Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/66F12A0CECEF1C562203A473D5B993BF54BBA70A.cer
File:                     66F12A0CECEF1C562203A473D5B993BF54BBA70A.cer (raw, json)
Hash identifier:          GtesgbI5kh0BlAWET87n8tud66LIg9ybcaT3BeJZ+XA=
Subject key identifier:   66:F1:2A:0C:EC:EF:1C:56:22:03:A4:73:D5:B9:93:BF:54:BB:A7:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04894971B869311E8978DBF39C6C8BB8F4402F13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/66F12A0CECEF1C562203A473D5B993BF54BBA70A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 23:00:40 +0000
Certificate not after:    Tue 03 Sep 2024 23:05:40 +0000
Subordinate resources:    AS: 269163
                          IP: 45.181.24.0/22
                          IP: 2804:6060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:89:49:71:b8:69:31:1e:89:78:db:f3:9c:6c:8b:b8:f4:40:2f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 23:00:40 2023 GMT
            Not After : Sep  3 23:05:40 2024 GMT
        Subject: CN=66F12A0CECEF1C562203A473D5B993BF54BBA70A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:c6:92:63:76:43:bf:7b:60:82:4b:87:24:
                    52:74:40:a8:91:d9:b7:41:25:a7:32:e2:ed:24:19:
                    f7:80:e9:10:be:ed:bc:7e:e6:9c:83:47:e0:5b:08:
                    e5:c9:8a:3a:8d:50:8e:25:62:01:b1:2d:64:00:36:
                    5e:0b:38:4c:9e:82:93:d2:bd:73:2a:2d:dd:c8:7d:
                    aa:03:4a:51:0e:19:c1:06:5f:dc:56:ec:81:9d:c1:
                    27:82:3c:37:22:5d:85:0e:5b:aa:14:0d:c9:43:a5:
                    0e:ad:aa:06:ff:8c:87:74:fd:0f:67:22:11:7b:19:
                    3b:b7:6c:2f:fb:64:3c:95:8b:db:c9:42:66:76:e6:
                    4f:eb:84:2e:bd:b8:22:ea:18:33:e0:a1:50:2f:de:
                    9d:11:fd:c2:b5:72:91:71:8c:1f:33:d7:b2:08:6a:
                    ee:56:b5:0b:af:fb:90:6f:27:3a:0c:00:5f:05:5f:
                    fd:34:db:a6:d5:28:e7:6f:aa:4b:d4:22:66:e1:50:
                    02:cc:09:ca:c4:da:94:26:f2:58:f8:f1:d5:f1:dc:
                    ac:08:67:f6:3a:48:f0:a7:21:c4:c7:23:b1:97:fa:
                    45:6a:ad:ed:ee:61:82:d1:94:91:cf:d8:d3:5e:30:
                    09:c5:24:5b:79:8e:2d:6f:1c:52:52:99:d0:00:88:
                    17:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:F1:2A:0C:EC:EF:1C:56:22:03:A4:73:D5:B9:93:BF:54:BB:A7:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/66F12A0CECEF1C562203A473D5B993BF54BBA70A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.24.0/22
                IPv6:
                  2804:6060::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269163

    Signature Algorithm: sha256WithRSAEncryption
         3f:fc:e0:d6:5c:0e:cb:70:17:ca:7e:e1:0e:88:c3:7d:5a:91:
         69:8c:30:30:75:d9:40:28:26:9b:69:17:49:70:d5:e2:bb:27:
         2f:a6:61:d3:0f:ef:af:72:47:e4:64:b9:99:fc:b4:21:0f:b5:
         92:5e:c3:ed:91:80:a8:8c:e2:da:cf:0e:68:ce:af:43:7a:b9:
         53:bb:3e:dd:aa:bb:19:5f:55:55:ca:13:8c:f2:eb:d1:cd:b0:
         ed:da:b9:f1:bf:03:06:e4:92:b8:a8:85:17:1d:1c:bc:9c:5c:
         d5:5a:64:50:76:0a:c3:a5:38:8a:f1:f2:58:76:c4:67:af:4b:
         4f:95:69:4a:c3:cb:b7:0f:57:62:ec:53:52:02:b6:70:c3:b8:
         76:9d:88:a9:61:96:ff:68:d2:35:16:7d:13:5a:4b:34:10:3a:
         46:0b:32:2d:7b:74:98:23:2b:86:2a:0c:7d:68:5e:94:a1:01:
         1f:42:76:e8:e3:4e:ab:a4:29:e4:f0:f6:64:44:d0:59:6a:57:
         d3:eb:f7:34:81:ff:b9:04:bd:eb:a9:fe:59:e1:79:f6:f3:e9:
         3a:6f:05:76:e0:f6:2a:0b:3c:f5:5d:4c:35:62:5e:24:c6:19:
         3b:b9:cf:4e:ca:29:fb:f1:e4:71:68:25:81:53:16:c5:84:c1:
         6e:0f:3f:d7
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBIlJcbhpMR6JeNvznGyLuPRALxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MDUyMzAwNDBaFw0yNDA5MDMyMzA1NDBaMDMxMTAvBgNV
BAMTKDY2RjEyQTBDRUNFRjFDNTYyMjAzQTQ3M0Q1Qjk5M0JGNTRCQkE3MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQC8aSY3ZDv3tggkuHJFJ0QKiR
2bdBJacy4u0kGfeA6RC+7bx+5pyDR+BbCOXJijqNUI4lYgGxLWQANl4LOEyegpPS
vXMqLd3IfaoDSlEOGcEGX9xW7IGdwSeCPDciXYUOW6oUDclDpQ6tqgb/jId0/Q9n
IhF7GTu3bC/7ZDyVi9vJQmZ25k/rhC69uCLqGDPgoVAv3p0R/cK1cpFxjB8z17II
au5WtQuv+5BvJzoMAF8FX/0026bVKOdvqkvUImbhUALMCcrE2pQm8lj48dXx3KwI
Z/Y6SPCnIcTHI7GX+kVqre3uYYLRlJHP2NNeMAnFJFt5ji1vHFJSmdAAiBdlAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRm8SoM7O8cViID
pHPVuZO/VLunCjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80TjdOaVFBTVYxZ3l4cnl6a3lMMTc5NFhvV3hIcWhaaWNW
Z3pUN21iOHEzei8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNE43TmlRQU1WMWd5eHJ5emt5TDE3OTRYb1d4SHFoWmlj
Vmd6VDdtYjhxM3ovMC82NkYxMkEwQ0VDRUYxQzU2MjIwM0E0NzNENUI5OTNCRjU0
QkJBNzBBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIttRgwDQQCAAIwBwMF
ACgEYGAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBtrMA0GCSqGSIb3DQEBCwUA
A4IBAQA//ODWXA7LcBfKfuEOiMN9WpFpjDAwddlAKCabaRdJcNXiuycvpmHTD++v
ckfkZLmZ/LQhD7WSXsPtkYCojOLazw5ozq9DerlTuz7dqrsZX1VVyhOM8uvRzbDt
2rnxvwMG5JK4qIUXHRy8nFzVWmRQdgrDpTiK8fJYdsRnr0tPlWlKw8u3D1di7FNS
ArZww7h2nYipYZb/aNI1Fn0TWks0EDpGCzIte3SYIyuGKgx9aF6UoQEfQnbo406r
pCnk8PZkRNBZalfT6/c0gf+5BL3rqf5Z4Xn28+k6bwV24PYqCzz1XUw1Yl4kxhk7
uc9Oyin78eRxaCWBUxbFhMFuDz/X
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org