Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/65A4DB4F77ABD50594FC5E7FDF26870691F88AC5.cer
File:                     65A4DB4F77ABD50594FC5E7FDF26870691F88AC5.cer (raw, json)
Hash identifier:          +BNnr7KWdeimUOdbZOrB/4QLULaIJUDs2ipEG0JwfMk=
Subject key identifier:   65:A4:DB:4F:77:AB:D5:05:94:FC:5E:7F:DF:26:87:06:91:F8:8A:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16C6935BEDBF6A26EF0217371A0965553F4089B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/65A4DB4F77ABD50594FC5E7FDF26870691F88AC5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Feb 2024 09:22:48 +0000
Certificate not after:    Thu 27 Feb 2025 09:27:48 +0000
Subordinate resources:    AS: 263584
                          IP: 177.129.136.0/21
                          IP: 2804:f68::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c6:93:5b:ed:bf:6a:26:ef:02:17:37:1a:09:65:55:3f:40:89:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 29 09:22:48 2024 GMT
            Not After : Feb 27 09:27:48 2025 GMT
        Subject: CN=65A4DB4F77ABD50594FC5E7FDF26870691F88AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:b6:e3:5a:7b:30:db:35:a2:b6:22:1f:41:
                    b9:28:44:8c:63:f2:d8:44:27:36:8b:14:ec:07:0b:
                    90:bf:d8:b3:8e:f6:48:8f:23:09:ce:a3:a8:d4:77:
                    35:7c:fb:f8:86:1e:de:87:86:06:54:1a:bb:6c:64:
                    48:72:da:f1:9a:73:b8:eb:be:09:71:36:28:ce:5b:
                    ce:8d:78:40:db:94:33:76:97:32:c3:8b:a5:65:01:
                    8b:09:74:16:63:f3:43:b1:aa:22:a1:d0:6d:fd:0c:
                    36:f4:4a:e0:98:44:23:aa:0d:35:f8:87:f5:2e:d8:
                    4a:a7:25:56:0d:23:3d:d0:43:ea:30:c8:9b:72:e2:
                    d9:c6:f8:ee:b7:28:a4:c5:5e:55:60:82:6c:fd:3f:
                    5c:ce:8f:18:7f:43:5f:72:e2:db:b5:00:17:21:c9:
                    9f:25:fa:57:95:fc:29:f6:3e:47:80:38:50:3c:e9:
                    d0:85:dd:05:a2:80:3c:80:74:00:a6:9c:4a:03:29:
                    14:fb:da:40:39:a2:40:f6:ee:83:4c:19:ea:ec:f9:
                    7c:b3:0d:ac:9a:2a:f2:e3:17:14:83:ec:90:ca:4d:
                    37:14:07:e9:e3:df:7b:0a:92:84:62:26:30:88:a9:
                    ee:3c:a4:65:d5:d3:b4:25:8f:23:85:af:57:33:14:
                    cb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:A4:DB:4F:77:AB:D5:05:94:FC:5E:7F:DF:26:87:06:91:F8:8A:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/65A4DB4F77ABD50594FC5E7FDF26870691F88AC5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.136.0/21
                IPv6:
                  2804:f68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263584

    Signature Algorithm: sha256WithRSAEncryption
         9a:4c:ec:b4:7e:56:12:7a:46:b7:76:6e:02:94:3d:6e:94:91:
         64:2c:bc:6b:56:17:23:14:20:22:3d:38:58:42:b6:19:f9:42:
         51:f5:ea:d2:53:a5:f9:1a:8a:d9:1f:ff:61:b1:ac:c7:3d:73:
         a9:5f:b5:6c:05:cd:d4:10:cf:0c:c1:78:6f:06:98:81:b0:c4:
         e4:6d:67:bf:5c:4e:39:93:af:3e:8e:60:87:c6:f7:c6:a2:1b:
         7a:13:e8:6f:63:7c:cc:e0:b5:92:79:d7:c7:ea:cd:57:e7:62:
         cf:26:8e:ad:53:f2:6e:21:ec:3b:01:ef:63:79:4a:f5:b5:4b:
         f8:9f:43:d4:24:1f:43:ef:68:ed:15:e6:2d:d9:45:64:ff:98:
         8b:92:36:6e:fd:b2:9f:58:6e:24:d1:b5:4f:05:97:b8:61:18:
         cd:68:25:94:b5:f2:d3:39:bd:ff:f1:03:c1:93:22:5b:3d:a6:
         5d:25:e9:c4:28:3f:f7:dc:38:01:d5:7a:ee:a3:a0:c7:d7:a5:
         6d:47:9a:7b:03:63:b0:a6:bc:1e:20:df:56:a2:8d:7d:40:e0:
         cd:cb:cf:80:bf:e8:c9:23:88:63:5f:30:0e:17:5a:39:46:16:
         cb:3d:8d:af:46:10:82:14:91:26:47:14:73:99:c6:59:03:2d:
         55:2f:94:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:18 2025 by rpki-client