Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0.cer
File:                     FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0.cer (raw, json)
Hash identifier:          NnziD9p09ZpkARlQ/I8+sxRw+eGW29AJ5VzYfJngPiA=
Subject key identifier:   FE:E7:20:07:61:D5:0C:B7:C0:46:DE:EA:62:DE:B6:84:FD:FF:3F:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5500B7D343CCE9F481D73156955EE2B94C5647F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 13:12:37 +0000
Certificate not after:    Thu 13 Feb 2025 13:17:37 +0000
Subordinate resources:    AS: 28276
                          IP: 186.249.96.0/19
                          IP: 187.102.96.0 -- 187.102.110.255
                          IP: 189.14.64.0/20
                          IP: 2804:56a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:00:b7:d3:43:cc:e9:f4:81:d7:31:56:95:5e:e2:b9:4c:56:47:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 13:12:37 2024 GMT
            Not After : Feb 13 13:17:37 2025 GMT
        Subject: CN=FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a9:2a:98:8e:03:59:c2:97:57:05:fa:06:51:
                    ff:13:35:7f:f3:6a:6c:04:8b:0b:44:a5:3f:56:1a:
                    17:18:2f:96:a0:61:b0:47:5e:28:61:a9:5f:d4:c4:
                    14:9c:1f:d4:bc:11:56:40:c6:5c:52:c3:87:48:ea:
                    43:38:55:91:39:2b:91:c5:14:f5:17:eb:ab:75:2d:
                    4d:5a:bd:31:3d:c3:47:f9:34:fa:aa:e0:1a:af:53:
                    99:ce:82:b1:96:3b:55:6d:26:84:35:4a:b4:25:b1:
                    a5:4f:3c:f6:12:63:ab:43:53:14:3e:38:10:89:2a:
                    49:62:03:7d:65:3c:c4:70:ae:9c:39:a5:12:ed:f8:
                    33:94:3e:59:10:b2:52:8c:ff:f4:4f:0f:21:9c:fe:
                    74:74:58:02:f7:92:b4:59:a9:90:c0:5b:29:0d:35:
                    e6:99:63:cd:97:19:b6:cc:48:12:98:4f:6a:f8:9a:
                    65:f0:c9:8d:7e:36:7f:d1:ea:79:15:33:e0:bd:6e:
                    7c:7b:71:5c:93:4a:24:12:fa:3e:6a:93:7d:f9:54:
                    dd:b3:52:a1:30:a6:d0:3e:14:b7:1f:ea:e3:fb:b2:
                    f5:22:c9:4e:b0:53:f5:96:12:bc:ef:4e:a4:51:d0:
                    e7:88:23:3d:38:fa:fc:5a:2c:3c:d6:e2:c1:57:f3:
                    8b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:E7:20:07:61:D5:0C:B7:C0:46:DE:EA:62:DE:B6:84:FD:FF:3F:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.96.0/19
                  187.102.96.0-187.102.110.255
                  189.14.64.0/20
                IPv6:
                  2804:56a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28276

    Signature Algorithm: sha256WithRSAEncryption
