Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FFE4ABB1DA35F68470097DCFEEEB615F6F52086A.cer
File:                     FFE4ABB1DA35F68470097DCFEEEB615F6F52086A.cer (raw, json)
Hash identifier:          eQf5rBoSgs9CVVej+/QHW+FnVMaBQQnRGnoWPa+3ctQ=
Subject key identifier:   FF:E4:AB:B1:DA:35:F6:84:70:09:7D:CF:EE:EB:61:5F:6F:52:08:6A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DF9609938583A8809E4AEB38BE1007C79671BD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/FFE4ABB1DA35F68470097DCFEEEB615F6F52086A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 22:26:38 +0000
Certificate not after:    Mon 20 May 2024 22:31:38 +0000
Subordinate resources:    AS: 268801
                          IP: 45.173.76.0/22
                          IP: 2804:5adc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f9:60:99:38:58:3a:88:09:e4:ae:b3:8b:e1:00:7c:79:67:1b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 22 22:26:38 2023 GMT
            Not After : May 20 22:31:38 2024 GMT
        Subject: CN=FFE4ABB1DA35F68470097DCFEEEB615F6F52086A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:f1:b0:0a:66:7a:b7:bf:58:38:3f:a7:50:
                    2f:90:a8:e4:d3:68:b9:0d:76:1f:c0:94:fb:71:bd:
                    c7:d5:65:bc:b0:28:60:91:ca:52:37:a3:f2:6f:c6:
                    fd:50:00:55:eb:f6:0e:0d:11:bc:28:b2:c3:ba:11:
                    c0:3d:0a:c5:74:b7:b9:0f:d7:76:68:0a:18:e0:2d:
                    23:36:50:91:ce:17:37:14:88:39:10:bf:ef:2a:c8:
                    ce:60:94:a0:e3:f4:54:a9:ed:9d:8d:7a:ea:b2:47:
                    71:aa:cc:33:e1:8e:c4:5e:22:3c:96:a1:a7:1f:8b:
                    e6:e5:14:73:20:cf:08:87:39:78:f1:09:5e:c1:45:
                    ce:95:12:1e:ca:6c:12:c4:07:64:fa:ea:93:63:48:
                    99:14:13:79:d3:88:64:c4:eb:54:3d:b0:af:35:b1:
                    8e:06:cc:b8:46:64:3e:54:63:c5:6b:7b:00:b4:48:
                    f3:37:71:4d:53:55:a5:42:fa:d0:be:e1:a4:f8:da:
                    05:1d:79:0a:75:cf:e0:00:27:1e:f4:86:b2:6d:fd:
                    3a:b0:9e:e7:64:d1:75:27:02:bc:14:8b:62:75:d1:
                    a1:bf:2a:44:3e:8f:d3:01:dd:46:ec:c2:95:ba:56:
                    f6:42:32:72:bb:5f:3e:43:92:18:9c:10:06:de:ef:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:E4:AB:B1:DA:35:F6:84:70:09:7D:CF:EE:EB:61:5F:6F:52:08:6A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/FFE4ABB1DA35F68470097DCFEEEB615F6F52086A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.76.0/22
                IPv6:
                  2804:5adc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268801

    Signature Algorithm: sha256WithRSAEncryption
         18:e0:1e:00:58:a8:65:cd:3a:59:e2:6c:a8:41:10:d8:eb:07:
         76:8a:c8:c8:29:df:6e:ee:ea:d3:9b:a6:b5:66:f3:87:e8:98:
         22:87:f2:3a:81:1c:c9:a3:39:f0:ab:31:c4:bb:b0:fd:f2:ec:
         42:59:49:a4:69:41:d7:e0:c1:9d:04:f6:fb:23:4e:0b:35:0f:
         41:d2:4f:d8:2e:df:c7:2d:e5:87:07:63:a9:49:b2:55:e0:72:
         7d:21:d2:78:31:3d:46:5c:63:84:80:2c:1b:26:ec:3a:a3:32:
         dc:9d:88:4a:70:a0:64:0b:82:a1:3e:5d:4e:45:d4:8f:f7:40:
         88:00:a3:cd:e8:3e:87:4b:1d:2f:b9:1e:d0:be:35:38:05:00:
         49:e4:c9:12:10:3a:1f:ea:1e:c0:57:63:af:6b:00:d2:9d:80:
         43:88:4d:f1:92:33:6b:c4:c6:99:39:26:d6:83:83:1b:21:96:
         23:f4:08:91:0a:00:6d:a9:38:dc:be:16:30:b7:8d:2b:77:ba:
         27:cd:e1:ff:b0:1e:62:86:6d:f4:26:99:cd:eb:99:65:58:b2:
         9d:f6:70:a9:84:1f:b2:2d:04:61:8c:c0:4a:e7:9f:96:64:22:
         25:d1:fb:b4:d7:59:eb:e1:a4:3d:a0:63:03:d9:52:65:49:82:
         be:d6:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org