:75:19:82:e8:25:35:77:
         ee:a1:60:d0:83:ad:9e:69:46:f4:74:ae:72:14:94:6e:78:4e:
         41:39:c3:86:4a:cf:9f:f6:15:06:ea:2f:fa:a5:cb:69:d4:f9:
         f8:c7:53:cf:0b:ef:d8:00:e3:3e:75:d1:30:8d:52:92:37:c8:
         cd:5f:fc:e0:56:b9:ce:2a:44:f4:34:9e:7b:c8:fd:0c:fc:5c:
         85:37:61:c3:78:89:6a:3d:2d:58:3e:b8:e9:80:ae:b1:e6:14:
         65:a7:9c:b5:5a:dd:ae:60:cc:ee:3c:42:81:8d:de:43:42:4f:
         16:1a:af:a7:88:f1:7c:b9:47:0e:10:ad:0b:64:bc:1a:c4:71:
         24:34:36:22:d4:ba:a0:16:55:45:8d:0e:f5:b2:ef:45:44:14:
         c4:8a:f4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org