Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer
File:                     FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer (raw, json)
Hash identifier:          lNOt1sVu89iFQiDtNUZG78I7D5QRRFTVYUx6VtCQN5M=
Subject key identifier:   FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B51427AE8BC9403E3858A8BACE4131778827137
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Mar 2022 14:41:42 +0000
Certificate not after:    Mon 20 Mar 2023 14:46:42 +0000
Subordinate resources:    AS: 271414
                          IP: 181.224.0.0/22
                          IP: 2804:7b28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:51:42:7a:e8:bc:94:03:e3:85:8a:8b:ac:e4:13:17:78:82:71:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 14:41:42 2022 GMT
            Not After : Mar 20 14:46:42 2023 GMT
        Subject: CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d0:a3:18:20:fa:2d:7a:d6:bb:a8:f0:17:b5:
                    8f:d8:e4:61:59:bd:89:a6:d4:0f:61:46:4b:62:32:
                    bd:aa:93:65:97:87:36:f5:ee:e1:43:c6:6a:89:d8:
                    4a:3c:7b:06:0f:26:18:37:0b:86:de:c3:77:4d:1b:
                    bc:d0:1f:7d:a0:ee:c8:36:f7:ac:98:4a:51:81:b4:
                    92:cb:4f:7b:2b:05:0a:f7:cf:97:48:0d:0e:42:b8:
                    91:4c:b6:62:a9:15:83:bf:fd:10:f5:72:99:b8:7e:
                    9b:3d:83:50:30:8a:7e:f2:ae:3b:65:4a:20:2a:42:
                    bc:b7:3f:8e:41:4a:81:70:ea:f7:63:ff:2e:91:5f:
                    75:15:61:03:6a:3b:03:f3:d5:25:df:01:61:ce:2e:
                    45:8f:ae:d4:84:a6:2d:28:97:c1:3e:57:b8:b2:89:
                    20:93:34:aa:dc:21:c3:bc:93:bc:5c:b0:e6:95:87:
                    a1:b4:6a:d1:23:f9:30:ee:8e:2f:1b:49:4b:b4:97:
                    9d:da:58:e8:90:71:7b:4f:f1:b4:61:0c:4f:f1:5d:
                    f0:07:e2:d9:ca:a7:a5:be:9d:f3:a0:98:92:25:33:
                    a7:92:9d:a4:5d:ff:37:31:14:b9:d8:cc:a0:c3:9a:
                    97:e7:f6:4f:85:c2:ed:be:95:c8:aa:e1:89:67:fa:
                    7f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.0.0/22
                IPv6:
                  2804:7b28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271414

    Signature Algorithm: sha256WithRSAEncryption
         54:b0:1c:3a:f0:6b:7e:59:74:08:eb:18:e2:00:17:18:21:cf:
         87:4d:6b:a0:7e:0e:34:de:80:ee:15:94:36:c1:47:d4:01:49:
         e9:b1:cb:8f:05:0a:fd:29:8a:c1:3f:2e:3a:a4:d6:e3:fb:0a:
         78:ce:1a:47:21:d5:c3:0d:c2:87:a4:e6:06:2b:0e:ae:ce:ea:
         40:4e:13:87:bf:e7:2e:ca:4c:75:41:6f:83:0f:b2:18:b0:18:
         18:a1:56:b9:43:bc:39:30:fb:7d:b0:09:e7:dd:c1:95:3c:f8:
         76:f9:63:71:a5:df:4d:9a:c3:6e:9b:89:c9:96:86:eb:91:ab:
         37:3d:e5:c4:64:7c:5a:46:87:3b:14:7d:fa:4a:fb:f1:bf:1c:
         63:5f:2c:1b:fc:99:66:87:5c:ae:d2:e6:4c:c6:13:ce:d5:b8:
         c8:3f:cf:91:fe:bc:51:2e:6d:7e:30:b3:22:6c:5b:90:48:f1:
         36:4a:35:4a:c3:05:b6:46:90:5f:94:b4:03:72:90:1a:99:3d:
         54:d5:41:07:c9:ec:35:8c:85:ce:43:cd:af:f3:06:41:6b:e5:
         e3:00:de:58:50:57:71:6f:54:72:ca:36:13:90:cc:9d:29:58:
         28:d5:5e:23:69:eb:eb:1e:75:39:94:25:71:e8:ea:dc:0d:00:
         29:c4:73:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org