Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.cer
File:                     FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.cer (raw, json)
Hash identifier:          xBNG2JgPD/+K8nKUnftJIohTL2i/R1biXDayiBfrfys=
Subject key identifier:   FF:B4:07:53:F2:C4:F6:B4:F9:FB:83:75:2F:51:E5:2C:DC:92:A5:E6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1DAA305C8A3C6ED222EE23A2D74592776E8544E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 02:36:28 +0000
Certificate not after:    Tue 07 Jan 2025 02:41:28 +0000
Subordinate resources:    AS: 273714
                          IP: 2804:8b24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:aa:30:5c:8a:3c:6e:d2:22:ee:23:a2:d7:45:92:77:6e:85:44:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 02:36:28 2024 GMT
            Not After : Jan  7 02:41:28 2025 GMT
        Subject: CN=FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:e5:be:18:58:e2:5b:96:d4:75:20:d5:6c:
                    b4:4a:5d:c3:78:a6:7b:39:4c:24:8b:7e:41:97:c5:
                    2b:f5:28:fa:e4:4e:2d:6a:37:6e:bb:7a:25:4f:66:
                    88:ee:f9:4b:64:4a:3c:aa:c1:4e:db:9b:67:f3:58:
                    56:59:63:da:ad:41:22:a1:aa:ae:8a:c2:69:d8:5a:
                    e6:fa:fe:d9:97:38:24:49:aa:fe:6f:c0:7b:02:a3:
                    be:d7:18:64:4b:cb:20:36:3c:f6:78:e4:80:c6:0f:
                    9c:db:9c:53:1c:8f:bd:8a:1b:c6:cd:eb:37:f5:d7:
                    fd:f8:8a:0b:ac:ac:d6:d7:4f:1a:ed:7b:09:0a:34:
                    82:b5:b8:a9:e0:7f:66:a8:07:1b:f9:d4:13:0b:3d:
                    d7:c2:6d:c5:f9:58:0e:af:28:9b:f0:1f:91:97:3e:
                    b3:a8:76:72:53:20:a5:81:c5:66:8d:e5:c6:2e:ea:
                    b9:00:5a:28:15:21:db:18:5b:e5:e7:b1:09:43:42:
                    43:f0:28:ac:58:ee:75:24:b6:57:c7:ed:c8:9f:d9:
                    49:a2:64:28:24:e3:cc:05:d9:c9:64:f0:98:56:26:
                    dd:1e:a8:ff:eb:97:96:b6:88:27:83:e2:e2:2b:e3:
                    5b:28:a2:7f:74:3d:1f:91:0b:60:26:a6:b2:66:2e:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:B4:07:53:F2:C4:F6:B4:F9:FB:83:75:2F:51:E5:2C:DC:92:A5:E6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273714

    Signature Algorithm: sha256WithRSAEncryption
         a8:49:f9:b7:86:9e:2c:05:b4:55:03:e0:dc:89:4c:50:76:6d:
         81:79:b3:c2:a0:40:0b:5b:dc:01:36:da:cf:0f:17:e6:ad:bd:
         a9:bf:98:6a:68:3f:28:f3:0c:6a:36:f8:4a:61:10:1a:16:16:
         13:58:e2:73:93:fb:8b:28:58:dd:1a:dc:46:ae:9b:70:3a:64:
         e0:5a:00:b5:4a:c6:9d:45:f1:38:88:da:e4:2f:bf:dc:bd:fb:
         21:1b:55:4a:fc:93:7b:19:cb:25:e5:59:96:58:85:9f:4b:21:
         78:01:cd:f3:a7:1b:2f:6e:67:4d:99:c7:1f:0f:99:0b:6c:e8:
         10:3e:1d:2f:23:70:e3:5f:59:44:ec:61:24:a0:7e:5b:b3:78:
         9e:26:f8:dc:cd:85:45:0a:2f:80:d7:c1:c7:ed:6d:5e:0d:7f:
         18:61:89:25:32:fe:4d:d0:72:f2:8b:10:97:2e:c9:b0:17:1b:
         50:3c:da:99:d8:af:b8:5d:77:7a:56:c7:17:66:cf:bb:65:70:
         97:b4:a7:a0:8d:78:6b:00:c4:3c:15:9e:ce:72:0e:74:be:66:
         59:f5:6c:8a:21:b0:0c:95:d2:d4:2f:3b:29:cd:d3:a3:fd:c8:
         7d:24:4d:b4:89:16:22:d7:e4:9e:1b:64:96:a2:44:55:9b:50:
         09:57:af:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org