Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.cer
File:                     0F65E02527C7C2583942CEAED0FA68C7FFC806C0.cer (raw, json)
Hash identifier:          7HmzrUrEFA9D6BcBex3Mj+DwC+ckF/ZBCvFDWRm6owA=
Subject key identifier:   0F:65:E0:25:27:C7:C2:58:39:42:CE:AE:D0:FA:68:C7:FF:C8:06:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4405E7B2777107EDAF8A8308B2DA5FD5DB40DBAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Mar 2024 19:55:51 +0000
Certificate not after:    Wed 12 Mar 2025 20:00:51 +0000
Subordinate resources:    AS: 266941
                          IP: 45.225.48.0/22
                          IP: 2804:45a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:05:e7:b2:77:71:07:ed:af:8a:83:08:b2:da:5f:d5:db:40:db:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 13 19:55:51 2024 GMT
            Not After : Mar 12 20:00:51 2025 GMT
        Subject: CN=0F65E02527C7C2583942CEAED0FA68C7FFC806C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:6e:c5:87:95:eb:37:69:f3:b9:f5:e8:e7:
                    12:ad:93:03:f8:87:0e:d0:29:83:2f:4f:a5:4d:73:
                    0a:78:79:8b:b1:15:b3:d8:29:c5:1a:84:44:bb:d9:
                    f2:91:b9:f2:18:5f:2b:b3:00:3a:af:22:57:80:bf:
                    c6:93:a6:80:7d:7e:26:49:3c:f6:38:43:e4:9b:36:
                    29:2e:12:67:b9:aa:f4:b3:b2:20:cf:e9:ab:70:f4:
                    75:47:12:15:a3:5f:e0:d6:06:9a:68:d2:36:41:fe:
                    55:90:d8:fa:15:cc:ef:ac:27:52:6b:d2:83:f4:ca:
                    8c:56:3f:4b:ad:e6:19:99:b8:0a:8d:6d:7d:23:c9:
                    97:7b:c2:18:ed:90:b6:7a:91:b8:b1:f1:82:be:ee:
                    de:1a:be:cb:19:a4:1c:91:50:1f:4c:fb:e0:79:8b:
                    00:d9:35:1c:6d:27:ae:f1:20:a2:ab:a0:98:ee:94:
                    9d:a2:e2:f3:28:2a:4c:be:15:0e:84:a0:ef:f5:2c:
                    37:a0:0b:11:c8:22:96:6e:f2:ec:f2:f6:0b:52:e5:
                    6b:75:dc:ca:4e:00:28:53:5b:df:ba:94:3f:b1:a8:
                    fa:d5:c4:b6:4a:bc:0b:98:f1:1f:97:ce:b3:95:cb:
                    c6:90:2f:6b:c6:73:26:7a:18:dd:ff:0f:ae:d8:57:
                    32:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:65:E0:25:27:C7:C2:58:39:42:CE:AE:D0:FA:68:C7:FF:C8:06:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.48.0/22
                IPv6:
                  2804:45a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266941

    Signature Algorithm: sha256WithRSAEncryption
         47:17:74:26:58:46:34:0f:d8:a0:cb:82:5b:d0:dd:f7:3a:71:
         22:7b:1b:81:4f:5e:eb:a5:cd:d4:8e:71:0b:f2:1d:26:4a:16:
         c2:7d:36:2c:09:d0:92:f2:2b:8b:c9:8c:50:5c:af:5b:05:ee:
         79:3c:09:51:bf:65:bc:31:2b:3c:aa:98:ba:41:72:20:1e:8f:
         cb:d7:56:f9:54:e7:d2:41:68:b6:f3:c8:70:22:03:6d:62:3a:
         95:fa:72:2f:1f:92:ea:fd:66:d9:e1:b9:c4:ad:20:5d:09:a1:
         0c:5e:f9:a1:8c:cb:2f:57:00:14:96:c4:e5:3a:51:e5:e6:ed:
         c5:ff:a4:f7:0f:5b:4c:48:7b:15:49:e6:98:93:37:89:28:79:
         52:3d:05:6c:ad:4e:bf:b6:83:9d:52:38:38:b7:31:29:ef:f5:
         4f:ff:fd:38:f3:d4:ce:dc:f5:be:56:8a:e0:f2:7e:0c:1c:c3:
         56:c7:ff:b1:dd:b9:15:6e:fd:1c:7b:b8:60:9d:ee:18:d6:77:
         9b:9d:34:96:3d:59:c7:19:a4:16:b6:53:e7:24:2f:9f:32:71:
         89:f3:45:e0:c7:2d:e5:5c:6c:1b:7b:ec:18:fe:4e:cb:33:d2:
         43:f1:31:01:05:ba:56:55:bc:6e:09:cf:d5:4a:0e:ec:20:87:
         e0:2d:63:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org