Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer
File:                     75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer (raw, json)
Hash identifier:          M2xGxaUPJYYXO3WJy3TUGeZyu1pytJ+rvAX4ApS3FMM=
Subject key identifier:   75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       65C5E0F8E70111AA588E9835256CE30E5E44237C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 31 Oct 2023 07:40:16 +0000
Certificate not after:    Tue 29 Oct 2024 07:45:16 +0000
Subordinate resources:    AS: 61588
                          IP: 45.179.176.0/22
                          IP: 132.255.240.0/22
                          IP: 138.59.124.0/22
                          IP: 138.121.172.0/22
                          IP: 138.185.60.0/22
                          IP: 143.255.76.0/22
                          IP: 168.232.52.0/22
                          IP: 170.81.84.0/22
                          IP: 170.83.96.0/22
                          IP: 170.150.240.0/22
                          IP: 170.233.224.0/22
                          IP: 170.245.24.0/22
                          IP: 170.246.228.0/22
                          IP: 177.74.128.0/21
                          IP: 186.219.216.0/21
                          IP: 191.37.88.0/21
                          IP: 201.148.236.0/22
                          IP: 2804:ebc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c5:e0:f8:e7:01:11:aa:58:8e:98:35:25:6c:e3:0e:5e:44:23:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 31 07:40:16 2023 GMT
            Not After : Oct 29 07:45:16 2024 GMT
        Subject: CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:13:b1:e5:a7:c1:61:f4:9a:21:27:aa:3a:19:
                    66:e4:46:da:0a:c3:45:71:de:d9:a1:08:d7:6e:a9:
                    9f:97:62:1f:bd:5e:0e:57:f0:50:1d:39:fa:c9:91:
                    b4:4b:24:b3:41:bb:f5:8b:99:4d:04:9e:c2:58:b2:
                    2c:04:10:38:2a:bb:4b:d3:67:e3:7b:71:0a:56:3b:
                    4e:39:7e:6f:15:64:59:2c:44:38:26:32:53:96:79:
                    96:4c:76:6b:4f:b8:72:1d:45:c7:b6:ac:56:1f:49:
                    0c:b9:c5:bb:6b:a8:77:bb:4f:f7:34:1f:25:f0:31:
                    ca:ec:5f:be:86:d3:96:08:cf:94:58:9a:78:7a:f4:
                    66:99:d7:9d:0a:b6:f2:06:85:7d:b8:90:07:2d:d5:
                    c0:48:d1:e6:29:fd:57:d1:41:8c:ee:96:00:38:4b:
                    9f:5d:5c:58:4e:d6:08:68:94:23:5e:07:af:66:51:
                    17:a2:58:be:83:fc:6e:2b:27:7f:e1:5c:1b:1f:3e:
                    d2:26:1c:f0:28:50:c7:4d:70:e1:69:16:31:a1:9d:
                    b5:f7:88:f9:a6:7c:52:80:29:a2:e0:58:c6:16:e9:
                    8f:27:50:80:d4:55:48:3d:81:98:ce:89:af:d3:45:
                    d8:45:5a:01:68:d7:e4:19:93:47:7f:f3:b5:89:09:
                    da:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.176.0/22
                  132.255.240.0/22
                  138.59.124.0/22
                  138.121.172.0/22
                  138.185.60.0/22
                  143.255.76.0/22
                  168.232.52.0/22
                  170.81.84.0/22
                  170.83.96.0/22
                  170.150.240.0/22
                  170.233.224.0/22
                  170.245.24.0/22
                  170.246.228.0/22
                  177.74.128.0/21
                  186.219.216.0/21
                  191.37.88.0/21
                  201.148.236.0/22
                IPv6:
                  2804:ebc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61588

    Signature Algorithm: sha256WithRSAEncryption
         39:2b:bb:d2:c9:d6:18:24:67:4d:86:85:d1:27:00:8d:01:fb:
         be:51:fa:9d:a8:44:18:fe:63:31:9a:d4:a9:bb:05:db:ae:dc:
         ae:d8:94:b1:6e:10:81:a0:de:e1:72:89:f1:2d:a7:13:bd:c9:
         1c:4f:4e:2e:f8:1a:a1:a1:86:37:71:24:6a:9b:b0:9f:43:b4:
         11:dd:d0:f4:e2:26:1d:38:c2:26:17:ef:41:da:c4:6d:31:0b:
         37:24:5c:19:1c:42:42:c5:56:db:75:2f:3e:bd:b4:f2:99:f4:
         3e:80:2b:d5:be:30:87:f9:ff:ab:55:8e:3e:53:c0:ca:47:12:
         4d:f1:07:43:c8:ef:ed:d5:06:34:0c:10:68:41:47:c2:18:be:
         0e:17:ed:d9:d9:8b:39:be:4e:e1:b4:8f:1b:b9:d0:2a:f3:dc:
         28:1d:a7:9d:27:1f:43:0c:01:fe:98:af:4e:1f:7c:39:c7:7d:
         11:28:56:a3:fd:f2:57:e5:ed:82:27:04:fb:fa:32:eb:6f:c6:
         31:ea:ef:b4:34:ae:b4:03:72:0d:2e:89:ab:ae:26:97:48:f1:
         68:69:0d:73:ac:be:f1:d6:83:6a:f8:46:4f:36:1a:1e:54:96:
         56:63:80:6a:66:c8:03:cb:4c:ef:c5:1c:fe:77:9d:24:ed:22:
         78:1d:43:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org