Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.cer
File:                     67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.cer (raw, json)
Hash identifier:          vG9odL/DkJeOnefrioaMUz/UMLiXoBx12/GC3vb5tfE=
Subject key identifier:   67:49:1E:DA:76:E3:98:AB:01:F0:CC:6C:D7:47:4F:33:F5:D9:9A:5B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A7817FD902D7D1DE3155967F1606EE671070442
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Jul 2023 13:36:10 +0000
Certificate not after:    Tue 02 Jul 2024 13:41:10 +0000
Subordinate resources:    AS: 264020
                          IP: 143.0.144.0/22
                          IP: 2804:2988::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:78:17:fd:90:2d:7d:1d:e3:15:59:67:f1:60:6e:e6:71:07:04:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  4 13:36:10 2023 GMT
            Not After : Jul  2 13:41:10 2024 GMT
        Subject: CN=67491EDA76E398AB01F0CC6CD7474F33F5D99A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5c:98:45:64:28:50:fe:9f:ef:c3:6d:0d:2e:
                    4b:7e:0c:86:77:1e:af:cc:d4:75:3d:f9:fa:98:45:
                    11:25:a6:39:a5:02:c5:6c:63:8c:11:88:c0:c8:94:
                    8a:72:3d:94:41:d0:10:79:6b:64:0c:a2:09:7c:ed:
                    d1:f9:9d:19:bf:0a:3b:c0:b9:de:fd:d2:16:30:de:
                    f4:51:a0:05:44:02:a7:fa:9a:16:9e:ea:eb:cd:a3:
                    2a:42:3f:57:64:38:53:66:ca:d2:a8:61:76:fe:c0:
                    a0:22:4b:6f:e2:76:34:de:81:5e:44:36:fa:ec:6f:
                    7e:01:8f:b8:50:b0:85:6b:20:63:cb:ed:40:a7:43:
                    f1:fa:92:65:a5:df:92:0b:11:77:39:9f:24:74:c1:
                    b6:8f:d8:7f:01:0b:73:70:fa:6f:34:97:88:88:5c:
                    c8:60:7f:65:25:ce:3d:60:49:60:b2:58:3b:b0:43:
                    09:41:93:ad:5a:f0:65:d5:c3:f5:53:67:5c:9e:83:
                    bd:e7:88:7a:a9:88:d0:e9:03:72:12:57:4f:7f:61:
                    fa:b5:02:76:48:05:a9:61:f5:6c:ec:bf:ec:65:38:
                    b3:df:55:02:57:64:66:d4:8a:bd:2f:de:96:5a:5e:
                    ed:dc:ff:7d:17:8e:28:c4:bd:76:a7:6d:18:7d:af:
                    ea:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:49:1E:DA:76:E3:98:AB:01:F0:CC:6C:D7:47:4F:33:F5:D9:9A:5B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.144.0/22
                IPv6:
                  2804:2988::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264020

    Signature Algorithm: sha256WithRSAEncryption
         98:33:6b:b2:aa:89:0f:2c:44:08:aa:5c:95:15:de:94:f9:3a:
         e3:80:d3:3d:b2:ec:99:2c:23:09:1a:13:20:ac:86:38:26:db:
         13:f2:94:8f:92:8e:db:c0:3e:a2:bd:22:e0:11:aa:c8:57:9c:
         80:d1:dc:f4:ef:fb:47:86:eb:60:8f:0f:57:47:09:a5:6c:b1:
         3f:39:90:32:05:1d:76:49:87:5b:f4:4a:1e:ef:45:bc:6e:22:
         f4:46:20:3a:36:1b:66:38:95:bf:fb:43:d8:64:cd:7c:f1:cd:
         da:77:29:4b:13:db:5c:44:f1:9f:1f:31:16:99:9a:36:6e:2c:
         6d:4d:42:62:aa:9c:21:e0:9f:74:1e:2e:d3:1a:2b:dc:b0:3e:
         ba:4e:91:fc:72:01:0d:07:32:b8:36:6b:d0:73:55:3d:67:55:
         98:88:d5:48:b3:e8:55:a8:99:b7:d1:7b:15:76:63:f1:c2:d0:
         c6:05:8d:ab:01:00:56:31:5e:7f:15:9f:80:16:da:d7:3e:c9:
         76:4f:ba:b7:4d:25:17:aa:00:5b:18:03:a1:9e:96:90:39:0b:
         e7:c1:aa:a7:27:8a:d6:3a:26:f2:1e:eb:ef:fd:35:7a:60:09:
         b6:82:36:37:7b:35:4d:8c:67:e1:a6:26:35:5a:f7:f8:63:10:
         65:1d:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org