Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.cer
File:                     669B05AF68A578CAF79FDBA7B72AE047A96436E6.cer (raw, json)
Hash identifier:          j/+0qOUtMaXkG7sUpi4KCd5A4V4DrJ3/p2fh7HKKROE=
Subject key identifier:   66:9B:05:AF:68:A5:78:CA:F7:9F:DB:A7:B7:2A:E0:47:A9:64:36:E6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4AD4DB91BCFD3F560402B9917F6C9CA12C234518
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Dec 2023 17:48:34 +0000
Certificate not after:    Thu 26 Dec 2024 17:53:34 +0000
Subordinate resources:    AS: 268710
                          IP: 45.170.228.0/22
                          IP: 2804:5990::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d4:db:91:bc:fd:3f:56:04:02:b9:91:7f:6c:9c:a1:2c:23:45:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 28 17:48:34 2023 GMT
            Not After : Dec 26 17:53:34 2024 GMT
        Subject: CN=669B05AF68A578CAF79FDBA7B72AE047A96436E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:19:ab:79:cc:d5:ea:cf:9d:68:b9:2e:14:45:
                    a2:67:d5:c5:a0:b3:b2:de:ae:82:8e:21:01:3c:7d:
                    84:66:aa:fd:ee:f0:e7:70:2d:39:cd:c6:27:70:bc:
                    14:ac:ed:2a:9f:0c:9d:00:be:e6:ef:14:c2:58:87:
                    68:9e:c6:ac:c4:20:d3:d3:59:e1:1f:79:8d:6b:4c:
                    f1:6c:ff:67:c2:8f:d1:89:a5:63:11:5d:1e:a4:8a:
                    9a:9a:3a:46:8a:6d:64:fa:23:24:2e:aa:a9:f6:d1:
                    1b:c0:8f:29:54:8e:63:e8:f3:17:91:40:e8:47:0d:
                    eb:23:41:15:ed:4c:c4:d0:e2:93:9b:df:f1:f0:19:
                    d1:80:eb:84:1d:bb:b2:d0:4f:d2:62:0c:6f:d0:25:
                    d7:17:ab:24:cb:a1:59:2a:73:de:8a:24:e3:72:21:
                    94:48:e1:84:6c:b8:0b:04:02:37:58:70:66:9e:02:
                    d7:57:d8:1e:82:5c:96:0e:26:c3:7a:9a:e5:23:10:
                    8a:79:f3:66:76:95:85:dc:cd:05:9e:bf:ee:d0:10:
                    e8:1a:fd:26:55:7d:96:bf:35:4b:bb:c0:1e:1b:a6:
                    fd:43:17:87:ad:64:d7:63:18:d4:c9:b8:ad:25:35:
                    e2:e7:54:d3:5f:d3:b7:cc:70:b8:17:48:3f:72:2e:
                    40:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:9B:05:AF:68:A5:78:CA:F7:9F:DB:A7:B7:2A:E0:47:A9:64:36:E6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.228.0/22
                IPv6:
                  2804:5990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268710

    Signature Algorithm: sha256WithRSAEncryption
         0a:38:1a:73:95:62:45:8a:3c:eb:2b:32:53:5e:5f:75:ca:c6:
         30:9e:24:52:75:e2:2c:6e:e4:e6:6d:ef:b7:a0:93:6f:41:56:
         d4:b5:f0:44:a9:db:e5:94:99:2f:70:45:31:fe:04:75:69:18:
         e6:54:e7:98:4a:4b:e8:86:5a:14:5a:df:60:cc:01:9d:1f:d2:
         38:9e:01:70:96:4e:7a:88:0a:a4:9a:ec:9d:dc:9a:5e:91:5e:
         c8:ca:5f:51:00:c8:de:00:94:76:45:b2:9d:7a:67:4f:b6:d4:
         76:82:b3:06:1f:05:da:65:3e:6d:8b:56:84:bf:f9:58:92:56:
         22:5d:85:ab:e6:e2:b3:e5:a2:86:08:82:33:e3:62:8b:8f:2b:
         0c:57:03:ad:9a:2e:e6:9c:44:13:3d:92:d4:95:fc:1a:e9:b3:
         57:56:00:82:93:ee:cf:43:2e:78:a3:60:9b:84:94:36:f3:c3:
         0d:3b:9e:62:be:75:f6:ce:eb:41:90:07:37:cd:70:b7:6a:73:
         f1:f0:c7:6f:78:1b:b6:1c:01:4d:11:26:fa:74:c0:30:64:f7:
         68:f9:c2:57:06:29:91:41:73:3e:c4:6c:44:83:fb:6d:6f:66:
         00:70:66:92:bf:c3:85:0d:f5:64:6c:69:61:b5:3f:83:64:6e:
         6e:f4:5c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org