Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.cer
File:                     66E18DB07F3005DF457EA73CEE84BE082FC266E1.cer (raw, json)
Hash identifier:          qZPYmUCAYsw5QVn7ItAkjQyAr2QC3z3xx0qo1E5u9Mc=
Subject key identifier:   66:E1:8D:B0:7F:30:05:DF:45:7E:A7:3C:EE:84:BE:08:2F:C2:66:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C19A6CD9B64D96CCEF585F0DF2C1BA2CB1FD981
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:49 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:49 +0000
Subordinate resources:    AS: 266451
                          IP: 170.83.24.0/22
                          IP: 2804:3808::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:19:a6:cd:9b:64:d9:6c:ce:f5:85:f0:df:2c:1b:a2:cb:1f:d9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:49 2024 GMT
            Not After : Mar 31 11:03:49 2025 GMT
        Subject: CN=66E18DB07F3005DF457EA73CEE84BE082FC266E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:98:c5:ae:c9:04:17:2f:0c:0d:e2:43:7b:
                    38:c4:2a:4a:77:4a:86:ba:a1:ac:1f:9e:ee:05:21:
                    f4:4f:91:24:51:3d:bb:02:ba:83:55:a1:e7:1d:17:
                    92:9c:70:85:41:35:91:72:e0:14:d6:ed:ea:13:cf:
                    16:1b:f5:6f:b4:85:0d:f3:0c:80:c0:f6:c2:f5:b5:
                    65:44:ae:4f:53:ea:ad:e9:73:50:8d:e0:94:60:c4:
                    ee:3b:93:77:e8:fe:42:39:d0:21:3a:d0:4d:6d:b9:
                    5e:82:48:5e:c2:dc:75:81:e0:fd:6d:79:9a:a6:37:
                    3b:25:3b:ba:31:ba:cf:b7:e6:09:60:a9:ad:9b:4b:
                    80:74:17:d8:15:a2:3a:72:9e:33:42:7b:18:24:bb:
                    e8:f8:dd:0d:51:13:11:4f:14:d2:a4:e3:80:fa:15:
                    49:f9:65:6c:45:46:65:fc:14:97:f6:7e:b8:ba:ec:
                    77:5e:68:ad:a2:46:61:80:c0:5f:98:a4:ab:c5:1a:
                    78:eb:62:31:ba:ef:57:52:c4:16:27:29:b4:1a:80:
                    2e:fc:20:86:4b:ae:4e:78:74:34:f1:7d:6c:82:aa:
                    a0:ae:35:fe:99:6d:7b:03:a7:41:bd:5b:e2:9a:3d:
                    12:c0:d7:cd:bd:87:ed:5a:52:3b:9a:ba:58:2d:89:
                    46:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:E1:8D:B0:7F:30:05:DF:45:7E:A7:3C:EE:84:BE:08:2F:C2:66:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.24.0/22
                IPv6:
                  2804:3808::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266451

    Signature Algorithm: sha256WithRSAEncryption
         08:16:b3:7a:7c:26:9d:06:4f:4c:61:11:eb:3f:db:19:b4:ec:
         62:5e:f2:53:76:ea:77:f6:23:08:45:83:93:7e:cf:13:42:81:
         9a:57:2c:3b:91:dd:a4:20:79:b7:58:73:5b:d8:5f:a8:e6:eb:
         b1:f9:bf:da:bc:6b:72:47:a9:74:bc:09:2d:a8:6a:fb:46:55:
         13:6a:3c:d2:0f:23:b9:d4:db:5d:88:22:45:d8:47:86:fa:a9:
         4f:19:4d:02:1f:2a:54:ed:08:41:8b:44:70:1c:52:7c:e1:29:
         a9:b2:49:d9:87:cb:cc:4c:3c:4b:06:6e:06:d2:3d:69:72:52:
         d6:af:aa:16:2c:02:a3:51:7c:bc:08:e5:6b:c0:ed:5d:11:c5:
         57:f3:ed:b9:69:c5:11:55:63:8a:cd:2d:fd:90:e8:8a:20:d6:
         98:ce:bb:d4:13:95:7b:18:86:24:73:ca:c9:05:a4:e8:0e:12:
         4c:5a:31:bf:cd:33:42:9a:db:44:94:2d:0b:ba:08:cd:47:67:
         8c:17:72:b8:23:2d:86:12:b6:04:1c:86:54:d6:13:bb:76:1e:
         03:db:9d:e9:f6:68:62:40:44:ad:47:9b:8e:8d:3d:b2:bf:33:
         07:76:6a:b0:95:dd:26:ff:9b:eb:46:3a:a7:49:fb:94:a6:72:
         c4:9f:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org