Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FE9CA103999EE1FE62BECD7792A5F93999045F89.cer
File:                     FE9CA103999EE1FE62BECD7792A5F93999045F89.cer (raw, json)
Hash identifier:          CErowRDDfha233hBn4jLVZLfcS5hh0pUSMTfTgAXc8g=
Subject key identifier:   FE:9C:A1:03:99:9E:E1:FE:62:BE:CD:77:92:A5:F9:39:99:04:5F:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B990DF5FD5C0422D5C3D1D2504306449A569B8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/FE9CA103999EE1FE62BECD7792A5F93999045F89.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Jan 2023 14:05:20 +0000
Certificate not after:    Mon 01 Jan 2024 14:10:20 +0000
Subordinate resources:    AS: 268927
                          IP: 45.176.28.0/22
                          IP: 2804:5cbc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:99:0d:f5:fd:5c:04:22:d5:c3:d1:d2:50:43:06:44:9a:56:9b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 14:05:20 2023 GMT
            Not After : Jan  1 14:10:20 2024 GMT
        Subject: CN=FE9CA103999EE1FE62BECD7792A5F93999045F89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:a8:11:94:56:fe:9b:8e:3a:4b:95:c2:2e:
                    d5:34:0e:e2:a6:77:f5:37:8c:24:8a:fa:15:04:32:
                    95:93:46:f1:fe:73:22:92:6d:d0:de:e1:e4:07:33:
                    aa:de:2a:2d:8f:5e:cd:bb:84:c8:75:af:78:f7:73:
                    0c:ef:f6:4c:1c:d2:33:24:55:35:cf:d0:48:b1:17:
                    04:af:25:17:25:ad:b4:2e:37:76:bc:12:8b:73:de:
                    cf:f2:e2:0a:87:cb:32:56:1d:08:d5:1b:61:a5:2c:
                    d1:0c:f9:8b:00:4f:fa:f5:47:9b:38:7a:b0:79:ea:
                    4e:d1:1b:36:e8:18:03:f0:d1:d2:f9:2d:93:44:f1:
                    e7:5a:1f:6d:10:7d:dd:fd:0d:b4:3f:5a:11:f9:e2:
                    4f:c1:d2:5e:0b:0c:e4:fe:74:39:ae:1b:ac:26:f9:
                    9f:e1:a3:8c:02:a9:2e:72:e8:e1:d7:3b:aa:68:64:
                    bd:66:6d:a1:ee:31:36:e6:39:60:e7:42:09:a0:42:
                    cf:d5:c5:96:fa:ab:01:d4:58:f7:ec:0a:f5:5c:77:
                    2d:84:26:81:3a:3a:f3:87:e8:00:dc:aa:fd:48:36:
                    dc:27:2b:8f:18:e8:36:b4:ed:7b:00:27:6e:cf:92:
                    5b:bb:cf:01:c8:38:4e:81:67:a4:0e:e9:af:e5:07:
                    fb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:9C:A1:03:99:9E:E1:FE:62:BE:CD:77:92:A5:F9:39:99:04:5F:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/FE9CA103999EE1FE62BECD7792A5F93999045F89.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.28.0/22
                IPv6:
                  2804:5cbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268927

    Signature Algorithm: sha256WithRSAEncryption
         2b:0e:23:16:b5:fb:91:f5:2b:2c:49:56:58:d7:7a:b2:e4:73:
         be:49:4f:5c:14:e3:52:67:01:09:6c:de:c5:e3:00:db:9b:64:
         69:d5:d1:0a:08:14:a3:a3:90:a0:ef:47:40:2f:3d:c5:a7:a5:
         af:e8:9d:73:62:25:e0:66:7c:9c:b9:1e:d9:4a:0b:c2:e3:22:
         d4:48:44:65:16:91:d9:8f:f4:a5:4e:60:d5:85:9f:39:79:75:
         d5:0d:09:8c:3a:55:07:01:ab:f8:a6:f8:07:08:5e:5f:d9:32:
         ab:d5:63:a1:e3:6b:70:d7:4f:52:05:8f:ec:5d:11:eb:ae:91:
         0e:f7:79:eb:2a:c2:33:e4:b9:52:61:33:c0:0f:1a:45:e9:ca:
         6f:8a:50:98:1f:57:44:6a:55:00:58:85:68:90:4c:13:b5:30:
         74:e4:2b:e8:f3:ec:63:46:9e:2a:86:3b:75:ae:ab:6e:62:71:
         86:4c:ad:d8:bf:0b:cf:38:dd:fc:81:1e:3d:5f:aa:14:9e:fd:
         c8:ff:d9:97:0b:0f:b5:f0:2a:78:7c:97:1e:5c:86:1b:1b:cc:
         5a:10:e1:00:14:ce:65:5b:86:8c:0f:98:92:fe:9e:cb:01:9a:
         e6:cc:a7:1f:5a:07:07:03:e2:09:33:7b:15:9b:10:9b:2b:63:
         5e:d9:78:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:24:20 2025 by rpki-client