Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/67D57F211328E67D517D7804F40E7CD826FA4FD0.cer
File:                     67D57F211328E67D517D7804F40E7CD826FA4FD0.cer (raw, json)
Hash identifier:          CO1tGovV5cFrkOuI74aKEDeywt06GcK2CTfjy53bvXU=
Subject key identifier:   67:D5:7F:21:13:28:E6:7D:51:7D:78:04:F4:0E:7C:D8:26:FA:4F:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       05689F5943F5877A57E2C4AD136C698AEBA35832
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/67D57F211328E67D517D7804F40E7CD826FA4FD0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 May 2023 15:01:34 +0000
Certificate not after:    Tue 07 May 2024 15:06:34 +0000
Subordinate resources:    AS: 270701
                          IP: 189.127.132.0/22
                          IP: 2804:7010::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:68:9f:59:43:f5:87:7a:57:e2:c4:ad:13:6c:69:8a:eb:a3:58:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  9 15:01:34 2023 GMT
            Not After : May  7 15:06:34 2024 GMT
        Subject: CN=67D57F211328E67D517D7804F40E7CD826FA4FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b1:31:f8:a2:2b:42:ce:c8:58:ce:ab:c3:d4:
                    b7:db:b7:7a:bf:66:8b:9f:86:a6:c9:f5:a3:fa:c9:
                    3e:bb:10:34:da:20:39:dd:1e:15:69:6b:c8:0b:fd:
                    d6:6e:c2:6e:d0:13:c5:1a:1f:a5:07:8c:e7:4a:f5:
                    13:b5:8e:b7:ea:9d:5c:49:22:5a:93:a2:50:be:93:
                    28:9f:b4:ef:51:7c:8e:14:37:35:d3:52:86:24:6f:
                    af:f6:5e:e8:73:cd:a7:b3:35:b8:85:b3:24:f0:ea:
                    ce:b5:55:fb:8b:05:56:21:69:8e:f2:a6:90:57:29:
                    51:76:29:a5:31:5d:c2:9c:88:38:98:68:1a:eb:f1:
                    4c:c3:06:8a:78:dd:84:f6:d8:a9:34:8e:69:97:2e:
                    f8:21:ea:f1:35:62:20:22:72:53:52:d1:5a:9c:ac:
                    f5:27:82:b3:17:62:d9:37:86:d9:8f:cb:5f:d6:bc:
                    53:cd:ea:cb:1e:3a:8f:ff:28:69:72:99:c3:8f:a1:
                    6c:47:ca:c9:9d:f6:16:b5:d7:f6:4a:f8:1d:03:b2:
                    81:54:0c:fa:67:e2:93:27:07:3e:d6:c9:87:cc:9f:
                    a0:cb:dd:b4:31:0b:6f:ff:d8:eb:3f:1a:ee:96:84:
                    c5:d9:68:63:2d:5a:33:26:82:b9:06:29:15:04:12:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:D5:7F:21:13:28:E6:7D:51:7D:78:04:F4:0E:7C:D8:26:FA:4F:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/67D57F211328E67D517D7804F40E7CD826FA4FD0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.132.0/22
                IPv6:
                  2804:7010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270701

    Signature Algorithm: sha256WithRSAEncryption
         15:7c:cb:96:c9:dc:e8:d8:22:ac:50:ed:4e:68:c5:ac:e7:96:
         59:ee:62:f8:bb:0b:d2:cf:b4:72:bc:fb:60:52:f4:95:59:83:
         67:49:37:fc:c4:ec:c7:72:eb:74:c3:b3:f8:12:af:88:02:ba:
         a9:93:33:8c:8a:f4:b1:67:ed:58:80:61:37:f4:1b:18:37:81:
         61:d0:d8:71:3e:eb:a8:be:b4:36:8f:a8:7d:5d:2b:bf:b2:11:
         c4:3c:c7:5d:1d:ff:2e:fe:1e:5a:59:0f:34:08:25:0d:e3:ca:
         19:9f:76:64:a1:60:d9:0c:29:e5:85:b4:74:30:8b:9b:2f:0c:
         41:59:a2:26:c6:5c:a5:c5:c3:75:08:31:c6:b0:98:ca:f2:5b:
         79:4e:b1:21:a4:e0:b4:b3:5c:ef:13:92:c1:9c:96:e3:e3:21:
         f9:11:11:29:de:ec:7f:41:43:4e:04:6a:54:40:11:38:3b:b9:
         df:90:73:22:72:dc:ed:08:29:d8:7d:81:e0:e3:a9:66:c3:98:
         f7:03:36:77:b6:f1:53:e4:d2:72:f8:a2:99:3d:f9:96:9e:62:
         2e:cc:10:ee:98:53:8e:9d:87:c3:e3:ea:ce:1e:f3:c3:72:07:
         cb:af:81:11:54:4a:97:f6:0f:8b:58:f3:57:8f:47:ce:4c:20:
         bd:4d:e8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org