Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/65AF846D190D40EF3470EF97836AA9660579D894.cer
File:                     65AF846D190D40EF3470EF97836AA9660579D894.cer (raw, json)
Hash identifier:          utSmD7n1zOfMpAMYWBVOH5ieHeKsHPzk77u4NxHwmss=
Subject key identifier:   65:AF:84:6D:19:0D:40:EF:34:70:EF:97:83:6A:A9:66:05:79:D8:94
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       45B0550D2FF1B836A8856E2AD30D1C5D6536253F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/65AF846D190D40EF3470EF97836AA9660579D894.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Oct 2023 18:51:30 +0000
Certificate not after:    Wed 09 Oct 2024 18:56:30 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b0:55:0d:2f:f1:b8:36:a8:85:6e:2a:d3:0d:1c:5d:65:36:25:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 11 18:51:30 2023 GMT
            Not After : Oct  9 18:56:30 2024 GMT
        Subject: CN=65AF846D190D40EF3470EF97836AA9660579D894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:9e:dc:99:51:9f:2d:6c:96:c8:c5:7e:68:
                    4f:45:d0:10:ad:48:fb:70:ad:ee:2c:5d:0c:80:12:
                    fc:bf:af:08:4d:6b:11:bb:8d:65:7d:48:0d:4e:7e:
                    90:2e:34:dc:a4:ac:3e:5c:1f:0f:9b:15:1c:08:92:
                    b6:c5:c1:9e:73:34:d8:fd:c7:20:b4:0f:f7:67:ae:
                    1e:5f:e2:33:7e:36:64:64:09:16:d4:0e:3f:ab:2f:
                    60:a8:ac:40:a4:06:51:df:7a:67:d3:12:c2:01:93:
                    59:2a:4c:e4:0f:58:8a:a2:3a:8f:f7:91:61:cb:e1:
                    20:90:b3:05:44:b0:9d:45:36:02:e7:cb:73:7c:60:
                    6b:0d:11:90:f7:ad:28:e4:98:4b:65:c3:eb:a3:8f:
                    f1:33:ff:79:a6:48:0f:c8:e6:c1:d1:40:68:c5:a2:
                    2a:16:ef:93:af:45:8f:53:3f:46:2b:a0:0d:7f:e6:
                    b1:99:dd:4a:6c:28:43:17:a6:bd:e2:ed:dc:2f:e1:
                    5a:aa:dc:49:16:47:b4:2c:38:a6:0f:64:31:69:e3:
                    7f:ca:5a:de:a7:d1:1f:9e:26:88:0b:6d:13:ae:41:
                    8f:f1:35:cf:65:f5:3d:a4:36:57:2b:49:af:22:bb:
                    b4:49:f4:8e:02:27:4d:68:9d:a3:a0:b5:8d:8d:94:
                    6d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:AF:84:6D:19:0D:40:EF:34:70:EF:97:83:6A:A9:66:05:79:D8:94
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/65AF846D190D40EF3470EF97836AA9660579D894.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         93:07:21:d1:9c:4b:22:3b:e6:58:ce:03:a8:d2:7c:7f:e4:3c:
         60:4c:07:05:51:bc:28:2d:0a:c3:e7:33:0b:d9:aa:35:bb:24:
         40:4e:72:4f:db:09:fe:fc:4d:37:8d:3d:19:71:fd:62:f2:bd:
         48:0c:62:88:57:f7:99:a8:df:eb:e8:9e:c0:4a:f6:8d:a4:f7:
         8a:6c:3e:ce:08:ab:ed:5f:51:c9:75:6f:44:8e:19:3d:9d:d3:
         26:89:39:09:8c:c5:f3:89:19:87:4f:3a:9b:8a:2f:c8:8d:5c:
         10:85:9e:30:5a:7b:db:a6:69:1d:6d:89:fb:59:3f:cd:fb:5f:
         49:02:d1:c2:47:83:01:40:7a:c7:17:ce:34:9a:eb:5a:e4:6d:
         f0:75:06:a8:f2:1a:b5:3c:0f:42:5a:ca:06:49:d2:e2:07:93:
         ef:86:84:5d:fc:44:1f:b8:eb:fb:8c:ab:02:82:9a:14:1a:ce:
         a3:94:b2:50:dd:cc:bc:c6:32:92:8d:b3:8f:a9:64:23:f7:7b:
         bb:63:ad:64:f6:40:22:b5:dc:cb:c1:81:ee:c1:85:a4:d7:e2:
         20:31:7f:16:3e:c6:a6:23:c7:9d:33:2d:ea:30:cc:c2:93:e2:
         9d:b0:e5:03:48:01:48:69:6f:65:c7:e8:26:f1:4b:be:3e:6b:
         96:88:40:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org