Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE.cer
File:                     FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE.cer (raw, json)
Hash identifier:          e0zYuGtfX8+NfXeiD4lgDA8snXBLsIlknnkGxm+E/RY=
Subject key identifier:   FF:FC:81:4D:5B:A0:AA:F8:89:4C:9F:9A:C9:FF:0D:0C:1A:5A:27:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D1494D576472AE5C66BCD984A0C1E4C6CAEB630
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Jan 2023 22:12:11 +0000
Certificate not after:    Wed 10 Jan 2024 22:17:11 +0000
Subordinate resources:    AS: 264566
                          IP: 138.0.144.0/22
                          IP: 2804:21ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:14:94:d5:76:47:2a:e5:c6:6b:cd:98:4a:0c:1e:4c:6c:ae:b6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 11 22:12:11 2023 GMT
            Not After : Jan 10 22:17:11 2024 GMT
        Subject: CN=FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:85:ec:21:89:b6:80:30:12:91:a6:11:75:0a:
                    f2:63:82:52:5e:db:be:3c:cf:21:af:10:81:4d:82:
                    6c:15:ea:7c:e6:d4:71:0f:a4:e5:a8:a3:d4:a5:2a:
                    87:e0:5b:76:a4:61:28:21:76:fe:3b:fb:f6:07:fd:
                    9a:9a:d3:63:50:d9:9d:2e:f1:4c:7d:69:35:25:44:
                    03:fa:08:44:61:cf:7a:58:8b:48:5d:29:b9:b9:e9:
                    74:18:42:77:e1:c3:83:ed:8c:f3:1c:e7:ad:8e:e7:
                    70:1b:35:df:b2:73:1a:0d:06:3c:4b:02:50:eb:b7:
                    74:5a:78:90:8b:56:40:e3:d7:61:27:ac:3e:99:1f:
                    2b:d6:35:1b:61:c9:a9:71:fb:ce:03:90:76:e8:2b:
                    6f:70:86:54:44:b3:d2:c5:60:8a:9a:31:78:e6:a6:
                    9f:1f:8d:37:35:61:c4:d5:b0:16:fa:cf:fa:7d:6e:
                    12:46:62:0b:ab:5c:18:04:4b:57:d3:4c:49:d5:49:
                    03:69:26:9f:92:c8:1d:e7:9f:16:40:48:f5:e8:a8:
                    e4:68:bb:8b:be:17:37:41:13:f9:24:5c:13:a0:64:
                    a8:d2:f6:7a:4e:0c:58:8d:b0:87:e6:3a:1f:47:33:
                    8d:bb:ce:09:05:6b:45:4c:03:03:11:cc:15:5d:a8:
                    f9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:FC:81:4D:5B:A0:AA:F8:89:4C:9F:9A:C9:FF:0D:0C:1A:5A:27:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.144.0/22
                IPv6:
                  2804:21ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264566

    Signature Algorithm: sha256WithRSAEncryption
         62:c9:b6:d6:a4:c4:58:6e:5a:ba:f5:13:91:02:90:86:df:61:
         b0:e1:e1:25:7b:d2:17:77:b9:c8:44:25:5f:29:f1:e3:10:ac:
         47:f8:99:c5:2c:8d:7b:89:57:96:59:8a:f5:55:4a:50:bb:18:
         2e:f1:20:2f:be:37:46:f0:17:e7:f7:84:38:54:f7:48:d0:86:
         cf:89:33:c4:6c:87:a6:3f:b5:8f:28:d3:c0:a0:db:54:61:1a:
         bf:a2:b1:0f:78:ef:d6:27:64:6c:4a:9b:52:f5:20:fa:a4:13:
         4f:40:12:e6:2e:aa:ea:e7:4b:7f:af:19:a6:c5:7b:be:21:a7:
         63:b1:1a:de:b5:70:a7:cb:84:17:b5:2e:ed:32:1f:a6:7a:02:
         6b:d1:ab:c1:01:0f:58:d9:b2:0b:7f:13:14:80:83:9e:ad:27:
         31:bc:f0:cd:8b:b8:2a:84:15:17:f4:0a:ca:fd:d3:a0:19:5d:
         e1:40:0f:58:38:f0:ee:6f:a4:95:0c:9d:aa:b3:1a:16:76:26:
         c3:0e:ed:09:27:f5:dc:bd:9a:49:1c:55:51:c0:82:56:33:00:
         ba:06:68:9d:89:34:a5:7b:a1:7f:76:12:26:db:e6:2f:fd:6f:
         51:ed:7f:54:c5:78:b6:45:55:a6:98:24:c5:ad:8e:2c:74:55:
         a9:56:03:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org