Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/670D46C0846300F7BEF4BE8DD31649E1CB70553B.cer
File:                     670D46C0846300F7BEF4BE8DD31649E1CB70553B.cer (raw, json)
Hash identifier:          xKvs2RGzERCwQAtmoJ94qYWeOvSMlEB1qHkib8+hTHs=
Subject key identifier:   67:0D:46:C0:84:63:00:F7:BE:F4:BE:8D:D3:16:49:E1:CB:70:55:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0AED458334FDEA7C1C98CB45DC715F47283E3B5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/670D46C0846300F7BEF4BE8DD31649E1CB70553B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Feb 2023 18:33:22 +0000
Certificate not after:    Tue 06 Feb 2024 18:38:22 +0000
Subordinate resources:    AS: 268229
                          IP: 45.235.200.0/22
                          IP: 2804:4df0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ed:45:83:34:fd:ea:7c:1c:98:cb:45:dc:71:5f:47:28:3e:3b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 18:33:22 2023 GMT
            Not After : Feb  6 18:38:22 2024 GMT
        Subject: CN=670D46C0846300F7BEF4BE8DD31649E1CB70553B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:1b:89:72:f7:8b:95:f4:87:bc:fb:97:d0:
                    eb:44:ac:b0:10:81:85:60:76:a6:37:af:12:8a:58:
                    f3:24:b3:85:c4:b5:c4:a6:a8:06:f7:40:e6:7a:74:
                    94:e3:a3:a1:27:c8:e6:73:44:9e:60:1e:13:21:12:
                    26:50:b9:9f:9d:81:3e:49:5f:77:01:25:cf:a4:d4:
                    44:5d:4c:15:32:83:34:8a:01:b4:ec:89:bc:1b:b9:
                    65:1d:ca:9a:db:fb:0a:ce:b4:ad:1f:cc:4b:d6:63:
                    7a:12:42:67:52:8c:b3:45:53:1c:b0:ca:bd:52:19:
                    bb:b1:03:46:a8:19:a9:43:4e:ce:e5:87:ef:5f:d9:
                    76:39:28:a5:6e:c3:5f:68:09:d7:0d:29:78:44:12:
                    4d:b3:71:50:02:0f:a8:6d:4e:e2:8a:d4:80:ff:58:
                    a9:d0:9c:4e:92:90:e4:ee:ee:a7:f2:c7:ac:56:2b:
                    d4:ea:83:50:27:b8:e9:2c:92:08:1f:0f:be:93:55:
                    2a:a2:4d:a1:4b:ad:d1:73:a1:b8:bd:81:81:1a:b5:
                    69:f2:44:2f:a3:17:ee:09:3d:4d:9f:af:31:da:3b:
                    a7:f5:5f:d6:8e:06:d0:e5:80:3e:bd:4e:5a:dc:a7:
                    86:65:c4:54:bb:e8:0c:39:5d:5f:a4:b2:89:6b:0d:
                    8d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:0D:46:C0:84:63:00:F7:BE:F4:BE:8D:D3:16:49:E1:CB:70:55:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/670D46C0846300F7BEF4BE8DD31649E1CB70553B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.200.0/22
                IPv6:
                  2804:4df0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268229

    Signature Algorithm: sha256WithRSAEncryption
         64:3a:c8:74:61:4b:b2:cd:99:d1:42:dd:73:5c:fc:90:d0:f3:
         d3:74:ec:36:20:5a:75:df:6c:ba:c6:7e:19:80:f7:d8:58:6a:
         36:aa:15:04:bf:99:c8:0e:2e:fa:eb:44:62:18:0b:79:ce:b3:
         f9:c1:af:9a:5b:6f:13:81:da:14:6c:75:04:81:09:22:1a:a3:
         f5:2d:89:10:78:67:f4:63:00:92:64:e2:ab:c2:ee:97:f7:24:
         a1:36:3b:1d:b7:92:cd:6b:26:eb:0e:78:19:73:6b:81:76:d8:
         35:f6:da:9b:57:88:54:04:4b:66:63:d4:61:6e:9c:f3:c0:8d:
         b4:69:d0:11:d8:70:45:8c:0b:8b:7c:17:ed:34:0b:0f:9d:0c:
         74:bb:50:de:9a:03:d7:72:32:41:e2:a3:5c:00:ca:b1:ea:33:
         49:98:e7:15:5f:c3:21:8f:80:da:82:d2:80:bb:b1:df:57:38:
         bf:99:4e:23:95:db:1c:74:82:58:32:e0:f8:28:86:bd:1a:dd:
         f2:53:8c:a7:f5:ce:e3:d7:01:07:a9:74:de:9b:eb:53:90:77:
         c7:65:cd:21:6e:42:57:e5:22:6b:df:b2:92:e0:21:0a:4d:9f:
         bc:07:56:2e:87:b0:c9:d4:7c:0e:fe:98:26:2e:f5:16:46:73:
         16:5b:c1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org