Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52.cer
File:                     FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52.cer (raw, json)
Hash identifier:          0gC1eWnvCGjiwQwDbRMA2AxLgMPrK00e19n2kwJ2wgo=
Subject key identifier:   FE:93:4E:85:EA:2A:E7:C2:0D:1C:3E:9B:16:BE:3C:45:EB:E6:9B:52
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5F0927B39A8DA452D7B9309BB061C9C485B5EBFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/0/FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Nov 2023 22:19:21 +0000
Certificate not after:    Tue 19 Nov 2024 22:24:21 +0000
Subordinate resources:    AS: 266618
                          IP: 128.201.72.0/22
                          IP: 2804:3ebc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:09:27:b3:9a:8d:a4:52:d7:b9:30:9b:b0:61:c9:c4:85:b5:eb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 21 22:19:21 2023 GMT
            Not After : Nov 19 22:24:21 2024 GMT
        Subject: CN=FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4a:14:45:03:ce:35:17:7a:89:d3:65:79:b6:
                    22:dc:d7:1f:3e:f3:fe:e7:37:95:d1:f2:1d:ea:ae:
                    43:18:22:e3:9f:24:a5:2a:4f:dd:f5:ab:2a:19:23:
                    89:27:ec:f9:93:07:3c:04:93:3b:7d:3f:4b:ee:c1:
                    d5:a2:9d:4f:b5:ff:6a:8a:00:af:e6:f3:de:b8:9f:
                    f4:8c:f2:1a:98:6d:92:ff:fe:2f:9a:21:86:ae:da:
                    f9:53:23:88:aa:0c:f2:6b:02:90:c4:75:fe:95:2f:
                    b0:2c:36:26:8c:ca:41:39:44:f2:00:1a:e0:e5:dc:
                    2d:4d:a2:42:72:8d:5d:52:81:70:a1:b6:51:e6:99:
                    70:76:9a:17:c5:dd:ed:7a:b9:f1:3e:fb:dd:e1:a0:
                    ce:46:95:59:92:8a:c7:6d:90:94:2d:12:69:f8:9d:
                    20:e5:c7:1a:28:8f:3b:68:e7:db:0b:e5:82:a4:7e:
                    65:f4:ef:80:5b:c6:01:13:68:e6:65:53:4e:ad:1b:
                    9e:0c:42:93:89:99:f9:22:68:39:1c:8c:4f:d9:6f:
                    c5:f0:40:17:b2:0a:87:cb:37:0f:6f:cb:38:b3:9e:
                    0d:3a:87:f9:75:59:63:c8:33:cd:e7:1b:84:33:4a:
                    13:8b:55:06:77:47:73:fc:5a:46:3e:8c:e4:a0:d4:
                    6f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:93:4E:85:EA:2A:E7:C2:0D:1C:3E:9B:16:BE:3C:45:EB:E6:9B:52
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/0/FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.72.0/22
                IPv6:
                  2804:3ebc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266618

    Signature Algorithm: sha256WithRSAEncryption
         07:c9:1b:50:bb:42:3d:58:99:0f:f5:06:5c:80:46:5e:87:79:
         d1:a4:61:33:44:2c:f8:2a:e1:0c:12:1a:bf:88:78:f2:09:84:
         02:42:d4:03:d5:56:ce:f1:dd:b5:6a:34:13:aa:03:75:96:21:
         be:eb:20:d9:2b:ad:37:6a:21:34:03:49:84:57:7b:1e:d8:84:
         a3:19:53:e3:d6:77:c2:31:5b:67:6a:7a:4b:b2:d0:8d:15:47:
         71:7f:fb:a8:10:60:05:3f:32:6c:73:c3:b5:fa:b2:46:c5:38:
         a3:f3:79:d6:ab:61:8b:95:e9:b2:06:80:7f:16:26:ea:36:11:
         58:a0:10:7b:1f:8e:0e:60:e0:3b:02:3b:06:09:6a:50:02:27:
         a6:ba:3c:82:e9:8b:28:d5:fb:57:f4:11:5c:fb:c6:b2:99:70:
         83:6d:40:6f:4f:b9:d0:dd:6d:0b:0b:9a:bd:9f:e7:14:84:c2:
         b0:ea:bb:3a:ac:be:f0:5f:e3:73:b1:dc:10:d2:ca:72:1b:dc:
         a9:ac:fd:e4:74:9a:ed:9c:a9:3b:15:87:5d:d8:62:33:a1:8c:
         ba:55:88:92:06:dc:08:f1:8a:68:38:0b:cb:7e:37:92:81:12:
         d1:82:74:00:f9:20:c6:81:14:1a:53:6d:82:b7:c8:6a:12:f6:
         68:97:b4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org