         3d:cf:64:d2:4c:9e:2f:81:c6:aa:31:8a:ce:f7:01:f7:10:7f:
         57:e1:5c:0e:7d:35:d5:a0:61:50:18:56:c8:1e:bc:af:01:67:
         05:e3:27:0f:30:b5:0e:cd:95:b8:08:92:2c:0f:e8:cb:29:e5:
         ca:8d:3f:64:f6:bb:0b:d9:f1:05:e3:48:6e:28:80:93:6e:ee:
         88:e7:d4:99:53:61:6a:3f:23:ef:a2:7e:96:70:0a:50:42:b5:
         43:22:e9:8f:59:60:ed:13:7d:aa:28:ea:47:fb:19:21:b4:92:
         f7:cd:bc:4e:26:5b:80:78:1d:d2:21:87:fb:69:72:7b:a9:d1:
         95:c4:1d:33:0e:ad:ee:f5:d4:b7:37:82:0e:ba:41:e7:0a:f8:
         c5:e4:52:26:06:39:64:5b:70:c4:f2:22:bd:e4:86:e7:9f:c5:
         61:b2:25:22:5e:d1:17:25:58:b9:cb:d7:02:bb:ab:97:f7:ad:
         d3:fd:6f:1b:3d:4e:e7:ae:ee:27:61:2a:61:e4:25:51:e6:b7:
         e1:d2:33:46:0b:0f:4e:84:af:7a:ad:47:b3:e1:a8:ae:1e:14:
         e6:8e:2d:17:5b:09:57:d0:82:80:27:c0:63:37:1c:73:eb:49:
         f4:64:4c:f3:63:c5:c6:bf:41:f1:31:98:4c:41:3b:e9:e6:6a:
         a5:48:c0:ec
-----BEGIN CERTIFICATE-----
MIIGJDCCBQygAwIBAgIUVQC300PM6fSB1zFWlV7iuUxWR/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTUxMzEyMzdaFw0yNTAyMTMxMzE3MzdaMDMxMTAvBgNV
BAMTKEZFRTcyMDA3NjFENTBDQjdDMDQ2REVFQTYyREVCNjg0RkRGRjNGQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqSqYjgNZwpdXBfoGUf8TNX/z
amwEiwtEpT9WGhcYL5agYbBHXihhqV/UxBScH9S8EVZAxlxSw4dI6kM4VZE5K5HF
FPUX66t1LU1avTE9w0f5NPqq4BqvU5nOgrGWO1VtJoQ1SrQlsaVPPPYSY6tDUxQ+
OBCJKkliA31lPMRwrpw5pRLt+DOUPlkQslKM//RPDyGc/nR0WAL3krRZqZDAWykN
NeaZY82XGbbMSBKYT2r4mmXwyY1+Nn/R6nkVM+C9bnx7cVyTSiQS+j5qk335VN2z
UqEwptA+FLcf6uP7svUiyU6wU/WWErzvTqRR0OeIIz04+vxaLDzW4sFX84szAgMB
AAGjggMuMIIDKjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT+5yAHYdUMt8BG
3upi3raE/f8/wDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IMWdMcmVXTGZjTHMyUDR4aWRSTEsxNGt0Q2pXMUtVbjdo
REI0QUxUcUhuOC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSDFnTHJlV0xmY0xzMlA0eGlkUkxLMTRrdENqVzFLVW43
aERCNEFMVHFIbjgvMC9GRUU3MjAwNzYxRDUwQ0I3QzA0NkRFRUE2MkRFQjY4NEZE
RkYzRkMwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQgYIKwYBBQUHAQcBAf8EMzAxMCAEAgABMBoDBAW6+WAwDAMEBbtmYAME
ALtmbgMEBL0OQDANBAIAAjAHAwUAKARWpDAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgJudDANBgkqhkiG9w0BAQsFAAOCAQEAPc9k0kyeL4HGqjGKzvcB9xB/V+FcDn01
1aBhUBhWyB68rwFnBeMnDzC1Ds2VuAiSLA/oyynlyo0/ZPa7C9nxBeNIbiiAk27u
iOfUmVNhaj8j76J+lnAKUEK1QyLpj1lg7RN9qijqR/sZIbSS9828TiZbgHgd0iGH
+2lye6nRlcQdMw6t7vXUtzeCDrpB5wr4xeRSJgY5ZFtwxPIiveSG55/FYbIlIl7R
FyVYucvXArurl/et0/1vGz1O567uJ2EqYeQlUea34dIzRgsPToSveq1Hs+Gorh4U
5o4tF1sJV9CCgCfAYzccc+tJ9GRM82PFxr9B8TGYTEE76eZqpUjA7A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org