Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FDBD40EA6BF7E4B71FF09607FEB4C4053D2FCB80.cer
File:                     FDBD40EA6BF7E4B71FF09607FEB4C4053D2FCB80.cer (raw, json)
Hash identifier:          k3q5t4HiOKO2hANqpRXsNKlvniAzUg/IGzmAOhKs4VE=
Subject key identifier:   FD:BD:40:EA:6B:F7:E4:B7:1F:F0:96:07:FE:B4:C4:05:3D:2F:CB:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       269E75CB46D1EEFF04974E089F1C3F7518B86D92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/FDBD40EA6BF7E4B71FF09607FEB4C4053D2FCB80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 02 Apr 2023 06:22:42 +0000
Certificate not after:    Sun 31 Mar 2024 06:27:42 +0000
Subordinate resources:    AS: 269517
                          IP: 45.188.72.0/22
                          IP: 2804:65d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9e:75:cb:46:d1:ee:ff:04:97:4e:08:9f:1c:3f:75:18:b8:6d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  2 06:22:42 2023 GMT
            Not After : Mar 31 06:27:42 2024 GMT
        Subject: CN=FDBD40EA6BF7E4B71FF09607FEB4C4053D2FCB80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:b7:a2:04:e3:11:8d:9a:32:1d:27:5c:e2:
                    e5:a8:25:ca:e5:f4:f2:cd:9e:5f:20:54:8d:e9:af:
                    8d:20:40:94:80:6c:1c:3c:fe:20:96:9c:ee:41:ef:
                    c0:93:1c:f3:a0:7f:da:6b:0e:89:51:0d:eb:fe:06:
                    a9:7f:77:35:02:21:8e:63:0b:ad:fc:0f:f3:71:69:
                    1b:9f:39:6b:5d:b8:70:ff:7f:7b:fa:a4:aa:50:0e:
                    44:2e:da:d7:aa:97:03:17:ab:97:d4:ee:bb:09:7f:
                    0b:de:8d:28:57:c4:03:c8:be:a5:2e:79:de:ab:08:
                    da:d1:d2:3f:42:b7:d7:64:7c:5a:cb:0a:86:e9:c6:
                    ec:b8:99:d1:42:a4:48:18:b5:ac:1a:b3:45:c5:48:
                    22:35:b2:28:75:2b:10:f6:7f:7d:f1:d1:9d:bc:58:
                    66:1c:c6:77:b4:f6:6d:e4:20:ff:39:69:2c:84:99:
                    9b:16:7b:64:22:da:01:e5:f0:b8:ec:46:0d:01:09:
                    23:9f:5c:55:f5:ff:90:a6:52:79:17:c4:73:a1:b9:
                    18:fd:92:df:37:3a:e0:ce:1e:8e:71:b3:db:25:11:
                    1c:11:5b:a2:29:68:00:93:f4:1c:ad:d2:e1:c5:ce:
                    67:88:42:70:0d:a8:83:be:c5:b5:54:e7:ef:e6:7a:
                    de:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:BD:40:EA:6B:F7:E4:B7:1F:F0:96:07:FE:B4:C4:05:3D:2F:CB:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/FDBD40EA6BF7E4B71FF09607FEB4C4053D2FCB80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.72.0/22
                IPv6:
                  2804:65d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269517

    Signature Algorithm: sha256WithRSAEncryption
         49:00:e2:eb:89:c7:12:33:09:8b:19:9e:f5:f5:df:29:39:cb:
         36:e5:bf:e6:bf:63:8f:c9:4f:70:14:09:00:d7:77:91:4a:52:
         ac:e5:e8:c9:cb:44:5d:59:30:67:8a:d0:91:0d:18:24:ef:6f:
         f2:89:05:6e:ae:ee:a8:41:0f:8b:57:80:94:3f:b5:a4:be:f7:
         0f:11:56:83:b3:89:73:c2:8e:2c:88:93:74:af:41:0a:25:0a:
         21:dd:06:f2:18:a4:3c:97:8b:9f:a8:2d:4b:1e:c9:18:67:5c:
         c5:a0:a8:04:6a:91:b8:7a:1e:5f:6f:bb:8d:05:eb:49:cb:f3:
         5c:a5:54:a6:95:e4:4d:63:ea:35:84:a0:a4:cd:42:9b:18:a4:
         bc:af:25:32:22:59:31:e0:69:65:77:af:66:99:fb:ec:51:05:
         e9:a5:72:5b:00:50:d1:df:7b:2a:3d:ae:b9:a4:71:84:b3:42:
         97:d9:83:d4:7b:0a:01:66:7e:d1:4e:8a:64:1b:36:be:66:16:
         01:59:78:12:b6:a7:09:dd:1b:ed:ef:50:fe:48:b9:8e:c6:ea:
         cc:9e:e5:96:5c:d6:72:46:50:05:79:82:b3:c1:ea:bf:76:56:
         29:b2:27:8f:62:6a:14:12:f0:e7:4c:a7:b2:27:a6:8f:5c:84:
         4f:1f:3f:bd
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUJp51y0bR7v8El04Inxw/dRi4bZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MDIwNjIyNDJaFw0yNDAzMzEwNjI3NDJaMDMxMTAvBgNV
BAMTKEZEQkQ0MEVBNkJGN0U0QjcxRkYwOTYwN0ZFQjRDNDA1M0QyRkNCODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ6LeiBOMRjZoyHSdc4uWoJcrl
9PLNnl8gVI3pr40gQJSAbBw8/iCWnO5B78CTHPOgf9prDolRDev+Bql/dzUCIY5j
C638D/NxaRufOWtduHD/f3v6pKpQDkQu2teqlwMXq5fU7rsJfwvejShXxAPIvqUu
ed6rCNrR0j9Ct9dkfFrLCobpxuy4mdFCpEgYtawas0XFSCI1sih1KxD2f33x0Z28
WGYcxne09m3kIP85aSyEmZsWe2Qi2gHl8LjsRg0BCSOfXFX1/5CmUnkXxHOhuRj9
kt83OuDOHo5xs9slERwRW6IpaACT9Byt0uHFzmeIQnANqIO+xbVU5+/met6dAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9vUDqa/fktx/w
lgf+tMQFPS/LgDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FcExnNm5iZEpndlZoazlwZDF5UnZmVkx5clhzUVRBR3Bu
dU04UDliTW92Yi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FcExnNm5iZEpndlZoazlwZDF5UnZmVkx5clhzUVRBR3Bu
dU04UDliTW92Yi8wL0ZEQkQ0MEVBNkJGN0U0QjcxRkYwOTYwN0ZFQjRDNDA1M0Qy
RkNCODAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi28SDANBAIAAjAHAwUA
KARl1DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHM0wDQYJKoZIhvcNAQELBQAD
ggEBAEkA4uuJxxIzCYsZnvX13yk5yzblv+a/Y4/JT3AUCQDXd5FKUqzl6MnLRF1Z
MGeK0JENGCTvb/KJBW6u7qhBD4tXgJQ/taS+9w8RVoOziXPCjiyIk3SvQQolCiHd
BvIYpDyXi5+oLUseyRhnXMWgqARqkbh6Hl9vu40F60nL81ylVKaV5E1j6jWEoKTN
QpsYpLyvJTIiWTHgaWV3r2aZ++xRBemlclsAUNHfeyo9rrmkcYSzQpfZg9R7CgFm
ftFOimQbNr5mFgFZeBK2pwndG+3vUP5IuY7G6sye5ZZc1nJGUAV5grPB6r92Vimy
J49iahQS8OdMp7Inpo9chE8fP70=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org