Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.cer
File:                     14DAB675B77AC194533C86DBFBAF31C52FE203FB.cer (raw, json)
Hash identifier:          EOFBTv74nEH+3OhiQ5l7yoFoT9NpZS9bSls+End0ZzA=
Subject key identifier:   14:DA:B6:75:B7:7A:C1:94:53:3C:86:DB:FB:AF:31:C5:2F:E2:03:FB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       65F7318AD4344B1EC66658F60E761A92DF9AAFAD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Jul 2023 01:54:58 +0000
Certificate not after:    Thu 04 Jul 2024 01:59:58 +0000
Subordinate resources:    AS: 265311
                          IP: 168.121.112.0/22
                          IP: 2804:2de8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f7:31:8a:d4:34:4b:1e:c6:66:58:f6:0e:76:1a:92:df:9a:af:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  6 01:54:58 2023 GMT
            Not After : Jul  4 01:59:58 2024 GMT
        Subject: CN=14DAB675B77AC194533C86DBFBAF31C52FE203FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:da:a6:15:85:8c:fe:42:40:cc:ae:32:88:
                    6c:7f:37:5d:16:dd:47:51:54:8c:c4:84:55:50:8d:
                    92:74:54:ac:ee:fa:82:f4:af:2f:39:2a:50:e7:0b:
                    19:0c:7b:4c:3a:b0:69:11:b2:2d:da:ba:ab:20:ee:
                    85:02:c1:90:e4:d7:a1:59:d2:b1:f8:20:cf:6c:96:
                    7f:00:7f:e3:bf:ac:99:c9:07:16:b1:50:72:e9:e7:
                    f9:a8:57:f5:af:f5:2a:8a:23:28:da:05:af:44:ad:
                    3a:00:1b:ba:55:9e:6c:3f:75:a6:63:1e:c3:dc:0e:
                    dc:bd:a7:6a:c8:de:b4:3c:a5:66:64:8c:65:6f:7f:
                    85:75:cd:99:58:01:5b:36:55:cb:24:39:ad:04:83:
                    aa:54:86:d8:9b:c7:7b:89:f9:24:bb:44:c2:c6:df:
                    a9:99:f6:3a:18:ec:63:e4:c7:6a:47:5e:fc:33:21:
                    75:c3:04:97:88:f0:84:cf:d0:f9:67:a2:0d:34:ea:
                    65:b5:0a:89:20:fb:40:5d:01:76:a0:98:ba:50:cf:
                    19:b0:6d:8e:1c:0b:f5:0e:1b:f6:c0:ba:87:c3:3d:
                    71:47:35:0d:4a:6e:94:0b:41:50:d8:3b:47:9d:56:
                    e9:a5:f0:e1:6f:86:31:84:48:d0:90:4b:65:f3:85:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:DA:B6:75:B7:7A:C1:94:53:3C:86:DB:FB:AF:31:C5:2F:E2:03:FB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.112.0/22
                IPv6:
                  2804:2de8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265311

    Signature Algorithm: sha256WithRSAEncryption
         14:72:63:15:84:1c:32:82:4c:e2:03:70:3a:29:5c:56:0c:a4:
         b6:9a:d9:b3:4a:81:00:8a:49:c1:d7:f7:c1:c1:ea:be:aa:d7:
         47:e8:94:15:85:a2:4e:ce:1e:59:c1:eb:9a:4c:43:e0:fd:f6:
         29:bd:ef:d6:65:82:7b:e0:61:be:65:e1:6e:49:80:83:70:e1:
         99:59:8f:d3:62:47:ba:93:b4:7a:35:64:e7:a6:3a:64:2c:de:
         fb:8a:3c:10:71:ef:2c:9e:37:6a:13:c7:86:80:f0:e9:59:5e:
         13:f0:b3:cb:93:3c:a4:8f:9a:dc:bd:6a:f9:94:24:47:cd:33:
         36:a0:45:9d:8e:d6:03:50:e1:d1:7f:b4:d5:f3:62:e1:20:30:
         1c:fa:1b:ca:60:ec:41:b4:5d:e4:af:35:65:dd:bd:0b:e0:4f:
         2a:0e:47:ab:ce:83:a6:85:ad:87:45:c9:0e:2c:fe:bd:de:67:
         ad:3c:0c:da:eb:d4:b9:2e:2e:7e:6c:56:a2:d8:e5:f6:fc:52:
         76:1c:59:f4:02:fa:9a:71:39:c7:48:c4:b2:cb:18:16:58:53:
         be:9c:15:e6:51:47:79:0e:e1:91:7e:dd:2a:12:b5:85:66:21:
         a6:eb:63:b2:c9:5c:ad:31:d9:c2:04:e2:14:02:b3:19:67:4a:
         e6:ff:92:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org