Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer
File:                     67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer (raw, json)
Hash identifier:          GdRyOuTVghtRnXwBDMcBER1cb0mtfKfNS+zI40cYmfk=
Subject key identifier:   67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4705163E373A382A5D8A07CAB31A2FEE716924DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Apr 2024 19:44:45 +0000
Certificate not after:    Tue 08 Apr 2025 19:49:45 +0000
Subordinate resources:    AS: 268890
                          IP: 45.175.76.0/22
                          IP: 2804:5c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:05:16:3e:37:3a:38:2a:5d:8a:07:ca:b3:1a:2f:ee:71:69:24:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  9 19:44:45 2024 GMT
            Not After : Apr  8 19:49:45 2025 GMT
        Subject: CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6e:0a:6f:28:fa:e9:4b:cb:9d:91:bf:38:5d:
                    10:a7:2c:c1:09:94:1d:19:b3:72:06:51:6a:1e:9c:
                    84:3b:93:0a:98:8c:54:e2:50:cd:b8:31:c1:bd:11:
                    c6:ab:83:78:0b:42:7f:12:05:74:cf:c2:8c:b7:06:
                    06:ad:18:47:56:d9:6b:c8:98:51:de:75:49:be:bb:
                    8f:0b:d1:f8:4c:53:5c:50:d0:17:9e:b0:ed:42:71:
                    a2:b0:c6:a5:62:ee:6c:0d:b9:0f:24:32:89:25:79:
                    b9:a1:3d:35:bb:4c:36:94:48:29:4d:82:84:ff:f7:
                    df:96:12:86:d1:91:98:7e:71:70:99:8f:4d:cf:22:
                    58:2c:93:5d:dd:2e:61:9b:36:bd:67:1a:dc:15:20:
                    4a:57:0b:a7:ee:71:71:6f:ca:f7:4c:0f:f8:68:de:
                    7e:03:f4:49:db:d9:ea:96:34:57:b1:c1:a0:04:3c:
                    a9:b6:be:4c:d5:60:97:38:e0:4c:44:3d:ac:24:c5:
                    4d:f8:b2:e1:25:39:83:aa:02:d7:f3:9a:6c:c1:04:
                    af:2f:96:18:73:0a:a4:8f:76:71:a8:de:4b:78:18:
                    d0:4b:4f:56:fa:82:f9:43:1e:89:85:08:f3:bd:bc:
                    17:b9:a2:f0:40:b4:04:00:cf:65:5c:60:96:6d:66:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.76.0/22
                IPv6:
                  2804:5c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268890

    Signature Algorithm: sha256WithRSAEncryption
         2d:ef:07:2d:ab:70:ef:42:22:01:65:1f:5e:05:02:0e:2c:fb:
         9d:07:ca:09:09:fb:99:b3:b1:ee:4e:b9:54:2c:aa:57:79:6d:
         71:ab:cf:5e:8f:b5:94:b8:ef:cf:8f:96:ba:55:b9:0e:1a:24:
         58:99:52:8f:c1:22:3e:5f:e2:0d:54:e9:59:0e:72:1f:54:c3:
         b8:3d:ba:aa:52:9d:c2:c6:43:9f:18:77:96:60:cc:b7:86:3c:
         cf:a9:88:df:0b:fc:58:20:ee:cf:ed:ad:69:12:77:24:00:cc:
         c1:0a:af:cc:5f:3c:93:ca:9e:ae:bf:d1:6c:be:b5:db:1a:36:
         02:15:e1:bf:f0:e5:48:8f:29:14:34:65:b4:49:3a:2b:86:4b:
         23:8b:2b:f5:05:e2:cb:80:c7:7c:7d:a3:8f:b6:86:b5:b4:24:
         a9:65:5a:16:1a:bf:40:82:18:66:82:9f:bd:b3:13:5c:91:7c:
         bf:3d:11:8a:3e:f7:ac:de:7f:26:c2:d5:ec:0d:0e:6a:72:66:
         92:6f:dd:10:85:8e:30:14:4d:ec:7b:97:26:c6:79:9e:2c:e8:
         30:4b:e4:a0:1b:e6:a7:00:3a:ce:9d:12:63:7a:29:60:e7:9c:
         00:23:10:9f:aa:18:0d:b6:02:91:73:ec:9d:28:2e:25:b5:9a:
         b0:3c:28:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org