Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/65701EC534316BB42767D8A355E77A014EED2D7C.cer
File:                     65701EC534316BB42767D8A355E77A014EED2D7C.cer (raw, json)
Hash identifier:          WXuYLWSUWxiDn4LXWq61ND0ewGm+vsaZ/OboMskYL3U=
Subject key identifier:   65:70:1E:C5:34:31:6B:B4:27:67:D8:A3:55:E7:7A:01:4E:ED:2D:7C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5564C84C68DBDCF0B6EF66C03335B8D320A4DC63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/65701EC534316BB42767D8A355E77A014EED2D7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 03:38:25 +0000
Certificate not after:    Wed 04 Dec 2024 03:43:25 +0000
Subordinate resources:    AS: 270760
                          IP: 179.109.116.0/22
                          IP: 2804:70fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:64:c8:4c:68:db:dc:f0:b6:ef:66:c0:33:35:b8:d3:20:a4:dc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 03:38:25 2023 GMT
            Not After : Dec  4 03:43:25 2024 GMT
        Subject: CN=65701EC534316BB42767D8A355E77A014EED2D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:7e:77:90:45:80:d9:84:dc:d9:12:f6:b8:
                    b2:59:b3:27:be:5a:72:7e:ab:8c:87:6c:32:df:e5:
                    a9:41:07:e8:47:a6:a6:b2:25:1d:a9:23:c6:ad:c9:
                    b1:23:0f:cc:7a:86:28:2e:5c:de:af:64:1b:96:c0:
                    16:3b:b3:cd:76:cc:50:58:fc:fd:7a:d7:f7:29:cf:
                    3e:66:7e:93:39:f7:02:26:e3:4c:c5:38:f4:b4:c0:
                    5b:79:72:00:c3:14:90:0f:cd:95:09:a1:b2:57:97:
                    f4:63:f9:e0:cd:37:0a:0d:1e:d4:4a:1d:54:cb:29:
                    d9:2f:c3:d0:ef:09:58:fd:1e:4f:e7:16:22:f6:85:
                    57:4a:3d:5a:c2:a5:4b:5d:c4:34:14:db:df:61:ce:
                    a5:53:30:96:74:d7:67:b6:2a:83:d0:c6:51:49:94:
                    3f:cd:cd:8c:0b:44:fd:7a:df:61:06:79:ac:b4:0c:
                    95:a6:17:d8:d4:79:57:1e:63:83:cf:b7:4b:3e:43:
                    a1:b1:14:ff:93:6a:f0:e4:23:28:5d:2a:48:aa:06:
                    d0:f0:f9:b9:ba:ed:c6:58:30:80:b7:5f:74:8e:0d:
                    3a:92:85:a1:80:bc:b9:db:d6:5a:f7:63:f0:80:0f:
                    4d:c7:b3:b7:1d:e6:52:64:e9:48:ee:68:15:2a:10:
                    40:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:70:1E:C5:34:31:6B:B4:27:67:D8:A3:55:E7:7A:01:4E:ED:2D:7C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/65701EC534316BB42767D8A355E77A014EED2D7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.116.0/22
                IPv6:
                  2804:70fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270760

    Signature Algorithm: sha256WithRSAEncryption
         98:09:41:d9:03:37:2b:cb:4b:1d:3c:fe:af:1c:65:7b:26:02:
         03:1f:4b:d6:92:40:80:2c:26:57:a3:a3:5d:36:e1:a4:31:b1:
         0a:9e:6e:dd:e5:97:a1:96:1b:43:47:1a:a2:ee:df:08:a5:04:
         f4:3d:2d:50:25:a1:7e:40:04:73:11:a8:d3:a0:7b:ec:a1:62:
         08:af:ea:4c:b1:31:c8:49:45:aa:99:5f:dc:85:cb:84:a7:55:
         63:de:64:bd:17:17:51:50:61:d9:1e:ad:c6:45:f6:cb:c5:16:
         45:ff:23:a2:93:cd:88:a2:61:18:f0:82:96:4b:42:8c:9e:2e:
         94:13:3e:43:85:cd:4f:60:59:9e:20:81:bd:63:dd:70:aa:6d:
         e1:b2:2a:d4:66:1a:f2:66:c0:ea:d6:07:d5:6f:19:b7:14:32:
         d1:c2:ed:e4:e1:05:18:e9:29:17:57:5d:71:78:be:93:30:18:
         fb:e5:23:4d:83:2a:c5:58:1c:c3:47:8d:32:a1:94:8a:a7:6d:
         26:67:14:cd:b7:ce:85:ea:3f:92:7a:f9:d5:c1:06:b1:e5:a9:
         32:82:74:6c:db:d1:f6:62:76:2b:0d:40:24:f1:fa:1a:88:c6:
         1b:63:c4:56:de:66:af:80:c8:cd:90:73:72:4a:7d:b9:65:85:
         15:a4:0d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org