Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/66C08F358F281A62EAF9697A2C0D5B4C5370EF85.cer
File:                     66C08F358F281A62EAF9697A2C0D5B4C5370EF85.cer (raw, json)
Hash identifier:          tNT7iVJPYh/rKuyOifGV0XZn9Mdsv09fXTqM6zjGT2s=
Subject key identifier:   66:C0:8F:35:8F:28:1A:62:EA:F9:69:7A:2C:0D:5B:4C:53:70:EF:85
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       439A2C7CD6A8D537496E671BEC3342ABD20C58C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/66C08F358F281A62EAF9697A2C0D5B4C5370EF85.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Oct 2023 17:11:31 +0000
Certificate not after:    Fri 18 Oct 2024 17:16:31 +0000
Subordinate resources:    AS: 268177
                          IP: 45.171.12.0/22
                          IP: 2804:593c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9a:2c:7c:d6:a8:d5:37:49:6e:67:1b:ec:33:42:ab:d2:0c:58:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 20 17:11:31 2023 GMT
            Not After : Oct 18 17:16:31 2024 GMT
        Subject: CN=66C08F358F281A62EAF9697A2C0D5B4C5370EF85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:e9:c4:13:f5:f6:23:4f:ab:3d:6d:18:fa:
                    f0:f5:ad:82:9f:ee:4c:1e:fc:ef:da:3e:15:e7:a3:
                    fc:4e:a6:d3:9f:4c:2e:11:79:0a:2e:57:c0:59:db:
                    6e:7a:55:7c:b0:97:d4:cf:f0:0f:4e:0b:a3:0b:3e:
                    c8:ab:00:6e:51:22:0f:cc:60:54:d8:42:44:18:8b:
                    09:9b:09:d1:64:0c:60:3c:67:e5:e4:51:0d:1a:fb:
                    c3:bb:0f:47:51:40:da:14:01:fb:61:be:2d:92:d2:
                    5f:e5:70:48:d4:c5:7d:d7:01:08:48:62:84:38:18:
                    b3:70:2a:92:14:1b:e8:07:a3:15:11:7d:71:e8:1b:
                    a9:f0:67:32:dc:43:06:96:76:f1:c8:f2:44:2f:27:
                    e5:e7:d1:5c:52:22:03:2e:a9:66:9d:cc:c5:a0:31:
                    d5:1a:27:bb:6e:3f:6f:82:8a:30:9a:bd:fe:ab:21:
                    7c:38:eb:71:cf:43:60:1d:20:89:7e:c6:dc:e3:89:
                    4e:02:94:3c:78:84:b6:19:bb:ca:7a:ed:e9:59:11:
                    5e:46:73:0d:72:9a:df:8b:9b:8d:15:56:7d:13:da:
                    4e:3c:f5:e9:ce:5c:c3:c5:40:43:00:9f:15:37:66:
                    36:52:0f:2c:fe:96:13:82:d3:f3:18:de:db:75:bd:
                    7d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:C0:8F:35:8F:28:1A:62:EA:F9:69:7A:2C:0D:5B:4C:53:70:EF:85
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/66C08F358F281A62EAF9697A2C0D5B4C5370EF85.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.12.0/22
                IPv6:
                  2804:593c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268177

    Signature Algorithm: sha256WithRSAEncryption
         1e:3d:87:b2:df:3e:30:6c:03:f4:1c:4f:9b:99:a6:34:b6:be:
         46:23:f4:69:c7:b3:a0:5e:89:b3:cd:d6:14:cf:c7:28:b0:0c:
         59:41:2d:f3:b5:c4:35:ea:56:e1:11:d5:a1:d0:69:7a:d8:0a:
         3b:af:9a:ce:c4:fb:94:f5:3e:fd:68:f7:12:13:be:97:51:9c:
         56:bf:ac:d2:88:7b:9a:10:f0:80:23:44:33:45:23:20:f3:1e:
         98:ed:0e:53:e3:9c:07:16:26:a1:25:66:18:8c:7f:e8:7c:e0:
         a2:e8:92:a8:cc:54:fa:55:b7:86:22:09:ba:71:07:a1:d8:e8:
         30:15:21:dd:e0:07:28:60:0f:12:c2:a8:25:57:68:8e:aa:78:
         7a:38:0a:b8:1b:31:9c:78:b1:0f:e2:18:2b:f7:bd:07:ad:5f:
         05:4d:c4:00:f5:54:66:4b:cb:13:cc:75:a3:3d:60:9c:4f:68:
         5d:34:c7:8d:17:d5:64:60:36:b4:23:75:ae:5d:2a:bb:6e:f5:
         67:87:26:fe:37:92:86:ff:53:dc:58:0f:93:2e:03:fd:44:4a:
         d9:f5:23:35:e7:11:26:68:e7:37:93:55:ef:69:f9:db:ba:64:
         a1:5f:17:20:ac:6a:fe:da:5e:d4:9a:b1:0e:ce:7c:2e:0f:31:
         cf:f8:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org