Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/67F5AE43E37505B47AB1DB03356AF2C5B2E02962.cer
File:                     67F5AE43E37505B47AB1DB03356AF2C5B2E02962.cer (raw, json)
Hash identifier:          GeyHk30hmtXegq6B9KcV+jZcnO+hNWN7VvC4GW2G60o=
Subject key identifier:   67:F5:AE:43:E3:75:05:B4:7A:B1:DB:03:35:6A:F2:C5:B2:E0:29:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       135F8D78A967579DA5A8A9C765EA464EF4407ADE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/67F5AE43E37505B47AB1DB03356AF2C5B2E02962.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Mar 2024 14:10:56 +0000
Certificate not after:    Fri 14 Mar 2025 14:15:56 +0000
Subordinate resources:    AS: 269075
                          IP: 45.179.108.0/22
                          IP: 2804:5f14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5f:8d:78:a9:67:57:9d:a5:a8:a9:c7:65:ea:46:4e:f4:40:7a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 15 14:10:56 2024 GMT
            Not After : Mar 14 14:15:56 2025 GMT
        Subject: CN=67F5AE43E37505B47AB1DB03356AF2C5B2E02962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:7c:d1:74:0c:da:ba:67:b1:50:d6:1d:e2:
                    2e:af:07:89:d8:8a:41:e7:a3:d5:4b:67:84:22:cc:
                    f7:1c:d3:59:f3:43:49:27:72:d6:46:1f:84:b5:a5:
                    99:69:8b:8c:35:e4:d8:9a:dd:1a:7f:0d:2a:63:18:
                    e1:bf:0a:78:fe:ce:92:07:4c:87:d9:b8:60:12:1e:
                    95:7c:54:b9:96:d8:ce:49:42:25:40:44:86:58:3e:
                    95:24:fa:c4:72:a5:85:98:4b:65:55:4f:d0:9f:11:
                    5f:3c:2b:8c:dd:cb:d2:91:39:d2:b8:39:c8:9b:10:
                    b9:d5:a2:b7:86:94:ee:84:24:4b:af:0f:6e:41:b6:
                    08:89:8d:0e:55:28:2a:9d:90:4c:e9:30:5e:bb:ca:
                    d6:3c:2a:c9:05:99:62:45:4a:d2:d0:c2:8d:53:48:
                    20:67:85:f5:e9:1f:20:fd:41:24:88:0a:a7:22:b6:
                    f9:b3:7d:ce:9e:2c:9e:62:97:44:0f:6c:55:7f:8b:
                    6f:a0:f4:11:9c:06:45:58:41:8d:bd:72:09:32:38:
                    75:b4:bd:78:83:fd:99:50:ae:d7:44:c9:13:38:79:
                    af:4b:76:52:ff:aa:1a:34:32:8a:93:9e:dd:98:d7:
                    da:f6:5c:41:cc:98:8f:d3:fc:cd:aa:f9:31:f1:0f:
                    53:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:F5:AE:43:E3:75:05:B4:7A:B1:DB:03:35:6A:F2:C5:B2:E0:29:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/67F5AE43E37505B47AB1DB03356AF2C5B2E02962.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.108.0/22
                IPv6:
                  2804:5f14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269075

    Signature Algorithm: sha256WithRSAEncryption
         10:5f:ea:2d:7c:d0:93:2f:27:81:82:84:4b:b4:6e:48:bf:25:
         72:0b:a0:ac:7c:9a:52:e4:d2:7b:9e:e0:e1:03:c6:b7:92:8c:
         7d:33:3c:5d:e0:ee:a0:a1:83:33:14:18:c8:a5:ea:cc:5f:60:
         c6:00:90:13:4f:1d:31:d5:e9:fe:e4:e9:a8:0f:78:ca:87:21:
         d9:37:c8:dd:a2:9e:51:44:1b:eb:a9:a5:20:d9:3b:6b:a2:44:
         d4:5b:8f:25:e3:df:51:b4:a0:ac:ca:53:4b:cb:e0:5d:ab:08:
         1d:ea:ef:5e:63:a6:af:b5:73:3c:c3:8f:80:17:d6:cb:38:84:
         a3:67:b0:c4:c5:2b:43:78:22:08:53:2c:a9:3a:ae:b5:f2:39:
         ea:85:3e:85:88:2e:83:fe:68:3d:20:b5:28:ca:d1:8f:70:a8:
         3e:d0:4e:b4:51:ed:4e:d7:c6:c0:7f:57:6b:1a:87:4b:04:41:
         aa:69:7d:4c:2c:bf:36:be:5b:b7:60:e0:fc:5b:9e:22:4d:a7:
         9b:8b:6e:43:c7:b7:d4:23:30:53:ac:d8:9c:9a:49:5c:a3:a6:
         a8:c7:a8:f1:9d:bb:3b:e9:f5:ce:09:5c:a9:e7:49:a1:e3:85:
         80:1d:84:cf:d6:7f:86:5b:fe:24:ae:ae:8a:ec:5b:04:c8:67:
         c2:3e:66:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org