Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/65957368ED64EBC667C549743F4EF7F7D715D062.cer
File:                     65957368ED64EBC667C549743F4EF7F7D715D062.cer (raw, json)
Hash identifier:          67uyyY7/bekWpDByuZzHFlK1ngRFUA7zYhqXQoWHGJ8=
Subject key identifier:   65:95:73:68:ED:64:EB:C6:67:C5:49:74:3F:4E:F7:F7:D7:15:D0:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       750B90E4A4A93F88A1245A48A60622F908340726
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/65957368ED64EBC667C549743F4EF7F7D715D062.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 04:45:06 +0000
Certificate not after:    Wed 04 Dec 2024 04:50:06 +0000
Subordinate resources:    AS: 52637
                          IP: 138.121.72.0/22
                          IP: 170.81.88.0/22
                          IP: 170.84.240.0/22
                          IP: 179.96.160.0/21
                          IP: 2804:d88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0b:90:e4:a4:a9:3f:88:a1:24:5a:48:a6:06:22:f9:08:34:07:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 04:45:06 2023 GMT
            Not After : Dec  4 04:50:06 2024 GMT
        Subject: CN=65957368ED64EBC667C549743F4EF7F7D715D062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:f6:df:4f:e8:12:e6:c0:95:46:ad:09:5f:
                    e8:2c:cd:c7:f2:a2:be:7b:31:07:f2:b6:e0:e8:ab:
                    43:7a:81:b1:5f:5e:78:6e:e8:6e:cb:cb:71:35:28:
                    4b:38:43:6a:70:09:ca:7c:90:ec:de:57:e3:ff:20:
                    19:64:00:06:d3:b6:f8:c4:3d:61:96:07:d2:88:81:
                    6d:7f:07:72:51:5c:4a:c0:ea:f9:cd:84:5a:74:00:
                    51:aa:69:c9:e0:da:8b:f4:42:ff:60:db:73:ec:5c:
                    bb:d0:49:d5:b4:73:26:1c:3b:69:6b:ac:9e:02:ab:
                    80:d3:bd:df:2b:60:77:1b:7d:b1:41:f4:fc:ab:a2:
                    46:0c:c2:91:94:40:9f:cd:4c:9a:60:d7:be:ba:ee:
                    ea:fd:bf:86:2b:6e:a2:ca:1f:b2:4f:d8:3e:a1:b5:
                    31:c6:48:2a:8f:23:d7:2c:ca:fb:b2:bd:72:61:fd:
                    e0:76:7b:ed:d6:1c:98:db:35:c7:c2:36:ac:c1:1d:
                    cc:ff:95:78:64:28:fc:dd:08:29:88:88:e0:99:e6:
                    44:48:43:b0:fb:0f:13:3a:10:0a:ff:af:96:04:43:
                    86:6a:52:5a:08:f1:f2:ad:e3:83:09:4e:72:9e:e6:
                    b0:bb:d2:a5:09:4b:bf:a8:bc:5f:6c:b5:94:79:9c:
                    2a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:95:73:68:ED:64:EB:C6:67:C5:49:74:3F:4E:F7:F7:D7:15:D0:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/65957368ED64EBC667C549743F4EF7F7D715D062.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.72.0/22
                  170.81.88.0/22
                  170.84.240.0/22
                  179.96.160.0/21
                IPv6:
                  2804:d88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52637

    Signature Algorithm: sha256WithRSAEncryption
         ab:f0:e3:c1:99:c9:b1:a6:27:1c:d1:5d:6d:ef:41:14:50:2a:
         70:c3:cf:34:f5:cc:72:2a:d0:cb:83:14:80:1c:8a:2f:43:41:
         75:f6:6d:f1:b6:58:a4:75:94:2e:8b:27:0a:80:81:4a:9c:15:
         0d:83:02:b9:f3:ca:68:34:03:74:17:0d:c3:00:85:ac:31:43:
         97:5e:7a:a6:b9:ac:46:d2:a3:5c:57:ea:fd:cc:05:00:91:e6:
         3c:97:58:98:7f:7b:d9:be:32:2f:ad:39:f0:77:f5:7d:63:54:
         0e:0b:47:c1:46:d0:bc:cf:41:91:3a:44:1c:d4:08:f0:1e:1a:
         ab:80:f3:ba:bc:c0:22:ec:c2:f1:b9:f0:e5:00:83:15:fb:08:
         5b:e7:cf:40:e0:72:0f:6c:c1:6d:5d:22:61:6a:d8:ec:dc:78:
         f4:fe:91:41:8d:5f:47:8e:60:82:6b:e5:47:56:ce:2a:b3:8a:
         9c:44:d2:a8:b4:e0:d4:8d:61:c8:f8:31:57:7b:2d:47:f8:12:
         78:64:ef:0b:d3:a9:53:41:e7:9f:64:1c:95:46:88:e5:b0:10:
         ef:91:98:ae:a5:9a:47:94:8f:b7:92:0f:89:7e:9d:75:4d:12:
         0c:3e:cf:37:34:2e:88:62:19:67:9e:79:40:a8:57:a2:87:77:
         58:f2:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org