Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FECBB00777E9C82D374D58459B186C2975394401.cer
File:                     FECBB00777E9C82D374D58459B186C2975394401.cer (raw, json)
Hash identifier:          WOGArEBaoEXqXhWPClcASchCkz2zC2LUN1wqmuek49Q=
Subject key identifier:   FE:CB:B0:07:77:E9:C8:2D:37:4D:58:45:9B:18:6C:29:75:39:44:01
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2748D5FE01FFBAE46FF33A5915FFC55F28C88FA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/FECBB00777E9C82D374D58459B186C2975394401.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 14:48:10 +0000
Certificate not after:    Tue 12 Nov 2024 14:53:10 +0000
Subordinate resources:    AS: 269124
                          IP: 45.180.36.0/22
                          IP: 2804:5fcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:48:d5:fe:01:ff:ba:e4:6f:f3:3a:59:15:ff:c5:5f:28:c8:8f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 14 14:48:10 2023 GMT
            Not After : Nov 12 14:53:10 2024 GMT
        Subject: CN=FECBB00777E9C82D374D58459B186C2975394401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:1e:1d:82:f0:86:20:fb:b6:8f:95:ae:94:
                    cd:e6:9c:bb:27:71:a0:c9:56:cc:c0:40:14:14:62:
                    ca:7f:72:23:6b:c9:bb:5e:a1:fc:ed:94:ee:31:29:
                    c2:ef:cf:68:bf:2d:62:7f:dc:f1:ae:2a:f0:42:c0:
                    eb:c7:c4:3c:e2:b7:e7:35:c9:52:f2:d4:e4:59:54:
                    a6:ec:39:6f:7b:3f:d1:60:c2:01:5a:e6:ce:c1:16:
                    2b:b7:a5:53:95:74:99:6b:f9:8b:f5:4c:f1:aa:55:
                    b8:3b:4b:e6:19:55:50:41:95:3d:04:94:0a:2c:69:
                    25:7b:1d:f4:d2:b7:f7:ed:d2:c8:f3:dc:f5:92:8a:
                    34:80:ae:f2:8a:01:bf:48:ef:5e:16:c4:10:e9:6e:
                    4a:57:e3:46:4f:9c:37:83:02:a0:f9:dc:a6:41:fd:
                    c9:b0:53:68:27:c8:54:87:ec:98:45:62:e4:60:b7:
                    9a:ee:0a:30:18:cf:9e:75:f5:5b:22:f3:f3:fa:1f:
                    17:9b:d5:98:10:0d:62:e4:70:0d:21:1c:7b:53:d8:
                    ea:7f:f1:47:d3:e7:95:1f:27:fd:80:ea:fc:f0:ed:
                    ca:3d:d4:95:d6:d3:35:c0:83:87:71:ab:af:47:5a:
                    32:bd:f5:b6:72:cd:0d:a4:92:25:ea:90:01:f1:94:
                    c2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:CB:B0:07:77:E9:C8:2D:37:4D:58:45:9B:18:6C:29:75:39:44:01
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/FECBB00777E9C82D374D58459B186C2975394401.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.36.0/22
                IPv6:
                  2804:5fcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269124

    Signature Algorithm: sha256WithRSAEncryption
         1d:66:1b:bd:52:32:31:58:7f:f0:89:74:75:79:d7:09:8e:ee:
         c4:7c:cd:70:90:ec:49:b4:f4:1e:22:ff:ee:63:4d:0c:d8:cc:
         44:28:71:db:bf:3e:7e:cd:1f:f4:29:1d:3e:37:40:da:33:bd:
         d1:48:3c:a3:a9:7d:16:76:d7:18:dc:a1:e5:88:4c:88:28:dc:
         05:99:25:f3:42:35:a6:23:6a:bb:c1:5a:ab:13:a8:27:02:19:
         df:d5:aa:43:94:3c:08:9c:02:bf:d3:5b:12:c3:e0:34:0b:d0:
         46:f4:45:00:c4:ea:1d:92:96:d4:82:bc:c3:d3:54:dc:9b:92:
         92:45:6b:af:1b:2f:8a:fe:43:0c:ac:e8:2b:74:83:1b:ac:c4:
         ca:83:5d:cd:c7:54:d3:5f:c1:76:d5:42:15:4e:81:c9:54:7b:
         c4:15:64:bb:ed:e8:02:f1:60:5c:d6:58:bc:64:60:45:d2:4d:
         46:c8:3a:2c:29:33:cc:d5:75:b1:f5:c6:ab:9a:ab:29:b3:cc:
         34:a2:9f:9f:8e:47:9f:3d:2b:5b:e1:d2:c2:ee:61:8a:8c:8d:
         b4:9d:d0:be:07:15:1e:c1:90:94:40:a7:0c:b5:a7:d5:8f:16:
         81:5e:2e:30:43:1e:c2:d6:25:a3:ff:b3:a6:f2:f2:a5:44:4a:
         31:af:d8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org