Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/64561B012A042B46FB9E4A5DA20D2567F2603A9C.cer
File:                     64561B012A042B46FB9E4A5DA20D2567F2603A9C.cer (raw, json)
Hash identifier:          zsp9RQYV/XOJ3mu8lvYC16qja5g/YSWp3o5QLL+8vR4=
Subject key identifier:   64:56:1B:01:2A:04:2B:46:FB:9E:4A:5D:A2:0D:25:67:F2:60:3A:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       13E2311420D882B1C1C56DF816AA3EFF9D1AB8B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/64561B012A042B46FB9E4A5DA20D2567F2603A9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Mar 2024 13:52:06 +0000
Certificate not after:    Wed 12 Mar 2025 13:57:06 +0000
Subordinate resources:    AS: 263276
                          IP: 45.178.124.0/22
                          IP: 168.90.224.0/22
                          IP: 168.195.180.0/22
                          IP: 179.108.248.0/21
                          IP: 191.243.16.0/20
                          IP: 2804:1638::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e2:31:14:20:d8:82:b1:c1:c5:6d:f8:16:aa:3e:ff:9d:1a:b8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 13 13:52:06 2024 GMT
            Not After : Mar 12 13:57:06 2025 GMT
        Subject: CN=64561B012A042B46FB9E4A5DA20D2567F2603A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:55:58:08:47:b0:2c:45:ca:33:08:fd:cb:b2:
                    91:1a:08:1b:70:73:dd:da:33:f4:af:c8:be:d3:cb:
                    1e:89:7c:c7:9f:c1:6b:ac:57:90:64:6c:e8:9f:9e:
                    63:5f:4d:33:6c:f8:e7:31:f4:82:d3:ba:51:3f:24:
                    96:8a:ab:53:3b:36:31:5f:af:87:9e:77:eb:85:73:
                    0b:57:27:a1:53:bb:8e:aa:99:81:ee:59:b0:e6:ad:
                    14:71:04:ce:19:2b:96:13:20:69:13:e5:81:df:97:
                    62:68:e4:22:74:da:5c:99:33:ad:00:ab:2c:65:f6:
                    ee:e0:5e:a7:67:83:fb:5f:b2:7b:ac:19:5f:d3:2b:
                    37:fd:7a:2a:bc:c9:ac:e1:42:a8:2f:eb:9c:39:d9:
                    e4:04:4a:68:cf:e8:8c:6e:37:61:4c:94:b2:ca:90:
                    e2:5d:af:6f:69:ba:d9:47:5d:17:70:1b:db:e0:38:
                    fe:f3:32:ea:16:01:43:9e:9f:a0:8e:32:5a:8f:42:
                    d7:53:38:cc:ef:ce:5e:1e:dc:9d:d5:2a:17:fe:02:
                    35:1a:09:30:43:1f:f6:38:e7:32:46:13:d9:10:40:
                    f3:f3:1c:8c:5c:fd:03:91:c5:76:22:7a:bf:14:0f:
                    89:b4:3d:ec:1e:fb:ea:52:9e:0a:ad:9c:d4:f1:1a:
                    5b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:56:1B:01:2A:04:2B:46:FB:9E:4A:5D:A2:0D:25:67:F2:60:3A:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/64561B012A042B46FB9E4A5DA20D2567F2603A9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.124.0/22
                  168.90.224.0/22
                  168.195.180.0/22
                  179.108.248.0/21
                  191.243.16.0/20
                IPv6:
                  2804:1638::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263276

    Signature Algorithm: sha256WithRSAEncryption
         96:b9:7d:c9:18:be:80:4c:62:28:e2:44:2d:dc:81:91:94:48:
         89:71:c4:64:1d:ec:87:ce:36:4c:b5:35:1f:e2:af:f0:f0:3a:
         4a:b9:2b:11:c7:51:eb:e9:be:43:8f:48:db:18:22:85:00:e8:
         5a:40:98:f1:47:77:df:ca:f1:fc:63:dd:dc:f3:48:79:38:fa:
         05:41:43:2b:21:c2:8d:71:d0:45:cf:c4:0d:e1:40:19:91:58:
         f5:8c:fa:58:36:78:b0:50:c2:d0:35:74:4d:9f:ba:ce:d3:3f:
         48:d0:16:68:15:df:84:6e:2f:a3:7e:7c:dd:24:83:22:7f:fb:
         a0:08:f2:fe:e8:00:ce:57:6e:c8:ce:ef:7d:37:5a:57:43:5c:
         11:ec:f7:24:dd:e2:6a:24:24:55:01:b2:cb:a0:6e:09:d1:f3:
         1b:77:3f:8a:72:bd:e9:71:dd:23:ce:fb:42:09:84:8d:f1:68:
         cb:a2:d4:a5:20:ac:82:b6:5b:3f:a4:36:68:4f:81:0f:e1:bb:
         d0:d1:9a:6c:1b:ee:42:3d:9b:6b:80:9e:5d:6e:8c:c3:cc:fe:
         3f:c0:8e:1d:a6:83:df:5d:82:cb:86:a5:43:76:0d:dc:fe:85:
         2e:eb:7a:70:ef:1e:bd:b5:49:75:c3:b5:91:ed:4d:71:31:9e:
         4a:e3:32:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org