Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/65501EFC3B1110CB16C391F797BB378146CDCE0C.cer
File:                     65501EFC3B1110CB16C391F797BB378146CDCE0C.cer (raw, json)
Hash identifier:          ovrzS9vy8qcisaRc1LiAXqsF8iWV+ZSmdGtYpVGk0nA=
Subject key identifier:   65:50:1E:FC:3B:11:10:CB:16:C3:91:F7:97:BB:37:81:46:CD:CE:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3819660E72AC6D2D7897A747E8DE09F5E282B01B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/0/65501EFC3B1110CB16C391F797BB378146CDCE0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 12:46:51 +0000
Certificate not after:    Tue 14 May 2024 12:51:51 +0000
Subordinate resources:    AS: 264159
                          IP: 138.99.16.0/22
                          IP: 168.196.64.0/22
                          IP: 2804:2364::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:19:66:0e:72:ac:6d:2d:78:97:a7:47:e8:de:09:f5:e2:82:b0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 16 12:46:51 2023 GMT
            Not After : May 14 12:51:51 2024 GMT
        Subject: CN=65501EFC3B1110CB16C391F797BB378146CDCE0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:92:ee:74:2c:60:56:91:ac:e9:27:a3:9b:b8:
                    42:c9:54:a1:d1:4b:00:6e:98:2f:a9:9e:ad:f9:f2:
                    16:bd:83:45:ed:9c:f2:1d:56:d1:bf:a3:1f:83:ca:
                    af:73:c0:8c:ff:74:5f:68:59:6a:ef:df:ae:2b:c8:
                    62:7c:a9:b3:9a:37:d3:0e:d2:71:09:c1:cd:36:88:
                    72:dc:2c:bd:d7:ba:e1:e9:d8:cd:e1:02:08:0b:88:
                    f9:3b:11:50:83:e4:2a:44:10:26:8a:79:33:eb:d1:
                    e4:64:9f:66:08:b1:98:91:39:a0:f1:ec:fd:a2:72:
                    c3:c7:af:34:a4:55:ef:f0:a1:04:31:f5:4e:dd:9b:
                    ab:b7:cc:41:85:25:76:23:e8:25:2b:c4:4c:ff:12:
                    1f:e8:56:8b:f1:7a:4b:c8:3e:3c:30:15:ca:79:8d:
                    f8:e5:b5:e0:7c:ed:97:4b:fe:6d:35:15:2c:7c:87:
                    38:00:b3:ae:2a:57:38:73:ae:f4:72:fa:4a:7a:4b:
                    16:7f:08:28:d2:00:49:55:bc:48:c6:79:1b:5d:ea:
                    79:16:e5:8a:37:e3:84:5e:63:5d:9d:cc:6c:c8:ed:
                    85:9e:82:cd:76:80:a6:8b:b2:2a:bf:d8:c8:c6:24:
                    fe:a2:5f:a7:1f:92:47:ff:25:f8:7b:c7:35:a6:b6:
                    a0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:50:1E:FC:3B:11:10:CB:16:C3:91:F7:97:BB:37:81:46:CD:CE:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/0/65501EFC3B1110CB16C391F797BB378146CDCE0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.16.0/22
                  168.196.64.0/22
                IPv6:
                  2804:2364::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264159

    Signature Algorithm: sha256WithRSAEncryption
         16:66:68:f6:3c:cc:1b:df:b6:85:0f:5b:d2:33:f6:96:2e:f7:
         ba:0f:2e:4a:a0:4e:cd:c4:d4:2a:2e:50:1c:c4:18:77:74:02:
         ad:37:69:5c:f2:81:c4:8c:56:5e:9d:47:7c:95:78:9b:e1:90:
         30:fc:b3:72:08:f0:37:44:76:b4:88:f9:4b:66:03:01:bb:36:
         d2:b0:a0:72:10:97:be:ce:13:2c:0a:e2:29:03:a4:76:03:d8:
         db:82:fa:42:75:70:a9:4c:76:f6:4c:c4:75:45:6d:90:2f:94:
         bd:05:5d:49:51:ce:cf:2c:68:3a:70:2a:f7:9f:a0:4f:f3:ef:
         6c:bf:d1:0a:02:35:5b:20:35:9b:f1:e8:26:be:0f:2a:e6:06:
         2c:b2:73:c5:21:63:5d:93:14:4d:fe:37:16:de:f4:d1:eb:55:
         fc:3b:8f:45:b8:19:7b:43:1a:c1:f8:53:5d:87:25:5e:ac:65:
         0a:27:92:21:8f:49:c9:03:4f:d4:47:89:c8:2c:7b:2d:5f:88:
         1d:aa:8c:e3:84:71:2c:99:95:de:76:84:0f:1f:30:8b:5b:6a:
         6b:fa:9a:7f:a9:b4:db:93:65:06:c7:12:02:f8:98:d1:25:04:
         44:89:f2:34:3f:1a:0c:48:ef:20:a1:8a:26:c3:0c:90:de:9d:
         4d:7d:3b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org