Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB.cer
File:                     66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB.cer (raw, json)
Hash identifier:          0rxIx0iCNZZUP4VPGVCepuZtpmHLyRZoOh5cxihQdh8=
Subject key identifier:   66:CB:92:11:98:5F:6A:3A:B6:F1:C9:DE:9F:58:F0:BF:C5:F0:01:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       729AA8D180EA91272E4CA750744E2BA541D9C0A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6TRa8zceC4o3ieEfa4zGY5J6XUmGEVL3D25naWpmyojs/0/66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6TRa8zceC4o3ieEfa4zGY5J6XUmGEVL3D25naWpmyojs/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Jul 2022 22:01:51 +0000
Certificate not after:    Tue 18 Jul 2023 22:06:51 +0000
Subordinate resources:    AS: 61943
                          IP: 170.82.100.0/22
                          IP: 201.158.108.0/22
                          IP: 2804:189c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9a:a8:d1:80:ea:91:27:2e:4c:a7:50:74:4e:2b:a5:41:d9:c0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 19 22:01:51 2022 GMT
            Not After : Jul 18 22:06:51 2023 GMT
        Subject: CN=66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ce:8d:40:ad:ac:f1:e7:1d:ed:d7:e5:d0:af:
                    d2:2f:1b:9d:45:9a:9d:da:35:ff:1d:de:4a:0c:bc:
                    93:84:cd:a1:7a:e7:d1:f5:de:2b:ad:9d:67:46:b4:
                    16:01:68:ff:e3:d7:70:58:59:cb:af:88:3d:0b:26:
                    40:6c:b3:87:cd:94:72:93:a8:4d:ee:25:35:5f:53:
                    9f:f6:17:d4:24:c1:af:e6:78:07:32:2d:9a:71:b7:
                    99:28:5e:6d:2b:48:23:b6:11:81:17:13:c7:3a:bf:
                    ab:6f:02:df:b0:e4:86:b0:4d:84:dd:3e:cf:b9:c5:
                    be:e7:24:a7:59:3a:9a:b9:20:9b:98:fa:f5:af:62:
                    13:32:d1:20:13:cf:f9:cc:ee:c4:50:6a:74:93:6e:
                    78:0e:ef:52:58:c8:81:9f:9e:ee:d7:71:d5:04:9b:
                    c6:f5:5a:41:ce:7f:f6:8c:7d:fc:ec:fd:b1:1c:e3:
                    ed:4a:b8:f6:db:4e:63:17:be:7b:b2:a4:31:e0:95:
                    fc:68:ef:a4:b2:72:45:85:e4:da:5c:bd:c3:98:fb:
                    27:46:0d:b8:69:a2:38:c5:10:bd:f2:12:8a:c5:e9:
                    0b:05:fd:45:85:da:66:21:3f:6b:69:4e:78:88:94:
                    dd:69:e1:17:e1:db:d6:e9:62:b8:ee:4b:80:22:c6:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:CB:92:11:98:5F:6A:3A:B6:F1:C9:DE:9F:58:F0:BF:C5:F0:01:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6TRa8zceC4o3ieEfa4zGY5J6XUmGEVL3D25naWpmyojs/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6TRa8zceC4o3ieEfa4zGY5J6XUmGEVL3D25naWpmyojs/0/66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.100.0/22
                  201.158.108.0/22
                IPv6:
                  2804:189c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61943

    Signature Algorithm: sha256WithRSAEncryption
         a4:c2:c9:15:93:cb:b3:5c:a3:fc:c4:c9:8e:95:84:1c:9e:48:
         15:f4:20:6a:9a:12:93:b5:36:05:71:30:ab:08:bb:4f:7b:87:
         7d:0f:f2:ac:4b:ec:ac:99:9a:c7:9c:fb:1b:23:ff:99:39:0c:
         ba:29:5f:28:6b:86:f7:70:4c:e2:84:c6:3a:9f:03:05:2e:d4:
         85:8d:4e:e5:09:dd:85:cf:9b:30:cd:db:51:7b:66:10:ee:8a:
         ca:13:b4:15:db:03:b6:8c:3c:15:01:53:91:23:af:ab:13:d3:
         38:99:c3:5f:17:2f:93:99:a6:57:7a:65:2e:15:1e:10:4a:a3:
         4a:73:78:96:2a:5b:e4:e6:6c:18:c5:f9:99:13:3a:55:e5:84:
         69:1d:8f:ae:00:b6:1b:30:70:2c:38:07:18:4d:4a:98:07:e0:
         bb:58:d1:c2:c3:06:f2:16:06:bf:de:f6:36:a6:94:3d:41:f0:
         c5:22:7a:70:35:2d:14:f1:58:37:c0:1d:4f:bb:09:8f:c6:1d:
         1b:9b:3f:ab:9b:92:b8:a7:39:6d:9c:94:5b:bf:fe:6e:b0:9c:
         c2:e9:cf:83:8d:32:22:a1:2c:c3:8f:f7:6c:3d:b5:d6:bf:ac:
         9a:c0:92:fd:29:6c:b6:6b:cb:9a:48:58:49:40:e9:dd:53:3e:
         53:2e:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org