Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FFD031F42D160524993AB5633101C0EA9B24C2A5.cer
File:                     FFD031F42D160524993AB5633101C0EA9B24C2A5.cer (raw, json)
Hash identifier:          hpOD3gJORbGqMqeokDLmDEbKPt1LKTFgIfDBcsDkQ7E=
Subject key identifier:   FF:D0:31:F4:2D:16:05:24:99:3A:B5:63:31:01:C0:EA:9B:24:C2:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DB328C08417DDFCA5A88C4944587A878A27826D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/FFD031F42D160524993AB5633101C0EA9B24C2A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Nov 2023 17:21:55 +0000
Certificate not after:    Fri 08 Nov 2024 17:26:55 +0000
Subordinate resources:    AS: 52758
                          IP: 177.38.184.0/21
                          IP: 201.131.240.0/21
                          IP: 2804:b38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b3:28:c0:84:17:dd:fc:a5:a8:8c:49:44:58:7a:87:8a:27:82:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 17:21:55 2023 GMT
            Not After : Nov  8 17:26:55 2024 GMT
        Subject: CN=FFD031F42D160524993AB5633101C0EA9B24C2A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:32:f2:4a:63:07:15:57:a9:a2:19:45:84:
                    0c:98:50:d9:1a:4f:5d:72:b1:7e:03:3d:38:61:1e:
                    20:61:43:8b:50:5d:61:76:f8:49:4d:8f:75:51:55:
                    e7:3c:0d:9b:29:c1:c1:71:df:9e:b6:8e:cf:d4:13:
                    f0:e5:18:d4:3e:37:c0:89:09:e4:a4:6d:b9:5e:c2:
                    39:7f:84:aa:ec:54:94:5f:17:bf:e8:b7:05:bf:70:
                    99:f7:71:53:0d:1b:98:3c:cb:d7:b0:57:f5:40:f8:
                    cd:63:bc:6b:0c:bd:e1:9b:d8:c8:7a:ea:7f:c7:af:
                    1d:bf:a9:99:ce:20:f6:ab:8c:52:0b:ce:c2:15:bf:
                    39:df:93:b4:64:e1:50:87:d8:16:88:5e:5a:fd:3c:
                    8a:70:fe:d5:39:c8:82:48:57:40:ca:f6:a1:37:42:
                    00:8f:99:68:89:27:09:10:a6:cd:d3:a6:7d:55:06:
                    c8:36:0d:70:de:cf:74:eb:2a:e0:7c:71:d2:be:73:
                    10:f0:a8:9d:97:82:5e:f9:de:be:9f:3b:b5:a1:8d:
                    27:de:24:c9:61:84:df:6d:2a:d5:6d:d3:07:72:c3:
                    75:aa:53:63:ce:19:47:a3:c6:8a:a6:36:25:ab:14:
                    6c:2d:c2:d2:ad:a8:15:54:1e:e0:4e:e6:6a:66:18:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:D0:31:F4:2D:16:05:24:99:3A:B5:63:31:01:C0:EA:9B:24:C2:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/FFD031F42D160524993AB5633101C0EA9B24C2A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.184.0/21
                  201.131.240.0/21
                IPv6:
                  2804:b38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52758

    Signature Algorithm: sha256WithRSAEncryption
         4d:4a:e8:2b:07:b6:b4:c8:16:b5:a1:a2:78:37:cc:6a:69:89:
         b4:c0:d9:00:fb:7d:c5:7b:4a:70:5a:97:c1:d6:35:18:cc:d3:
         1b:6a:70:f0:9b:d5:23:64:d3:86:f8:12:ad:4b:e6:aa:2c:19:
         23:de:f7:0b:67:6d:7b:d3:51:4a:2e:a8:8f:70:a2:4e:b4:ea:
         f4:f1:8e:2c:7f:58:6c:31:03:b4:f0:6e:ff:84:86:02:f7:fc:
         c1:39:b0:ba:3d:5e:3d:2b:44:f4:39:cf:ee:76:a8:e3:c8:f4:
         48:58:57:26:40:8d:f2:e3:7e:67:2d:37:8b:88:5b:8b:35:17:
         33:84:79:4b:0e:f6:28:07:83:c4:9c:f4:24:9f:f1:56:ca:b1:
         05:51:cd:db:b2:0f:83:db:20:7f:3a:d4:2f:8b:e9:76:22:45:
         2d:3b:00:ca:0f:cd:c8:8d:47:25:dc:ab:25:40:a6:5f:14:ce:
         81:94:b9:3c:c3:39:56:52:40:19:c7:47:77:52:38:8c:12:03:
         2f:05:d4:11:5a:5e:34:ab:3f:54:93:d5:0e:96:c0:3d:14:7b:
         2b:9c:37:5e:1c:0b:ce:40:15:bb:69:b8:32:14:98:be:18:e2:
         5c:e8:e9:8a:3f:af:61:cd:c1:55:ed:2e:b4:96:19:15:04:e6:
         de:8e:72:80
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUbbMowIQX3fylqIxJRFh6h4ongm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMTAxNzIxNTVaFw0yNDExMDgxNzI2NTVaMDMxMTAvBgNV
BAMTKEZGRDAzMUY0MkQxNjA1MjQ5OTNBQjU2MzMxMDFDMEVBOUIyNEMyQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTVzLySmMHFVepohlFhAyYUNka
T11ysX4DPThhHiBhQ4tQXWF2+ElNj3VRVec8DZspwcFx3562js/UE/DlGNQ+N8CJ
CeSkbblewjl/hKrsVJRfF7/otwW/cJn3cVMNG5g8y9ewV/VA+M1jvGsMveGb2Mh6
6n/Hrx2/qZnOIParjFILzsIVvznfk7Rk4VCH2BaIXlr9PIpw/tU5yIJIV0DK9qE3
QgCPmWiJJwkQps3Tpn1VBsg2DXDez3TrKuB8cdK+cxDwqJ2Xgl753r6fO7WhjSfe
JMlhhN9tKtVt0wdyw3WqU2POGUejxoqmNiWrFGwtwtKtqBVUHuBO5mpmGE3LAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/0DH0LRYFJJk6
tWMxAcDqmyTCpTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HbnJERTYxN3Framk3ajQ4NW11dHU5ZFc2QWF3cG9WU3lT
M2phVHhiNHVzaC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HbnJERTYxN3Framk3ajQ4NW11dHU5ZFc2QWF3cG9WU3lT
M2phVHhiNHVzaC8wL0ZGRDAzMUY0MkQxNjA1MjQ5OTNBQjU2MzMxMDFDMEVBOUIy
NEMyQTUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEA7EmuAMEA8mD8DANBAIA
AjAHAwUAKAQLODAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzhYwDQYJKoZIhvcN
AQELBQADggEBAE1K6CsHtrTIFrWhong3zGppibTA2QD7fcV7SnBal8HWNRjM0xtq
cPCb1SNk04b4Eq1L5qosGSPe9wtnbXvTUUouqI9wok606vTxjix/WGwxA7Twbv+E
hgL3/ME5sLo9Xj0rRPQ5z+52qOPI9EhYVyZAjfLjfmctN4uIW4s1FzOEeUsO9igH
g8Sc9CSf8VbKsQVRzduyD4PbIH861C+L6XYiRS07AMoPzciNRyXcqyVApl8UzoGU
uTzDOVZSQBnHR3dSOIwSAy8F1BFaXjSrP1ST1Q6WwD0UeyucN14cC85AFbtpuDIU
mL4Y4lzo6Yo/r2HNwVXtLrSWGRUE5t6OcoA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org