Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27.cer
File:                     65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27.cer (raw, json)
Hash identifier:          xMnoi9Bov+jU1H5PZpW0pjhdck8+7bLddbiqiWMYkbU=
Subject key identifier:   65:A1:69:8F:B6:1E:F3:BC:3D:D5:3F:E3:2C:EB:B7:C0:D2:4C:3A:27
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       02C4078DEDB90DCB45BD2CF8712D7CA66EE6E585
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/0/65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Feb 2024 14:14:52 +0000
Certificate not after:    Wed 19 Feb 2025 14:19:52 +0000
Subordinate resources:    AS: 263926
                          IP: 138.219.112.0/22
                          IP: 2804:27dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c4:07:8d:ed:b9:0d:cb:45:bd:2c:f8:71:2d:7c:a6:6e:e6:e5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 14:14:52 2024 GMT
            Not After : Feb 19 14:19:52 2025 GMT
        Subject: CN=65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:90:82:50:cb:60:30:6f:b0:96:71:fd:e8:
                    ff:b5:99:70:c2:83:b8:7a:59:18:6a:b0:ed:13:ba:
                    af:9d:ee:b3:1b:a2:99:20:3e:91:dd:3f:1f:fe:7e:
                    55:78:6b:cd:44:b0:f9:74:4c:19:a1:f1:c1:df:49:
                    83:3b:53:68:4b:af:43:91:19:2b:d5:b6:dc:83:0f:
                    b0:a3:3a:ff:9c:dd:37:a8:6a:41:15:fb:4d:e6:bf:
                    89:a4:ef:69:d6:1c:fe:b9:59:1e:44:e9:c4:3f:d9:
                    61:ca:c2:96:d6:3a:0e:54:c3:ae:24:6a:78:da:fd:
                    b0:14:74:4e:d9:e0:4a:98:62:0b:70:ae:13:9b:2d:
                    68:2f:a9:5e:8f:99:5e:76:1b:f9:3c:c6:5e:18:76:
                    70:c5:da:9d:ec:97:34:39:7b:1c:39:77:bd:ab:29:
                    08:19:53:ef:55:67:b6:05:59:4c:33:4d:74:58:a4:
                    e6:88:2b:6c:fd:c7:c0:51:7c:3d:a0:92:d7:cf:9e:
                    3f:d9:24:b4:f6:80:41:ef:49:e9:e7:a6:52:1d:23:
                    b9:b4:82:96:f8:8c:17:3b:c1:ac:54:49:2e:0c:f7:
                    db:64:89:1a:ff:e4:21:97:06:a5:8c:f2:f7:55:58:
                    71:d2:80:c8:60:56:3d:2d:e5:ae:df:69:b6:23:38:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:A1:69:8F:B6:1E:F3:BC:3D:D5:3F:E3:2C:EB:B7:C0:D2:4C:3A:27
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/0/65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.112.0/22
                IPv6:
                  2804:27dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263926

    Signature Algorithm: sha256WithRSAEncryption
         10:c8:14:51:f1:28:35:9d:b0:c5:b5:d8:f3:17:9f:56:42:6b:
         eb:e5:99:36:8b:fc:ea:12:e0:34:97:cd:1c:39:82:e2:fb:af:
         aa:78:55:03:72:e0:ca:6c:1b:01:ab:7a:8d:79:b4:26:ac:3d:
         07:0e:a1:75:b3:b8:ec:97:6a:a9:c9:f6:40:3f:bb:b4:0e:16:
         83:20:35:89:d5:6d:f5:e8:6e:d7:61:47:fc:aa:39:1b:ee:56:
         0e:ed:a5:fb:c4:44:42:6e:8c:0c:16:fb:6d:02:b8:0f:6d:be:
         8b:57:2b:a7:e8:4b:46:58:2f:ee:ec:4b:35:74:40:14:7a:34:
         0d:dd:8a:64:df:3d:bc:ff:9c:57:17:e2:0f:a6:d2:ff:ee:e0:
         70:46:3f:93:2d:17:d8:01:1a:7c:8f:47:8d:ee:6c:58:ac:31:
         53:41:71:47:05:83:71:1a:21:49:62:57:ae:f9:9c:7a:7d:a9:
         08:ed:8f:f0:04:03:e7:13:1a:d9:09:b5:64:5d:e9:fa:25:75:
         4b:95:99:99:f1:84:5e:2d:52:6e:ca:23:8a:80:73:b8:f0:3f:
         31:f6:15:dd:5b:b5:76:6f:4e:ac:80:a4:84:e5:e2:af:25:af:
         a9:05:44:fb:44:c1:48:b7:8d:b6:b7:00:f4:18:db:74:4f:8f:
         3e:ff:d4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org