Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FFD00493880B2D63B9BD26EB4E8A2F258C70FE07.cer
File:                     FFD00493880B2D63B9BD26EB4E8A2F258C70FE07.cer (raw, json)
Hash identifier:          BQsyw1jBLPLs5I6drtWCUCPDIo7zPbdrihmIGcAI4JQ=
Subject key identifier:   FF:D0:04:93:88:0B:2D:63:B9:BD:26:EB:4E:8A:2F:25:8C:70:FE:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       385794F056518EE6A9A598E9300C3E89286A8158
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B9Nx1mUtzQg5khEqY4eiwLbxhbpVndjkQnxZ8wD65zjB/0/FFD00493880B2D63B9BD26EB4E8A2F258C70FE07.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B9Nx1mUtzQg5khEqY4eiwLbxhbpVndjkQnxZ8wD65zjB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 May 2022 14:35:22 +0000
Certificate not after:    Wed 03 May 2023 14:40:22 +0000
Subordinate resources:    AS: 265125
                          IP: 143.208.84.0/22
                          IP: 2804:2aec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:57:94:f0:56:51:8e:e6:a9:a5:98:e9:30:0c:3e:89:28:6a:81:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  4 14:35:22 2022 GMT
            Not After : May  3 14:40:22 2023 GMT
        Subject: CN=FFD00493880B2D63B9BD26EB4E8A2F258C70FE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:ab:67:5c:38:23:0b:98:5b:b7:af:8e:9e:
                    d9:b2:20:e8:b5:0d:e8:b6:0f:24:19:18:32:bf:ca:
                    f4:e2:af:5e:41:b3:43:66:c1:28:e9:d6:9f:8c:45:
                    02:30:ae:a2:0d:c9:8e:c1:19:5a:81:48:d9:b7:ed:
                    41:97:e0:05:47:ad:bc:a5:99:07:4e:de:1d:89:54:
                    2c:c0:7c:ba:7f:f6:49:bb:01:d6:cb:d5:3f:83:0f:
                    3d:01:89:20:46:ef:4c:b7:60:fd:f6:e1:c6:07:54:
                    a5:e7:35:5c:f5:ff:01:56:5b:e0:65:f3:90:d3:ab:
                    20:a4:6c:a4:5f:a8:ce:35:4f:eb:8a:d1:e4:ee:d5:
                    35:16:98:12:d0:17:36:79:3d:84:6e:ae:31:b1:16:
                    0c:a9:16:65:2e:81:42:54:16:fa:0c:5f:ef:c3:cc:
                    55:e4:f9:be:35:29:eb:1f:71:e7:8c:c3:26:56:38:
                    22:00:e2:2f:7a:41:20:85:2e:d7:b4:16:e6:34:6c:
                    a8:69:e7:9e:51:40:dc:cd:0c:af:54:5e:08:99:eb:
                    d3:c5:32:4b:18:c3:9d:83:2b:c9:8c:c6:4f:97:86:
                    f9:72:e8:b5:dd:60:49:70:13:0e:29:c0:f5:97:ff:
                    20:1d:f4:ee:31:6b:5d:cf:32:49:b2:a2:bd:08:bf:
                    10:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:D0:04:93:88:0B:2D:63:B9:BD:26:EB:4E:8A:2F:25:8C:70:FE:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B9Nx1mUtzQg5khEqY4eiwLbxhbpVndjkQnxZ8wD65zjB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B9Nx1mUtzQg5khEqY4eiwLbxhbpVndjkQnxZ8wD65zjB/0/FFD00493880B2D63B9BD26EB4E8A2F258C70FE07.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.84.0/22
