Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FE7BFA370BC6B0D54890DE9D77F0B3BC15BE9E59.cer
File:                     FE7BFA370BC6B0D54890DE9D77F0B3BC15BE9E59.cer (raw, json)
Hash identifier:          1+5i29KWhjvnxjE8tCrdxHwJNtVn+2mSZ7PFAh4Z8iQ=
Subject key identifier:   FE:7B:FA:37:0B:C6:B0:D5:48:90:DE:9D:77:F0:B3:BC:15:BE:9E:59
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0B57D4E04175A6174BB1E2C609FC855A78849D34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/FE7BFA370BC6B0D54890DE9D77F0B3BC15BE9E59.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Jan 2022 22:30:45 +0000
Certificate not after:    Mon 09 Jan 2023 22:35:45 +0000
Subordinate resources:    AS: 264011
                          IP: 143.0.136.0/22
                          IP: 2804:2960::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:57:d4:e0:41:75:a6:17:4b:b1:e2:c6:09:fc:85:5a:78:84:9d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 10 22:30:45 2022 GMT
            Not After : Jan  9 22:35:45 2023 GMT
        Subject: CN=FE7BFA370BC6B0D54890DE9D77F0B3BC15BE9E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:c2:f6:13:f5:68:fa:3f:5e:a0:bd:74:eb:
                    df:8b:68:43:3c:14:0b:47:c3:91:fe:b3:00:52:e2:
                    5e:8b:ee:77:a0:6f:42:5c:ba:c8:fe:fd:2f:d6:99:
                    81:80:40:c4:8a:3e:ce:82:3d:db:86:6d:0d:84:5c:
                    57:62:c7:8f:8d:f7:11:d7:1a:9f:be:3e:a5:9b:32:
                    48:c5:1d:96:fd:79:30:06:a0:a5:ca:0a:3b:ec:c7:
                    f0:78:23:f5:63:3e:82:06:f1:df:33:b3:5c:92:0e:
                    4e:1d:5a:c4:d1:4c:15:e5:73:b1:b0:cd:a5:fb:7b:
                    d5:f5:fb:a7:e1:6a:7d:fc:4e:d7:01:eb:68:f3:c2:
                    46:ca:34:0f:90:63:cc:e3:f4:8d:3d:41:23:f7:bd:
                    06:88:9d:bd:d8:8c:dd:0b:d0:bf:dc:ce:07:07:6d:
                    3f:f3:14:4e:bd:0e:52:f8:1c:28:76:1d:14:bf:66:
                    32:5f:29:df:51:28:fa:1b:12:e2:64:1a:4e:8a:22:
                    5e:a3:07:82:f2:e9:0d:c9:6b:a8:bc:d2:3c:ed:fe:
                    96:64:1e:8b:5d:08:28:27:d1:ed:e5:c3:aa:0e:f8:
                    87:d8:da:22:f1:76:d7:68:bc:a2:49:5a:b0:9d:2c:
                    e1:be:12:88:56:79:d7:78:16:b1:ac:94:c3:95:58:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:7B:FA:37:0B:C6:B0:D5:48:90:DE:9D:77:F0:B3:BC:15:BE:9E:59
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/FE7BFA370BC6B0D54890DE9D77F0B3BC15BE9E59.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.136.0/22
                IPv6:
                  2804:2960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264011

    Signature Algorithm: sha256WithRSAEncryption
         91:a9:ed:8e:63:0f:d8:b0:a0:2a:06:af:73:57:1d:0d:02:ff:
         60:c9:60:98:a0:88:aa:5a:aa:67:ab:ef:53:f8:28:78:51:91:
         66:15:26:f0:93:af:6d:69:37:bf:8d:59:ab:a5:81:98:ab:a7:
         09:3c:8c:ae:a7:a8:91:1c:48:4b:d6:c3:a8:6f:8e:c5:84:f8:
         10:c2:73:8d:56:14:8b:a8:41:f2:82:84:c2:5b:ca:cd:e6:5d:
         e6:f3:8f:f9:32:cc:d2:3c:82:f2:ce:f2:a5:fa:37:7e:33:0b:
         02:bb:d5:c0:72:23:ea:c8:86:f5:a4:a9:c5:ca:1f:bd:b3:84:
         ad:47:c8:a9:3f:8b:5e:38:34:ee:e4:e3:76:90:de:22:36:f4:
         a1:c6:a7:88:23:4e:dc:0c:a5:80:d9:2e:54:21:95:39:1a:86:
         8c:10:89:6f:5b:dc:b0:80:12:92:90:b3:a2:99:1e:89:fc:6c:
         93:d5:17:90:ef:48:15:05:b8:d9:2a:cd:37:c8:11:ce:f3:c0:
         d2:50:94:15:69:24:03:c4:f6:bb:b4:87:ae:25:98:8f:87:83:
         e6:a7:3f:68:aa:cc:42:1c:25:c1:f5:a0:04:0e:08:dd:6c:b9:
         b3:e5:de:fa:c0:36:ca:f5:7a:c1:33:ab:5a:2d:a3:29:42:5c:
         0c:d2:d7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org