Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0067DCB299F651ACFA1334059D304AD88AD8B525.cer
File:                     0067DCB299F651ACFA1334059D304AD88AD8B525.cer (raw, json)
Hash identifier:          RaRXP+7dfugpYIj6yGgdCM0o8wNXFoT/UvvoUEIeRc8=
Subject key identifier:   00:67:DC:B2:99:F6:51:AC:FA:13:34:05:9D:30:4A:D8:8A:D8:B5:25
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       045C964A80C636D29280D6FE7942D7022FDE9027
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/0067DCB299F651ACFA1334059D304AD88AD8B525.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Feb 2023 11:25:13 +0000
Certificate not after:    Tue 27 Feb 2024 11:30:13 +0000
Subordinate resources:    AS: 262854
                          IP: 168.0.252.0/22
                          IP: 177.10.192.0/21
                          IP: 177.11.220.0/22
                          IP: 179.127.192.0/21
                          IP: 186.250.227.0/24
                          IP: 2804:109c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5c:96:4a:80:c6:36:d2:92:80:d6:fe:79:42:d7:02:2f:de:90:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 11:25:13 2023 GMT
            Not After : Feb 27 11:30:13 2024 GMT
        Subject: CN=0067DCB299F651ACFA1334059D304AD88AD8B525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:8b:b6:f7:ac:18:95:4a:5b:58:f1:90:61:
                    90:e1:df:25:a6:f0:ca:f6:53:35:ea:c6:d5:3c:a8:
                    f8:87:94:49:3f:e6:ed:ab:6b:32:fe:66:11:82:47:
                    fd:ef:5e:9d:2c:e0:99:42:57:66:c8:c7:0c:cd:ba:
                    f4:38:b7:26:1f:d0:3f:62:d5:a7:4d:94:57:50:9b:
                    5c:3d:d3:48:d1:31:d5:93:07:66:2a:e3:43:97:56:
                    75:5a:10:bd:fe:b2:09:c9:0e:ef:af:11:6a:af:ae:
                    19:ee:62:85:b4:1f:16:a9:a1:61:6a:41:c8:da:ef:
                    e6:0b:a2:ac:50:44:b1:d8:88:15:bb:96:39:33:cc:
                    20:40:4a:40:78:31:4f:e3:c2:66:39:c3:d2:f3:7e:
                    5d:b4:3a:19:bd:fc:4f:e3:9b:f0:01:be:f6:5c:13:
                    44:28:66:dd:58:0b:1d:ab:ba:c7:47:70:03:72:55:
                    12:b1:aa:d9:c9:fa:8d:48:ea:d6:55:09:bf:4d:01:
                    f9:5c:43:d6:dc:0d:61:e5:9c:2e:d7:57:36:58:48:
                    d1:e7:db:c0:fb:3c:51:18:b9:d5:b1:f0:08:ea:ad:
                    49:22:d2:ef:44:cf:43:0f:a9:b4:2c:b7:41:8e:d9:
                    8a:4f:b2:bf:6a:6c:e3:ef:04:a9:01:df:3d:ab:14:
                    0e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:67:DC:B2:99:F6:51:AC:FA:13:34:05:9D:30:4A:D8:8A:D8:B5:25
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/0067DCB299F651ACFA1334059D304AD88AD8B525.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.252.0/22
                  177.10.192.0/21
                  177.11.220.0/22
                  179.127.192.0/21
                  186.250.227.0/24
                IPv6:
                  2804:109c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262854

    Signature Algorithm: sha256WithRSAEncryption
         72:69:a3:99:a3:99:dc:7a:b5:bb:6b:32:31:c5:9f:f7:8f:3a:
         cc:2b:cb:54:70:7c:40:9f:38:27:d6:e1:7f:c9:da:1a:eb:36:
         f5:ba:27:f2:f5:b7:04:d6:a4:78:39:ed:8a:69:89:87:58:bb:
         1e:df:81:70:50:4f:90:9e:4a:dc:a9:aa:5d:9f:34:bf:9c:a0:
         ef:2c:1e:12:d6:df:d7:e4:73:74:55:ae:44:23:2a:c6:16:2f:
         60:cc:fe:ad:e2:22:ad:82:f7:f4:91:86:e2:51:f5:8b:86:6d:
         3c:44:a5:4b:7e:03:5e:40:0c:51:6c:d2:5a:00:13:4f:7b:a4:
         00:db:62:32:70:60:65:8e:34:86:9e:b6:8c:7c:34:e4:2a:e2:
         19:fd:f6:ed:81:43:eb:b3:03:dc:9f:ed:d6:15:0d:a5:35:1d:
         ce:8c:49:00:48:60:d8:84:4c:93:d6:23:0e:ac:55:96:46:69:
         bf:05:a0:dc:3e:0b:53:6e:06:c1:c1:fa:f7:cd:b4:67:5f:f9:
         71:03:af:c3:66:05:58:60:ef:fb:ca:87:94:70:42:5d:91:9d:
         90:bc:8d:fb:ba:b0:bc:af:56:63:53:00:fe:eb:09:e3:5f:6a:
         93:c1:12:e6:7a:35:ae:6d:7a:dc:cc:40:3e:18:71:11:ed:9f:
         f0:90:f5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org