Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FF03AD8616C7BC17DE5A03F90357FA4F3A8D8516.cer
File:                     FF03AD8616C7BC17DE5A03F90357FA4F3A8D8516.cer (raw, json)
Hash identifier:          akrA/60cZyOWrark8cbf49XnJ+Gl/loAg+DQwq61fx4=
Subject key identifier:   FF:03:AD:86:16:C7:BC:17:DE:5A:03:F9:03:57:FA:4F:3A:8D:85:16
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       07013383C927406B551705774D98154475949C83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/FF03AD8616C7BC17DE5A03F90357FA4F3A8D8516.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Nov 2023 19:29:30 +0000
Certificate not after:    Thu 21 Nov 2024 19:34:30 +0000
Subordinate resources:    AS: 262803
                          IP: 186.250.16.0/21
                          IP: 2804:250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:01:33:83:c9:27:40:6b:55:17:05:77:4d:98:15:44:75:94:9c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 23 19:29:30 2023 GMT
            Not After : Nov 21 19:34:30 2024 GMT
        Subject: CN=FF03AD8616C7BC17DE5A03F90357FA4F3A8D8516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:27:93:89:aa:aa:96:b3:ad:36:3c:3f:9f:
                    a0:36:14:ed:93:12:4f:ea:1e:98:98:88:39:97:12:
                    af:fb:e5:5d:08:bc:f3:d7:b5:ea:16:e1:41:fa:c8:
                    5d:3d:35:48:99:af:3a:6d:44:33:81:e5:28:12:e4:
                    42:c6:d1:5a:7b:b2:34:bb:7d:a3:5e:76:c4:29:7d:
                    a4:b5:88:db:cd:10:66:a8:21:37:fb:26:73:26:a9:
                    c0:8e:30:60:a4:d3:7e:eb:a8:35:a3:2e:b0:b9:81:
                    09:ec:01:59:2a:9e:ba:b9:cf:0a:20:f5:f4:35:09:
                    2c:e6:fe:2c:ed:92:9b:c8:d0:a9:79:4a:5b:f6:ab:
                    3e:60:3b:89:51:3a:26:1a:59:0e:ee:67:e6:89:b2:
                    7b:6c:78:06:53:bd:13:a5:37:63:91:d9:5a:a8:7b:
                    48:d2:a0:de:c4:f3:f3:92:78:a9:b2:e5:f5:86:c5:
                    a2:a5:e7:e2:68:fd:9c:b4:0f:68:6e:bc:34:2c:03:
                    3a:46:54:71:7d:1b:82:d3:63:22:c3:c4:2a:e9:27:
                    2d:fd:c0:1d:22:56:9a:db:cd:48:72:e7:9d:e2:05:
                    85:46:9d:a8:19:b7:0c:86:4f:95:5f:9e:0b:c1:3b:
                    20:05:10:db:a4:3c:a9:77:86:6b:80:fb:c1:9c:0d:
                    41:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:03:AD:86:16:C7:BC:17:DE:5A:03:F9:03:57:FA:4F:3A:8D:85:16
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/FF03AD8616C7BC17DE5A03F90357FA4F3A8D8516.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.16.0/21
                IPv6:
                  2804:250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262803

    Signature Algorithm: sha256WithRSAEncryption
         16:d4:e6:a4:b9:09:91:0a:95:f2:bf:dc:e0:eb:93:e7:23:ad:
         27:ca:3d:d8:38:66:f6:fc:a5:cd:5a:e4:3b:78:62:a6:6c:36:
         22:cd:d6:e7:a6:5b:de:54:7e:82:fc:28:04:41:98:f8:6d:b0:
         eb:0c:61:90:4f:e8:09:10:54:20:90:14:4a:5a:9e:56:0c:13:
         bd:92:50:e7:b2:30:bf:9b:32:2e:d5:80:3f:0a:cc:7c:8f:64:
         47:52:71:26:bc:df:ef:6a:a8:91:09:a2:95:c8:c4:17:82:60:
         d4:e8:31:76:04:e2:c1:a3:b9:32:72:35:ee:80:85:d5:34:1b:
         53:12:79:4e:ad:c4:75:8e:bb:9d:bb:86:3b:36:19:a6:d5:51:
         bb:c5:19:7e:e0:ba:26:4f:6f:0c:12:61:2f:fc:15:81:ef:1f:
         3e:2f:56:a9:51:59:f1:23:9b:06:3d:7f:72:4c:1f:e1:a0:61:
         0b:2f:2d:c2:ef:33:3a:d9:b3:6f:39:cf:eb:6d:86:b6:43:4a:
         c8:5d:87:12:b6:d3:ed:ac:46:73:d6:ef:ae:25:a3:74:5b:91:
         de:d3:a7:39:89:59:7d:b3:b3:77:9a:8b:a7:a5:1d:39:a8:2b:
         6a:46:54:d5:fa:d1:81:a3:60:3f:4e:c8:87:1f:dd:e7:56:16:
         b6:42:77:f4
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBwEzg8knQGtVFwV3TZgVRHWUnIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjMxOTI5MzBaFw0yNDExMjExOTM0MzBaMDMxMTAvBgNV
BAMTKEZGMDNBRDg2MTZDN0JDMTdERTVBMDNGOTAzNTdGQTRGM0E4RDg1MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0mCeTiaqqlrOtNjw/n6A2FO2T
Ek/qHpiYiDmXEq/75V0IvPPXteoW4UH6yF09NUiZrzptRDOB5SgS5ELG0Vp7sjS7
faNedsQpfaS1iNvNEGaoITf7JnMmqcCOMGCk037rqDWjLrC5gQnsAVkqnrq5zwog
9fQ1CSzm/iztkpvI0Kl5Slv2qz5gO4lROiYaWQ7uZ+aJsntseAZTvROlN2OR2Vqo
e0jSoN7E8/OSeKmy5fWGxaKl5+Jo/Zy0D2huvDQsAzpGVHF9G4LTYyLDxCrpJy39
wB0iVprbzUhy553iBYVGnagZtwyGT5VfngvBOyAFENukPKl3hmuA+8GcDUGNAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/A62GFse8F95a
A/kDV/pPOo2FFjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zYWRha2dQZGdtRTdOOExadEVqQk5waGZtc3FpcGpnZXVT
bjFkTnNHUGpQSi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM2FkYWtnUGRnbUU3TjhMWnRFakJOcGhmbXNxaXBqZ2V1
U24xZE5zR1BqUEovMC9GRjAzQUQ4NjE2QzdCQzE3REU1QTAzRjkwMzU3RkE0RjNB
OEQ4NTE2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAO6+hAwDQQCAAIwBwMF
ACgEAlAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAKTMA0GCSqGSIb3DQEBCwUA
A4IBAQAW1OakuQmRCpXyv9zg65PnI60nyj3YOGb2/KXNWuQ7eGKmbDYizdbnplve
VH6C/CgEQZj4bbDrDGGQT+gJEFQgkBRKWp5WDBO9klDnsjC/mzIu1YA/Csx8j2RH
UnEmvN/vaqiRCaKVyMQXgmDU6DF2BOLBo7kycjXugIXVNBtTEnlOrcR1jrudu4Y7
Nhmm1VG7xRl+4LomT28MEmEv/BWB7x8+L1apUVnxI5sGPX9yTB/hoGELLy3C7zM6
2bNvOc/rbYa2Q0rIXYcSttPtrEZz1u+uJaN0W5He06c5iVl9s7N3mounpR05qCtq
RlTV+tGBo2A/TsiHH93nVha2Qnf0
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org