                IPv6:
                  2804:2aec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265125

    Signature Algorithm: sha256WithRSAEncryption
         56:1d:33:27:ac:c1:22:d8:1c:d1:69:86:61:32:f2:bd:7f:78:
         98:83:8b:4c:27:18:08:c8:cf:ed:e3:dc:96:47:1e:a2:88:91:
         50:cb:51:4d:51:68:b6:05:30:fc:dc:35:7f:75:f8:eb:f7:fd:
         ff:c2:b5:79:e0:00:02:bf:18:28:81:fe:14:47:ec:fe:52:6c:
         4e:21:7b:64:91:52:2a:98:34:fd:0b:c9:25:06:a2:08:84:4d:
         1c:2d:12:02:bd:5e:85:13:8a:cd:7c:94:0a:04:2c:4b:19:5a:
         c3:7f:3a:1b:ea:0d:7a:47:41:de:9e:e9:3d:ad:01:a3:b8:82:
         6e:2f:8e:eb:34:06:52:94:76:78:1b:7d:7e:db:9c:a1:c0:cc:
         d4:84:a4:13:33:3b:ec:0e:3e:ec:52:01:a9:fb:ce:cb:6b:56:
         40:2c:35:da:44:d4:21:75:ba:c0:9a:05:aa:01:17:af:3a:ed:
         08:83:a9:74:8a:f1:9d:bd:c1:e6:48:8e:ed:66:0c:93:b1:c2:
         7e:35:30:ff:44:6e:d7:11:95:c2:cd:ca:26:03:ab:d6:10:9d:
         83:57:59:4c:e4:f2:ba:6d:52:3a:ad:34:91:bf:fe:0f:3a:26:
         df:d7:41:a7:f7:fb:d1:39:d3:fe:af:71:31:f8:9c:f7:e3:e6:
         95:f4:db:91
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUOFeU8FZRjuappZjpMAw+iShqgVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA1MDQxNDM1MjJaFw0yMzA1MDMxNDQwMjJaMDMxMTAvBgNV
BAMTKEZGRDAwNDkzODgwQjJENjNCOUJEMjZFQjRFOEEyRjI1OEM3MEZFMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCep6tnXDgjC5hbt6+OntmyIOi1
Dei2DyQZGDK/yvTir15Bs0NmwSjp1p+MRQIwrqINyY7BGVqBSNm37UGX4AVHrbyl
mQdO3h2JVCzAfLp/9km7AdbL1T+DDz0BiSBG70y3YP324cYHVKXnNVz1/wFWW+Bl
85DTqyCkbKRfqM41T+uK0eTu1TUWmBLQFzZ5PYRurjGxFgypFmUugUJUFvoMX+/D
zFXk+b41KesfceeMwyZWOCIA4i96QSCFLte0FuY0bKhp555RQNzNDK9UXgiZ69PF
MksYw52DK8mMxk+Xhvly6LXdYElwEw4pwPWX/yAd9O4xa13PMkmyor0IvxDFAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/0ASTiAstY7m9
JutOii8ljHD+BzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9COU54MW1VdHpRZzVraEVxWTRlaXdMYnhoYnBWbmRqa1Fu
eFo4d0Q2NXpqQi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9COU54MW1VdHpRZzVraEVxWTRlaXdMYnhoYnBWbmRqa1Fu
eFo4d0Q2NXpqQi8wL0ZGRDAwNDkzODgwQjJENjNCOUJEMjZFQjRFOEEyRjI1OEM3
MEZFMDcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAo/QVDANBAIAAjAHAwUA
KAQq7DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC6UwDQYJKoZIhvcNAQELBQAD
ggEBAFYdMyeswSLYHNFphmEy8r1/eJiDi0wnGAjIz+3j3JZHHqKIkVDLUU1RaLYF
MPzcNX91+Ov3/f/CtXngAAK/GCiB/hRH7P5SbE4he2SRUiqYNP0LySUGogiETRwt
EgK9XoUTis18lAoELEsZWsN/OhvqDXpHQd6e6T2tAaO4gm4vjus0BlKUdngbfX7b
nKHAzNSEpBMzO+wOPuxSAan7zstrVkAsNdpE1CF1usCaBaoBF6867QiDqXSK8Z29
weZIju1mDJOxwn41MP9EbtcRlcLNyiYDq9YQnYNXWUzk8rptUjqtNJG//g86Jt/X
Qaf3+9E50/6vcTH4nPfj5pX025E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-ams.rpki-client.org