Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/66071341D63E79CFFB28924CC5439D027A3440BA.cer
File:                     66071341D63E79CFFB28924CC5439D027A3440BA.cer (raw, json)
Hash identifier:          UMvxDuhE9NW+xu2qaeM5rBvtB0qm98beJY2tqu0qbn0=
Subject key identifier:   66:07:13:41:D6:3E:79:CF:FB:28:92:4C:C5:43:9D:02:7A:34:40:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A06886AE95CFF14B5F2A05EEE7B492A5B8B9E2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/1/66071341D63E79CFFB28924CC5439D027A3440BA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 14:10:00 +0000
Certificate not after:    Fri 04 Apr 2025 14:15:00 +0000
Subordinate resources:    AS: 52795
                          IP: 177.39.216.0/21
                          IP: 2804:2144::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:06:88:6a:e9:5c:ff:14:b5:f2:a0:5e:ee:7b:49:2a:5b:8b:9e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  5 14:10:00 2024 GMT
            Not After : Apr  4 14:15:00 2025 GMT
        Subject: CN=66071341D63E79CFFB28924CC5439D027A3440BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:80:bf:38:bc:b9:15:98:90:1f:80:1c:0c:83:
                    2a:54:7d:2a:d1:56:75:04:e5:09:f3:f9:0b:0f:3b:
                    ac:e9:de:47:69:6d:b8:cc:3d:67:32:69:eb:ea:d0:
                    34:8f:87:4f:47:f3:a1:a8:06:9e:5b:5e:96:10:74:
                    a1:6c:70:a0:84:29:59:1d:e0:31:7f:81:5b:e1:cd:
                    c9:38:2d:fb:17:3b:57:42:6c:d9:88:67:ab:e3:77:
                    94:fc:61:41:ff:f6:80:fb:a1:0e:c3:61:ac:46:4c:
                    80:31:4c:d5:af:ee:c0:99:af:3c:25:56:cc:d5:a8:
                    54:c0:8f:e9:02:1b:25:7b:56:ec:6f:84:75:2c:22:
                    15:b5:7d:1a:69:c9:7f:12:fd:57:2a:39:eb:73:bf:
                    a2:99:be:92:c7:6c:8a:61:80:17:88:ca:18:a4:19:
                    1a:cc:a0:b1:bd:8d:de:64:dd:e9:f4:b7:34:c9:c9:
                    ad:e0:39:90:17:32:26:df:62:9f:44:5d:1f:ab:b8:
                    b1:26:41:f4:87:a5:67:b6:b8:79:cc:23:5f:bd:8b:
                    dc:4b:b5:de:65:c3:0f:52:f9:0c:22:66:8c:d7:23:
                    4a:9b:9c:65:37:b1:73:8c:d3:64:b7:8a:ca:7f:ef:
                    2d:a6:e8:55:51:80:42:98:b8:87:d1:d9:4b:5e:13:
                    c4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:07:13:41:D6:3E:79:CF:FB:28:92:4C:C5:43:9D:02:7A:34:40:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/1/66071341D63E79CFFB28924CC5439D027A3440BA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.216.0/21
                IPv6:
                  2804:2144::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52795

    Signature Algorithm: sha256WithRSAEncryption
         9f:2e:aa:d3:60:78:b2:3b:af:3d:f1:52:19:12:04:36:72:48:
         92:3b:7e:b9:b0:6c:aa:f1:3a:06:7a:6e:b5:70:72:cc:07:ee:
         6c:85:21:e7:95:bd:04:da:42:8a:12:f7:8b:f7:61:36:15:b5:
         bc:56:5e:b1:cc:47:49:76:9d:7c:f3:7f:d3:4a:4a:d7:4e:fb:
         6b:22:1c:a4:f4:d0:81:e6:75:cc:10:53:8a:85:81:0b:08:ba:
         3b:12:4c:d1:fb:5f:a7:19:18:f4:89:c9:ab:57:18:67:4e:1c:
         3d:e3:44:14:9d:a9:42:f4:47:2c:02:36:b2:88:0f:32:53:4d:
         7a:bc:92:6a:e2:6e:a9:93:ea:36:e6:19:84:46:8b:5a:5a:3d:
         ab:2f:1f:82:5b:30:c7:d8:7c:ae:fe:4d:c7:4d:19:28:52:b7:
         9e:28:e7:31:56:91:35:1c:7e:25:b1:4f:0e:16:c0:ce:0b:23:
         a7:a6:98:0e:1a:c0:21:2f:46:b0:e4:16:21:d6:a4:01:6e:ce:
         49:9b:ea:7b:b8:e2:69:4e:25:e2:39:00:01:23:07:8e:03:21:
         38:7e:ba:78:6b:83:19:c3:1a:63:02:c0:e8:b8:cb:bc:76:8c:
         8d:08:f5:b7:46:5c:96:6b:12:32:96:a1:21:d0:26:f6:8e:d8:
         57:95:2a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org