Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/65A3F1ADE0815E99C26F89B705AA086F097B1F79.cer
File:                     65A3F1ADE0815E99C26F89B705AA086F097B1F79.cer (raw, json)
Hash identifier:          /JILJ08Fo3d+75xpLZulWN21ZVjiVRQPSJcf6cPcJqg=
Subject key identifier:   65:A3:F1:AD:E0:81:5E:99:C2:6F:89:B7:05:AA:08:6F:09:7B:1F:79
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       107E2E0E238ED149A4878E4D042D765DDC87984A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/0/65A3F1ADE0815E99C26F89B705AA086F097B1F79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 12:40:12 +0000
Certificate not after:    Tue 11 Feb 2025 12:45:12 +0000
Subordinate resources:    AS: 266914
                          IP: 45.224.232.0/22
                          IP: 2804:4540::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7e:2e:0e:23:8e:d1:49:a4:87:8e:4d:04:2d:76:5d:dc:87:98:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 12:40:12 2024 GMT
            Not After : Feb 11 12:45:12 2025 GMT
        Subject: CN=65A3F1ADE0815E99C26F89B705AA086F097B1F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:fc:66:49:1b:58:c6:af:8d:0e:a7:85:1e:
                    08:92:50:47:ed:ad:d4:c4:4f:5c:59:8c:29:77:d1:
                    54:d6:9a:1e:3a:be:63:5a:82:c9:fe:93:1a:10:de:
                    d9:da:e8:26:26:3e:1e:85:0c:61:14:4c:2a:17:e1:
                    31:6d:30:f3:32:4e:48:c5:8b:2e:ba:ef:6f:02:8f:
                    78:ea:12:cf:f7:e3:f8:93:48:4a:5c:25:f4:71:8f:
                    86:32:db:63:f2:7e:99:38:0c:15:44:5b:19:20:05:
                    35:46:ce:9c:f8:1e:e8:8e:09:10:36:b0:fa:8c:b3:
                    d4:73:45:9c:f1:26:2e:87:23:35:fe:57:f1:f5:3c:
                    ef:84:b0:f1:e2:71:8a:2f:7e:1b:e0:61:7b:31:35:
                    94:79:51:63:d6:ec:8c:d2:77:d6:0f:9a:ec:13:1b:
                    9e:04:81:59:07:06:e3:5e:b0:78:13:3e:84:46:ef:
                    fc:3c:c7:0f:73:c0:0c:93:6d:66:c2:1d:0f:b4:e1:
                    bc:8f:2c:72:df:47:86:d2:73:39:9c:71:a0:34:03:
                    42:e9:69:e3:0c:1e:ce:58:ad:43:11:39:55:b8:1f:
                    15:f7:69:43:f0:5c:d9:28:52:97:fd:a5:1d:c8:f7:
                    e4:b2:56:82:5a:93:9d:a9:0a:04:e3:5c:9c:d7:16:
                    88:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:A3:F1:AD:E0:81:5E:99:C2:6F:89:B7:05:AA:08:6F:09:7B:1F:79
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/0/65A3F1ADE0815E99C26F89B705AA086F097B1F79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.232.0/22
                IPv6:
                  2804:4540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266914

    Signature Algorithm: sha256WithRSAEncryption
         40:f0:3c:41:11:93:f6:8f:95:81:e8:2e:a5:a6:3e:58:60:f0:
         a4:5f:e3:83:42:44:d8:b0:b2:fa:3b:0b:4c:ef:e5:69:11:cf:
         22:25:bf:a0:e4:0f:fe:c2:21:82:d7:ab:93:19:1a:d5:ed:59:
         05:26:31:52:4e:b4:8a:7f:92:d3:c8:7e:3e:7c:94:12:73:34:
         02:d0:f5:3e:92:26:14:2c:1d:e0:e2:e7:19:81:5e:d5:eb:f3:
         b0:b9:e8:88:5c:ec:31:81:65:3b:0e:b6:1e:b6:a1:83:40:9f:
         c5:2b:da:4c:37:4f:0a:ca:72:43:9f:c5:db:3d:6a:60:2a:56:
         4f:c2:97:b8:9f:ce:8a:46:a6:2e:f4:af:a0:f1:0a:1c:d8:13:
         5c:7b:b1:0e:49:0c:70:53:d0:13:3b:3d:9a:ba:3e:74:ae:1e:
         b2:41:5e:58:1f:a5:31:31:3f:63:20:76:08:67:89:a2:f9:21:
         e3:2f:47:5e:2c:72:7d:96:47:18:d3:ff:91:d7:b2:f5:06:24:
         36:d2:19:cb:d6:d0:a6:e7:61:36:8f:f4:3e:f8:08:f4:0d:52:
         6e:58:0b:f1:cc:26:cf:ad:cc:f0:12:6c:73:89:7f:09:56:65:
         49:db:d5:69:70:b7:d3:d2:c2:62:60:e5:4c:15:dc:79:be:e2:
         e4:f2:1c:78
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUEH4uDiOO0Umkh45NBC12XdyHmEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTMxMjQwMTJaFw0yNTAyMTExMjQ1MTJaMDMxMTAvBgNV
BAMTKDY1QTNGMUFERTA4MTVFOTlDMjZGODlCNzA1QUEwODZGMDk3QjFGNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGF/xmSRtYxq+NDqeFHgiSUEft
rdTET1xZjCl30VTWmh46vmNagsn+kxoQ3tna6CYmPh6FDGEUTCoX4TFtMPMyTkjF
iy66728Cj3jqEs/34/iTSEpcJfRxj4Yy22Pyfpk4DBVEWxkgBTVGzpz4HuiOCRA2
sPqMs9RzRZzxJi6HIzX+V/H1PO+EsPHicYovfhvgYXsxNZR5UWPW7IzSd9YPmuwT
G54EgVkHBuNesHgTPoRG7/w8xw9zwAyTbWbCHQ+04byPLHLfR4bSczmccaA0A0Lp
aeMMHs5YrUMROVW4HxX3aUPwXNkoUpf9pR3I9+SyVoJak52pCgTjXJzXFoijAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRlo/Gt4IFemcJv
ibcFqghvCXsfeTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82bXBIS1UzYXVmcnFLUGkzNEhldzVUTXN2M242OTNQNEtH
TDJzVWpBSDhZVC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNm1wSEtVM2F1ZnJxS1BpMzRIZXc1VE1zdjNuNjkzUDRL
R0wyc1VqQUg4WVQvMC82NUEzRjFBREUwODE1RTk5QzI2Rjg5QjcwNUFBMDg2RjA5
N0IxRjc5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt4OgwDQQCAAIwBwMF
ACgERUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBKiMA0GCSqGSIb3DQEBCwUA
A4IBAQBA8DxBEZP2j5WB6C6lpj5YYPCkX+ODQkTYsLL6OwtM7+VpEc8iJb+g5A/+
wiGC16uTGRrV7VkFJjFSTrSKf5LTyH4+fJQSczQC0PU+kiYULB3g4ucZgV7V6/Ow
ueiIXOwxgWU7DrYetqGDQJ/FK9pMN08KynJDn8XbPWpgKlZPwpe4n86KRqYu9K+g
8Qoc2BNce7EOSQxwU9ATOz2auj50rh6yQV5YH6UxMT9jIHYIZ4mi+SHjL0deLHJ9
lkcY0/+R17L1BiQ20hnL1tCm52E2j/Q++Aj0DVJuWAvxzCbPrczwEmxziX8JVmVJ
29VpcLfT0sJiYOVMFdx5vuLk8hx4
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org