Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6567B8933DD6155850B7ED35B2E5AE75B6525A78.cer
File:                     6567B8933DD6155850B7ED35B2E5AE75B6525A78.cer (raw, json)
Hash identifier:          S581alu3pt09tFkH1iHtgMaA1QKcOyBrYo2FJs+y3S4=
Subject key identifier:   65:67:B8:93:3D:D6:15:58:50:B7:ED:35:B2:E5:AE:75:B6:52:5A:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6BDBB95AB3B7AFAF9765C0460060172201C95E49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/6567B8933DD6155850B7ED35B2E5AE75B6525A78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Jun 2023 16:45:21 +0000
Certificate not after:    Thu 20 Jun 2024 16:50:21 +0000
Subordinate resources:    AS: 268929
                          IP: 45.176.40.0/22
                          IP: 2804:5cc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:db:b9:5a:b3:b7:af:af:97:65:c0:46:00:60:17:22:01:c9:5e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 22 16:45:21 2023 GMT
            Not After : Jun 20 16:50:21 2024 GMT
        Subject: CN=6567B8933DD6155850B7ED35B2E5AE75B6525A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:c6:8a:f5:d1:a0:52:86:cb:14:88:f9:67:
                    c7:70:93:04:36:e0:d7:da:7b:d6:32:00:fb:17:aa:
                    b5:15:ff:64:45:ec:07:21:96:6a:52:ea:a2:0c:a6:
                    37:91:2f:fd:56:cf:80:b7:b1:c5:bd:f3:cc:92:60:
                    c2:6c:db:c2:51:e0:07:0b:f5:ff:9c:53:90:b3:d3:
                    f7:a9:8a:76:5c:62:bb:1b:8d:38:9e:6a:44:bc:5f:
                    6d:81:33:f0:42:ca:ec:14:d1:5d:22:fa:44:90:93:
                    fe:42:c9:04:8d:1f:21:de:55:c0:cc:7b:85:a3:21:
                    77:29:77:85:b1:84:2e:b4:98:36:a0:38:9c:30:28:
                    0c:33:ff:a7:5f:76:60:40:fd:00:8e:00:68:b4:fd:
                    4f:9e:9d:62:ff:ca:4d:40:10:c8:88:7d:b4:c4:60:
                    61:21:d9:50:09:77:54:ed:9d:a4:2b:00:8d:c7:1f:
                    b6:6f:de:8a:c5:ff:e1:67:bb:fe:2b:3a:21:b7:c9:
                    b0:a6:aa:37:9d:31:ed:ea:19:b0:63:bc:10:81:b8:
                    4f:b3:17:e0:60:ed:e7:f0:ec:b7:40:72:01:fb:11:
                    71:c4:92:f1:24:e4:f9:96:e2:76:b2:55:99:36:46:
                    c1:fe:7b:c5:c8:96:48:8b:f5:07:62:f2:39:da:da:
                    73:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:67:B8:93:3D:D6:15:58:50:B7:ED:35:B2:E5:AE:75:B6:52:5A:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/6567B8933DD6155850B7ED35B2E5AE75B6525A78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.40.0/22
                IPv6:
                  2804:5cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268929

    Signature Algorithm: sha256WithRSAEncryption
         9b:35:9e:28:ac:16:ac:64:d9:86:2a:f3:96:9d:70:16:1a:56:
         05:d6:d8:b4:62:f1:1a:87:ce:08:5b:dc:8c:e0:d6:9a:7b:d7:
         52:27:6b:b4:5c:c1:49:19:ad:7d:cf:ab:a7:50:70:85:8b:7b:
         70:d4:85:01:a4:a9:22:9d:2b:89:a8:db:ea:ce:f9:5b:27:d1:
         07:c7:c5:3e:54:f7:41:07:ea:8f:cc:5a:5a:43:0b:77:0d:3d:
         5a:7b:71:fa:49:e1:b8:6e:24:7f:5e:42:2e:32:6e:93:d7:5e:
         d1:1e:4c:50:c8:fe:1e:37:c6:50:3f:31:22:ed:8c:66:dd:b8:
         ff:fd:05:12:4d:ac:21:b0:a4:fb:23:a3:9e:1f:3d:a1:e4:98:
         d4:45:26:4d:3c:4f:17:b3:9d:99:ca:49:df:37:0d:76:b8:23:
         9f:72:ea:05:ca:5f:c2:13:40:1c:35:ee:7c:e4:42:7a:94:2a:
         c8:04:f6:64:17:85:61:cd:2c:b5:f5:1c:bb:53:a6:3e:d3:8b:
         a1:3c:4b:12:96:fc:f5:ad:20:3c:e6:50:26:cc:49:cf:01:47:
         a1:82:d0:00:1a:ab:8a:ea:d4:67:65:9f:88:17:99:d1:2f:fb:
         47:d2:f3:d9:2a:33:16:8d:51:f3:ce:61:7d:d7:96:de:a3:52:
         1c:c7:a0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org