Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A065F0617DE619BABFFDB6A77169DD717A56B3CB.cer
File:                     A065F0617DE619BABFFDB6A77169DD717A56B3CB.cer (raw, json)
Hash identifier:          fjnh3lbrRzkYFNlqKcTCektjam0TVb2jBg8kyxaoOgU=
Subject key identifier:   A0:65:F0:61:7D:E6:19:BA:BF:FD:B6:A7:71:69:DD:71:7A:56:B3:CB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       69A51528499495B6D26EE3876988F2C9D8C0A514
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/A065F0617DE619BABFFDB6A77169DD717A56B3CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Oct 2022 00:09:11 +0000
Certificate not after:    Thu 19 Oct 2023 00:14:11 +0000
Subordinate resources:    AS: 267032
                          IP: 45.226.12.0/22
                          IP: 2804:471c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a5:15:28:49:94:95:b6:d2:6e:e3:87:69:88:f2:c9:d8:c0:a5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 20 00:09:11 2022 GMT
            Not After : Oct 19 00:14:11 2023 GMT
        Subject: CN=A065F0617DE619BABFFDB6A77169DD717A56B3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2e:be:2e:ed:25:54:4f:10:76:aa:03:15:56:
                    4a:12:58:18:b6:8f:01:64:30:1e:55:27:4f:56:fe:
                    93:47:7c:78:12:b1:46:97:e7:ed:f9:dd:9c:42:0f:
                    fb:96:a2:5e:73:72:ec:1f:94:89:eb:cf:9f:45:cd:
                    8e:a2:b8:9c:84:32:61:94:e3:e7:98:1d:50:8d:93:
                    61:24:03:20:b1:67:67:d3:b1:fa:04:2f:69:5c:67:
                    7a:d1:2a:a7:2f:4c:07:70:f8:03:d4:3a:ae:2c:56:
                    0f:41:d1:e8:3f:ed:3f:40:04:a5:bc:8a:e5:17:7e:
                    11:08:0c:c9:83:9d:7f:0a:68:48:10:a6:84:39:d9:
                    bb:fa:7b:82:c4:b3:eb:74:1b:d2:ac:c5:33:b4:52:
                    1b:66:ae:47:d9:9e:f2:9c:a6:11:1b:78:34:b0:00:
                    f2:e2:2b:df:86:cc:06:af:d4:26:ab:67:ac:d0:5c:
                    16:eb:a2:42:ca:2e:d3:f8:e1:b0:03:d3:99:04:f7:
                    35:c7:2c:47:8e:ab:ec:c7:c9:d9:67:21:6d:13:8c:
                    98:36:42:59:c5:dc:c1:87:b3:c1:98:ae:d0:df:37:
                    ac:1b:05:59:29:a1:48:56:54:dc:fc:6b:be:de:f1:
                    39:8f:47:23:42:ec:8c:69:24:ec:7a:f6:09:10:aa:
                    ae:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:65:F0:61:7D:E6:19:BA:BF:FD:B6:A7:71:69:DD:71:7A:56:B3:CB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/A065F0617DE619BABFFDB6A77169DD717A56B3CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.12.0/22
                IPv6:
                  2804:471c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267032

    Signature Algorithm: sha256WithRSAEncryption
         5c:18:5a:03:32:27:d6:d0:f5:01:62:5f:3b:ea:84:d1:32:0f:
         2d:4d:11:4a:df:8c:17:87:da:4f:82:f0:35:47:5f:ba:f6:2f:
         25:77:75:3c:32:65:c3:91:54:31:85:b1:3e:b0:a6:77:23:36:
         f3:49:43:e8:5d:86:08:ef:80:20:68:c3:52:01:b6:6f:82:ed:
         31:f0:a3:f0:e0:f9:44:89:b7:f5:5d:5f:d2:90:7d:98:a4:9a:
         c8:66:85:ff:f2:ff:cb:3a:f4:12:49:88:50:a5:78:30:ea:3a:
         26:af:25:4c:55:8d:40:10:fa:b2:00:1c:a7:93:84:7c:59:15:
         ba:6c:e0:8d:60:3c:1b:be:18:0c:2a:f6:89:27:0f:76:b0:b3:
         be:3e:fd:d4:c2:b0:03:ca:c0:b9:a3:3d:ff:43:70:ec:63:6f:
         75:15:bf:9c:5b:f7:5d:2a:40:e7:ba:6a:ea:94:cb:24:e5:93:
         5d:aa:9c:07:7b:f9:67:bc:0e:ed:c5:b2:e6:78:a1:02:a1:b9:
         75:73:15:47:ae:f5:b7:06:3b:2a:e6:a3:de:85:62:0b:ef:30:
         31:59:8c:d9:4a:71:a6:78:4d:21:34:de:6b:78:45:17:bc:f1:
         b4:46:72:c2:5f:a9:9a:8f:b1:7b:f5:6b:ac:75:46:6c:43:71:
         1c:64:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org