Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/64C7B95B3C16BF2596C51FABDFFD99A2E7C612A1.cer
File:                     64C7B95B3C16BF2596C51FABDFFD99A2E7C612A1.cer (raw, json)
Hash identifier:          AGZIMekU3d1wUm41ramKbaFXrCY9gWOwRwSTQFGryMQ=
Subject key identifier:   64:C7:B9:5B:3C:16:BF:25:96:C5:1F:AB:DF:FD:99:A2:E7:C6:12:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       08B31A0AA7A67332A8BCA4E280EBC6F15E56F3E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/64C7B95B3C16BF2596C51FABDFFD99A2E7C612A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Apr 2024 13:02:50 +0000
Certificate not after:    Tue 01 Apr 2025 13:07:50 +0000
Subordinate resources:    AS: 265266
                          IP: 168.90.40.0/22
                          IP: 2804:2d34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b3:1a:0a:a7:a6:73:32:a8:bc:a4:e2:80:eb:c6:f1:5e:56:f3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  2 13:02:50 2024 GMT
            Not After : Apr  1 13:07:50 2025 GMT
        Subject: CN=64C7B95B3C16BF2596C51FABDFFD99A2E7C612A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:29:58:1d:09:2c:f7:c4:6f:61:fc:c6:fa:
                    0e:f2:35:df:d8:03:dd:8d:ad:a6:34:4c:27:46:40:
                    f5:9e:49:dd:5f:8a:d0:94:ba:5a:ce:03:56:2e:53:
                    2a:ab:cd:78:9c:91:31:4b:b1:d3:3b:7b:eb:72:b1:
                    09:21:e7:95:1c:10:83:74:37:90:e4:88:3a:a3:ab:
                    f9:11:95:2c:9d:29:94:b4:a7:6a:4b:79:a7:94:02:
                    64:92:1b:f0:eb:7d:19:a0:fa:02:30:96:63:9e:47:
                    a8:2c:19:09:f2:9d:b9:c4:74:c5:22:15:cb:a3:6c:
                    28:f4:96:50:a3:c7:0f:ca:4d:bf:6d:5e:cd:fd:3c:
                    27:52:45:e8:42:31:e9:b4:76:7b:dd:7d:17:29:ba:
                    6b:ce:8b:96:64:19:51:1d:81:a8:d1:c2:3c:9f:00:
                    be:3f:a2:cf:22:d8:51:50:bf:87:37:6d:7d:c6:0f:
                    14:63:bf:17:9c:65:54:12:ab:c0:e1:a5:f9:cd:bf:
                    d4:eb:3d:5e:0d:12:44:1b:68:da:8c:23:0f:74:87:
                    98:8b:d3:40:a7:30:70:36:73:fd:e7:81:ac:a4:e7:
                    8c:d9:32:7a:fc:38:e7:dc:fe:9b:f0:ec:bc:f3:64:
                    86:f3:36:62:72:72:6c:e3:0d:4d:9e:88:43:cc:91:
                    0c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:C7:B9:5B:3C:16:BF:25:96:C5:1F:AB:DF:FD:99:A2:E7:C6:12:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/64C7B95B3C16BF2596C51FABDFFD99A2E7C612A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.40.0/22
                IPv6:
                  2804:2d34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265266

    Signature Algorithm: sha256WithRSAEncryption
         87:78:56:00:b4:cb:6c:03:30:f7:56:da:0d:d7:16:54:55:a9:
         53:a7:c9:9c:2b:02:3a:99:64:9e:4a:a6:27:02:13:11:8f:74:
         ce:66:9a:85:68:c6:7e:ba:9e:d5:fa:33:f6:fe:1e:01:94:dc:
         c0:9a:dc:22:b3:10:74:73:4c:14:84:8e:df:59:be:31:fc:4e:
         27:74:c4:a3:5a:f1:b8:6e:b8:d2:ad:0d:1c:4f:3e:53:48:29:
         04:42:0d:ed:62:c6:d5:b5:9a:a3:a6:7c:3a:1e:96:03:1e:1c:
         cc:72:e9:30:38:87:89:8d:73:49:f1:0d:f2:d3:4d:39:eb:45:
         44:aa:e3:36:bf:f3:1b:80:1a:ba:dc:cb:da:46:03:45:42:eb:
         65:fe:c6:5e:2d:a0:60:68:3d:d0:67:c9:b4:9c:e3:01:ba:9d:
         2f:0f:cb:af:77:92:7e:b8:83:90:c8:82:41:29:3d:42:4d:74:
         1d:68:db:ee:87:f5:c2:3c:01:da:63:e6:e7:66:76:87:07:59:
         46:2f:90:36:2e:f2:0c:12:ae:ec:26:7a:7e:2a:f3:c4:42:a9:
         a3:ac:fb:32:5c:62:d4:c9:9f:4e:92:df:6c:88:16:ba:61:d2:
         f6:45:ea:ab:65:f7:e9:ad:4c:25:f5:44:d3:ba:d5:bc:20:62:
         fc:55:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org