Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer
File:                     65A09344BB82159BF3390F7713CC70EB58AE43DF.cer (raw, json)
Hash identifier:          5ekEgjYAbOUhkfv+PkA3GFMR6kRz74eVMgKy4YspQrU=
Subject key identifier:   65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E39C696828C6A06BCABCFB74AF95241D5B0E669
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 25 Feb 2024 22:17:06 +0000
Certificate not after:    Sun 23 Feb 2025 22:22:06 +0000
Subordinate resources:    AS: 27712
                          IP: 200.220.160.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:39:c6:96:82:8c:6a:06:bc:ab:cf:b7:4a:f9:52:41:d5:b0:e6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 25 22:17:06 2024 GMT
            Not After : Feb 23 22:22:06 2025 GMT
        Subject: CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:21:24:44:37:40:fd:3c:5f:9d:40:b1:4c:
                    fe:9e:fb:be:92:e0:cb:96:1c:10:ce:01:f3:5b:9f:
                    de:f6:f7:5b:10:f5:6f:1e:0e:ee:d2:1d:ed:95:b4:
                    3c:7b:c7:19:24:fb:8b:34:d3:eb:be:2f:43:bc:ad:
                    55:e7:5a:9a:be:0a:09:e9:24:e0:7b:df:55:b7:89:
                    6a:e5:98:55:cd:b6:57:9e:29:a2:62:8c:88:c4:bd:
                    33:d7:b8:c4:b1:aa:e4:49:85:bb:30:33:e6:73:f4:
                    c9:2b:04:7e:98:80:fd:6f:b8:71:5e:28:89:0d:21:
                    a0:f7:09:0c:54:69:e4:6d:81:fd:d5:69:1d:ca:df:
                    4f:5f:95:e8:34:5b:5d:86:9f:e4:93:8f:cc:b1:8c:
                    8c:e5:e0:b3:a0:36:e7:a0:f6:90:7b:82:ad:66:97:
                    ac:f4:e3:a4:30:10:75:17:ae:e9:09:eb:14:fa:5b:
                    63:d1:0e:44:42:fd:e0:d4:da:3e:bc:e1:c7:ae:4c:
                    e4:f8:ef:ea:b1:3e:3d:0a:ea:5a:84:bb:94:d2:ff:
                    aa:9c:09:ef:90:23:28:b9:cb:ad:6a:46:78:db:ff:
                    98:91:1f:bf:e7:9c:39:01:98:70:92:63:38:50:0e:
                    47:52:7c:6f:ef:18:6c:2a:82:d8:3b:d6:95:67:07:
                    28:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.160.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27712

    Signature Algorithm: sha256WithRSAEncryption
         16:63:80:63:78:dc:78:4e:3a:7d:94:17:9f:b1:28:8b:7b:e8:
         e9:b2:1a:14:bb:44:8c:49:9d:a6:99:11:e5:a1:ce:f4:d5:5a:
         25:b3:c9:b8:93:99:54:9b:21:f0:80:15:4e:2d:75:b9:e3:8b:
         63:81:a3:af:cb:55:de:28:42:82:5e:8b:98:5d:67:c0:eb:14:
         31:35:8b:be:e0:0c:fb:b6:a9:5f:6f:ef:4a:2d:d6:f2:9b:69:
         50:47:d5:b1:49:71:ed:6d:69:d3:af:4c:7f:f5:ec:cd:f4:83:
         ba:4c:04:b0:df:81:f3:37:42:c0:a5:b5:07:fe:56:48:33:2e:
         07:84:1e:c6:8e:38:c5:64:04:d6:f3:13:e2:2d:cd:65:84:77:
         7d:37:b4:8e:d7:72:53:be:29:ec:a0:75:b2:e0:04:14:ab:2a:
         ec:31:6b:7f:b9:87:1d:27:82:2c:f1:44:57:de:bf:65:75:8e:
         2b:12:2f:45:32:a4:fe:86:46:e3:b4:8f:d2:0a:a9:4e:be:6e:
         2e:8f:8d:fe:7a:e5:c7:45:34:a4:14:c6:1e:dc:e9:82:6a:b8:
         d5:e8:ee:a3:95:78:18:5e:25:8f:a0:d8:e1:d7:a7:7f:38:b6:
         50:48:68:f6:8b:91:8a:74:ea:1c:4b:2c:8e:81:35:fc:a2:e0:
         2d:08:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org