Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
File:                     66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer (raw, json)
Hash identifier:          BtZYi23N1fR9DCemZC1IEwjS+PqGkMhsqZJVc4mCL44=
Subject key identifier:   66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0EBDAED8CA9B21CC3B1AE16E4067909FFFC27A2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 18:02:22 +0000
Certificate not after:    Mon 21 Oct 2024 18:07:22 +0000
Subordinate resources:    AS: 265447
                          AS: 267553
                          IP: 45.70.72.0/22
                          IP: 168.196.84.0/22
                          IP: 2804:3448::/32
                          IP: 2804:432c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bd:ae:d8:ca:9b:21:cc:3b:1a:e1:6e:40:67:90:9f:ff:c2:7a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 18:02:22 2023 GMT
            Not After : Oct 21 18:07:22 2024 GMT
        Subject: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:e5:3d:91:29:37:16:64:6e:a2:85:1b:de:
                    f6:ab:4d:0a:01:74:4d:db:ee:34:ac:0e:da:fc:be:
                    32:84:a3:86:f5:36:54:16:e6:e9:51:68:78:31:36:
                    49:2c:d3:23:59:ee:dd:b7:5c:77:36:7b:9a:5b:65:
                    1d:f5:44:5e:91:17:a6:96:96:48:1f:bc:e9:c0:f4:
                    2e:da:0f:0d:0b:90:0a:d2:9a:87:21:9f:8d:f7:6d:
                    c3:a0:b5:17:ec:4e:f9:1d:a0:ea:d8:6f:f3:f7:bb:
                    f6:ab:90:06:57:76:17:bd:f8:0b:13:94:58:69:b8:
                    ea:b9:10:1a:f8:17:ba:dc:2b:17:83:6b:db:98:60:
                    54:f8:49:81:70:26:f7:48:c4:9d:22:72:9d:d4:9e:
                    eb:f3:86:53:b3:f0:53:bd:10:03:a9:19:f8:33:f0:
                    9a:f3:3f:3c:c0:0c:8b:97:82:72:bf:14:94:2c:89:
                    d4:a2:1a:ab:c0:d3:7c:a3:46:b6:a2:b0:cd:9b:a7:
                    bb:a0:78:d2:ff:6a:e9:7c:db:75:a5:45:ae:9c:6e:
                    09:f2:9a:be:39:31:30:8b:91:6f:83:8a:f3:5a:b6:
                    c8:c6:f5:8e:87:2a:61:9c:12:dc:52:51:23:ca:3e:
                    72:41:96:d2:ee:09:63:19:15:04:07:16:7f:0c:cc:
                    c9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.72.0/22
                  168.196.84.0/22
                IPv6:
                  2804:3448::/32
                  2804:432c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265447
                  267553

    Signature Algorithm: sha256WithRSAEncryption
         b7:fa:48:89:70:af:b5:ab:20:3b:e7:ce:78:ff:3a:28:4b:44:
         46:12:ce:f8:fa:d3:a2:bb:7a:ed:82:75:ed:cf:2e:1d:3d:5b:
         76:90:6c:35:a2:bb:9a:89:95:c1:72:f6:9f:6c:25:54:3c:ff:
         52:12:20:46:d5:eb:49:f6:ec:d9:1e:bd:23:7a:7b:39:b6:cd:
         c4:ad:d8:43:72:6d:11:e9:11:05:1a:fd:b0:de:d5:6c:5b:58:
         80:d7:72:1c:0a:1a:60:80:83:fb:1a:34:7b:70:5a:79:4f:aa:
         6d:57:fe:0c:03:96:c9:f8:17:4f:b8:89:fc:21:b1:86:ab:56:
         04:23:44:bc:39:86:46:a9:b8:c1:af:e9:8e:ba:21:30:aa:5c:
         63:e5:20:a9:11:b4:c9:e9:5c:df:68:32:61:2a:06:32:bd:2e:
         0f:e6:98:55:37:ac:e9:49:8e:2c:d3:7a:2b:81:82:ff:47:7e:
         91:ba:83:db:4d:21:53:dc:10:eb:f0:de:45:83:20:af:5a:0c:
         d7:05:95:84:1f:13:e4:ba:74:e1:b7:f7:ec:f3:51:09:3f:33:
         c2:fc:e4:b7:0a:69:f6:a2:e4:f2:2d:70:4b:a6:06:55:8b:0a:
         e6:ab:67:c0:80:36:50:93:91:92:d9:24:e3:d2:30:bb:99:97:
         20:98:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org