Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.cer
File:                     FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.cer (raw, json)
Hash identifier:          IExlhFoYOc70aq+01MKQ/iB9W22XpKjJ4X2Ng3fcn00=
Subject key identifier:   FD:DB:AF:0C:3C:92:B9:78:7A:52:03:F8:C7:C9:2C:5C:DD:72:CF:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       07A75CDCC288F13BCEABCF37B87443216A5E1201
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 16:32:23 +0000
Certificate not after:    Mon 03 Mar 2025 16:37:23 +0000
Subordinate resources:    AS: 269359
                          IP: 45.184.68.0/22
                          IP: 45.230.84.0/23
                          IP: 168.194.248.0/22
                          IP: 2804:6368::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a7:5c:dc:c2:88:f1:3b:ce:ab:cf:37:b8:74:43:21:6a:5e:12:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 16:32:23 2024 GMT
            Not After : Mar  3 16:37:23 2025 GMT
        Subject: CN=FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4a:c6:db:a6:a7:ba:f9:0f:d8:e4:05:a6:60:
                    4b:e0:c4:80:95:2f:98:9d:ff:c8:c8:69:19:c0:80:
                    d3:5c:19:10:c5:18:31:a3:5a:d9:85:5e:7a:98:6f:
                    b5:34:0a:e0:a3:c4:39:75:c9:e6:8f:d8:21:73:b7:
                    2a:61:bd:c0:02:3a:a9:c5:33:c3:bf:bf:24:56:98:
                    27:e3:a5:a5:d3:87:17:83:77:aa:36:31:ee:f9:c7:
                    22:ed:32:6c:95:47:bc:78:23:b6:8a:e0:c1:8f:bb:
                    c4:53:b7:5f:e6:69:80:79:05:f2:38:55:32:72:9a:
                    c0:5e:91:d6:ed:49:cb:ff:aa:15:9b:0d:97:02:e2:
                    d6:91:4f:68:15:fa:92:d9:28:95:0b:d0:13:fe:f2:
                    03:53:c2:a4:03:99:55:24:f4:b0:51:2a:d7:0a:a3:
                    1d:94:a2:9c:41:1f:27:3c:7c:64:f2:5b:13:8d:b6:
                    87:ba:56:bb:e5:a0:50:cf:fc:10:55:86:a3:21:43:
                    bb:35:e9:42:a9:b3:b7:c1:ce:fc:ac:c7:ec:98:ea:
                    a7:f3:1b:7c:2b:96:20:c0:62:d7:cf:2a:f3:4f:47:
                    ad:52:df:cd:fc:b3:35:6e:58:7c:17:dc:33:7c:91:
                    2f:cb:05:52:d9:fe:e2:17:ca:2c:89:df:2a:c0:5a:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:DB:AF:0C:3C:92:B9:78:7A:52:03:F8:C7:C9:2C:5C:DD:72:CF:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22
                  45.230.84.0/23
                  168.194.248.0/22
                IPv6:
                  2804:6368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269359

    Signature Algorithm: sha256WithRSAEncryption
         79:d0:99:f2:3c:0f:d6:71:e4:ff:e0:09:78:74:1b:24:af:87:
         15:15:2a:0a:e6:a6:9f:9f:9f:1e:8f:0a:b5:40:9e:99:10:87:
         41:d2:b7:e7:30:ac:af:0f:42:ba:56:16:df:fe:d1:8c:77:0d:
         96:ae:3a:06:7b:84:75:a5:94:f4:33:90:7e:f7:c9:5b:17:7c:
         ec:d9:bf:4d:c0:f5:7c:37:de:d0:db:ee:41:27:21:ff:df:48:
         1c:f9:d1:ce:3a:b4:32:09:c7:14:da:72:21:c8:7a:65:fe:3b:
         8b:e9:2d:15:f6:e4:ae:6c:1e:a1:97:03:19:bc:06:fe:fa:ee:
         f0:2f:8b:7e:7c:17:70:16:43:2c:64:f6:6a:d6:ac:af:25:b3:
         04:69:3c:8e:0a:fd:c3:58:e0:d7:d9:d9:2a:99:23:9a:77:4f:
         ca:ad:b2:43:75:ec:f2:69:f4:67:78:e9:fe:b2:ac:0d:e7:72:
         95:a7:e7:2e:fc:3b:d6:2c:8e:ab:4e:38:43:ab:ef:58:2f:9f:
         3f:f9:29:57:e3:d5:17:11:45:82:0f:7e:4c:62:70:e0:fa:c0:
         7c:b2:dd:ae:7e:02:85:26:bc:52:45:9f:c2:50:29:b6:a5:ea:
         61:a6:0c:9a:c1:d0:aa:97:cc:68:5c:cd:d0:fd:65:c6:2e:4b:
         68:f8:29:54
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUB6dc3MKI8TvOq883uHRDIWpeEgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDQxNjMyMjNaFw0yNTAzMDMxNjM3MjNaMDMxMTAvBgNV
BAMTKEZEREJBRjBDM0M5MkI5Nzg3QTUyMDNGOEM3QzkyQzVDREQ3MkNGOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUSsbbpqe6+Q/Y5AWmYEvgxICV
L5id/8jIaRnAgNNcGRDFGDGjWtmFXnqYb7U0CuCjxDl1yeaP2CFztyphvcACOqnF
M8O/vyRWmCfjpaXThxeDd6o2Me75xyLtMmyVR7x4I7aK4MGPu8RTt1/maYB5BfI4
VTJymsBekdbtScv/qhWbDZcC4taRT2gV+pLZKJUL0BP+8gNTwqQDmVUk9LBRKtcK
ox2UopxBHyc8fGTyWxONtoe6VrvloFDP/BBVhqMhQ7s16UKps7fBzvysx+yY6qfz
G3wrliDAYtfPKvNPR61S3838szVuWHwX3DN8kS/LBVLZ/uIXyiyJ3yrAWk2zAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9268MPJK5eHpS
A/jHySxc3XLPmTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GamIzTnJnZnVlWDF5UmRoRjF2dkRQMmlGZFpvUUFzZXNh
cG9zNlAxYWZ2Ti8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRmpiM05yZ2Z1ZVgxeVJkaEYxdnZEUDJpRmRab1FBc2Vz
YXBvczZQMWFmdk4vMC9GRERCQUYwQzNDOTJCOTc4N0E1MjAzRjhDN0M5MkM1Q0RE
NzJDRjk5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAItuEQDBAEt5lQDBAKo
wvgwDQQCAAIwBwMFACgEY2gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBwvMA0G
CSqGSIb3DQEBCwUAA4IBAQB50JnyPA/WceT/4Al4dBskr4cVFSoK5qafn58ejwq1
QJ6ZEIdB0rfnMKyvD0K6Vhbf/tGMdw2WrjoGe4R1pZT0M5B+98lbF3zs2b9NwPV8
N97Q2+5BJyH/30gc+dHOOrQyCccU2nIhyHpl/juL6S0V9uSubB6hlwMZvAb++u7w
L4t+fBdwFkMsZPZq1qyvJbMEaTyOCv3DWODX2dkqmSOad0/KrbJDdezyafRneOn+
sqwN53KVp+cu/DvWLI6rTjhDq+9YL58/+SlX49UXEUWCD35MYnDg+sB8st2ufgKF
JrxSRZ/CUCm2pephpgyawdCql8xoXM3Q/WXGLkto+ClU
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:23 2024 by rpki-client on console-fra.rpki-client.org