Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
File:                     FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer (raw, json)
Hash identifier:          FEZpQPz2lBmxD1VHqXFVKCIvqik/4OY3pq9RUN77AN8=
Subject key identifier:   FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4ED2F7239DA43B401F9B02F0FBD72E68CFC356E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.mft
caRepository:             rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:35 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:35 +0000
Subordinate resources:    AS: 263263
                          IP: 138.122.72.0/22
                          IP: 170.244.220.0/22
                          IP: 200.33.128.0/21
                          IP: 2804:1814::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d2:f7:23:9d:a4:3b:40:1f:9b:02:f0:fb:d7:2e:68:cf:c3:56:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:35 2024 GMT
            Not After : Mar 31 11:03:35 2025 GMT
        Subject: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:49:0e:cb:57:1c:74:02:bb:95:75:1e:ee:
                    35:53:8b:81:50:42:b7:1e:19:08:ff:27:d8:56:90:
                    29:02:f5:b5:67:36:5a:a5:16:5f:16:00:54:9f:66:
                    7f:7b:a4:91:e0:2f:56:d0:f9:26:a8:50:0b:ff:e4:
                    13:0c:1d:6f:5e:91:3e:f4:8b:c5:9c:1e:11:e4:7a:
                    a4:8b:df:c0:7f:d4:23:18:d2:ea:74:5d:1d:c1:a3:
                    31:8b:43:51:13:02:24:30:0d:3e:3b:b6:12:d2:9f:
                    0f:ef:30:74:99:6d:6c:98:90:ca:29:ad:61:54:b0:
                    19:49:0a:98:fc:9e:b5:c1:b1:f0:f6:9e:36:1e:95:
                    5d:7a:9c:93:08:2f:e2:23:8e:0e:47:7e:6d:c5:d9:
                    c9:98:c7:60:a1:d9:d7:94:bf:80:2d:79:30:32:ce:
                    5b:8c:c0:47:57:3f:59:1e:08:e1:c0:43:7b:fe:c4:
                    98:0d:5a:af:7c:41:99:8a:9c:1d:9e:23:0e:aa:df:
                    e8:b4:a5:f5:a4:d9:14:69:c6:24:6c:2e:22:28:40:
                    75:7a:4a:a3:76:bc:f7:5a:51:db:0d:b7:83:60:01:
                    92:af:fb:6d:26:c3:0c:3c:4d:a3:1e:96:a0:1a:3a:
                    40:54:bf:c4:b6:9a:cd:0a:f5:48:40:63:f3:32:da:
                    77:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.72.0/22
                  170.244.220.0/22
                  200.33.128.0/21
                IPv6:
                  2804:1814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263263

    Signature Algorithm: sha256WithRSAEncryption
         54:24:bd:0a:44:98:29:44:54:2c:d5:a3:99:fc:1f:da:31:ea:
         8d:55:1a:cb:c3:f8:2e:a2:89:4e:4c:55:7c:3f:11:56:ef:47:
         a8:9c:6e:c8:1c:db:a1:70:e2:2e:a3:d0:1f:32:60:26:d0:1b:
         00:bf:47:51:f1:3b:3c:c8:64:47:bc:de:9a:43:9d:52:0a:f2:
         67:6f:78:8f:55:9b:b6:3c:5b:27:b8:05:82:95:3c:8a:c4:61:
         c8:7d:87:5a:4b:a9:3c:e9:65:df:26:f6:f6:81:a8:ce:93:9a:
         f3:f3:7a:c0:97:fd:94:b3:eb:be:bb:86:b8:4b:43:66:8b:d0:
         63:08:ae:66:0a:b0:a4:0f:fa:8e:1d:cd:53:0c:30:63:b0:00:
         8e:a4:08:9a:41:ce:95:2c:db:f1:88:35:10:08:06:e7:c3:8e:
         66:e0:cd:b5:90:27:4f:63:e5:47:63:41:ef:2e:e3:de:04:d6:
         cc:c4:b0:be:69:c1:53:35:41:c5:03:c0:71:3e:b7:be:2a:86:
         ce:a6:3c:f2:09:ce:0f:99:5e:9f:dd:1c:33:ae:60:a6:15:6a:
         94:36:2a:df:4f:7c:cf:9c:41:dd:84:0e:5c:ae:d7:19:e2:fd:
         56:7e:04:ad:69:d2:b0:2b:c6:37:6b:aa:b0:3c:82:92:ad:39:
         5d:bc:82:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:46 2024 by rpki-client on console-ams.rpki-client.org