Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
File:                     2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer (raw, json)
Hash identifier:          Cyz04RcNEOTennPh9onhxZsZwo2khKG82m/Nl+YBqkw=
Subject key identifier:   26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       63062DE989DF618EA615BC1878B3FE1E61E8E694
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Sep 2022 20:07:36 +0000
Certificate not after:    Wed 27 Sep 2023 20:12:36 +0000
Subordinate resources:    AS: 271724
                          IP: 131.221.68.0/22
                          IP: 138.117.124.0/22
                          IP: 143.255.112.0/22
                          IP: 170.0.204.0/22
                          IP: 170.245.100.0/22
                          IP: 177.66.64.0/21
                          IP: 177.75.192.0/19
                          IP: 179.191.128.0/19
                          IP: 187.108.96.0/20
                          IP: 187.110.208.0/20
                          IP: 189.50.144.0/20
                          IP: 200.94.240.0/22
                          IP: 2804:8004::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:06:2d:e9:89:df:61:8e:a6:15:bc:18:78:b3:fe:1e:61:e8:e6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 28 20:07:36 2022 GMT
            Not After : Sep 27 20:12:36 2023 GMT
        Subject: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4c:88:ee:93:a4:d1:87:96:2e:94:4f:40:0b:
                    7e:51:aa:00:67:1d:98:2f:da:82:ce:df:64:cb:3c:
                    55:6a:65:5f:95:d9:c6:08:f6:ca:ce:96:e0:c6:94:
                    e5:7c:e9:0f:11:dd:e5:96:af:8f:00:7b:86:e2:d9:
                    e2:27:8b:9d:7a:c0:c3:68:ef:36:95:7c:ca:a7:09:
                    e1:21:0f:cf:9f:eb:d9:6a:62:33:87:7e:50:f6:0a:
                    af:35:4f:71:8e:ea:d5:3c:1a:24:eb:ec:5c:36:56:
                    14:e4:5d:a0:4f:98:cb:d8:e0:a9:1f:1a:55:e5:13:
                    ad:f6:0c:63:a3:01:39:68:c9:31:1a:27:ab:6e:7d:
                    16:8d:72:ad:2c:cf:9b:ca:ac:f5:ee:a3:38:fa:05:
                    ab:57:62:c8:66:0b:3c:3c:cb:1e:56:14:df:a7:a0:
                    b6:80:9c:5e:fc:85:eb:76:25:6d:fa:de:04:2b:11:
                    08:4d:87:d4:37:d4:02:ce:ae:39:bb:ed:95:68:ff:
                    d8:64:79:d2:99:76:22:fb:84:f2:f6:9d:7e:91:00:
                    b7:35:d2:78:58:6b:bc:2c:a4:3b:19:3c:37:32:db:
                    c4:bd:ce:d7:d8:88:b4:e6:01:de:be:71:36:0a:03:
                    3e:f8:18:51:69:24:d4:4e:32:fe:5a:bd:84:b8:9e:
                    17:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.68.0/22
                  138.117.124.0/22
                  143.255.112.0/22
                  170.0.204.0/22
                  170.245.100.0/22
                  177.66.64.0/21
                  177.75.192.0/19
                  179.191.128.0/19
                  187.108.96.0/20
                  187.110.208.0/20
                  189.50.144.0/20
                  200.94.240.0/22
                IPv6:
                  2804:8004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271724

    Signature Algorithm: sha256WithRSAEncryption
         8e:5d:0f:f4:21:87:56:c9:df:84:48:68:ad:92:88:3e:34:cf:
         3e:af:78:51:f1:20:92:c7:64:27:f9:fb:d6:8e:5b:6e:9c:01:
         9d:f0:1b:3b:c9:8d:ba:4e:17:23:d1:a7:0d:96:e9:44:4b:1a:
         81:61:34:89:5d:65:0e:46:3e:32:87:75:51:dd:3a:e2:b6:b7:
         df:6e:78:88:89:a6:aa:c2:e2:97:f0:4c:90:19:13:18:d4:5d:
         7f:00:33:35:e5:26:ac:3f:01:10:50:39:37:ae:d5:33:89:90:
         c1:ec:57:bf:76:8a:c4:f6:32:67:18:bf:6f:90:7e:cf:2b:c9:
         ed:ab:b8:dc:87:b5:07:ca:bf:87:1e:e9:f7:a8:4b:81:fe:b4:
         12:87:8f:62:80:02:a4:e8:c5:f6:b3:72:51:66:b4:39:1f:4d:
         c5:12:e9:d7:81:c1:a1:c6:63:05:d1:ff:bc:a4:67:7b:cf:24:
         3e:d8:ef:5a:86:42:7e:5f:f3:41:ae:74:53:02:78:81:13:51:
         ea:71:d9:70:f5:a5:c7:49:3a:c6:57:73:4b:ac:d8:91:01:e8:
         0d:35:4d:1a:50:06:0f:3c:36:dd:d7:db:be:4f:14:23:63:9e:
         d9:6e:5b:fe:94:18:bd:93:75:df:30:07:cb:39:b7:ee:d4:2d:
         91:7e:c0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org