Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A65E1D21E6949892414A99E5A2FBECD3A8601B83.cer
File:                     A65E1D21E6949892414A99E5A2FBECD3A8601B83.cer (raw, json)
Hash identifier:          OAOYcB6HnljjF254XsEPjqy3kjGUr6tW+c/A0olWolA=
Subject key identifier:   A6:5E:1D:21:E6:94:98:92:41:4A:99:E5:A2:FB:EC:D3:A8:60:1B:83
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1254BD0EEDC880F13617145991B8B14FC467EB13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ADpGn5uoPrN6v2pYChaToALuK6C7amUV3eeZsZ3Lxg94/0/A65E1D21E6949892414A99E5A2FBECD3A8601B83.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ADpGn5uoPrN6v2pYChaToALuK6C7amUV3eeZsZ3Lxg94/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Nov 2023 14:00:15 +0000
Certificate not after:    Wed 20 Nov 2024 14:05:15 +0000
Subordinate resources:    AS: 263006
                          IP: 186.227.144.0/21
                          IP: 2804:64ec::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:54:bd:0e:ed:c8:80:f1:36:17:14:59:91:b8:b1:4f:c4:67:eb:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 22 14:00:15 2023 GMT
            Not After : Nov 20 14:05:15 2024 GMT
        Subject: CN=A65E1D21E6949892414A99E5A2FBECD3A8601B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:78:89:36:26:0e:94:07:7a:29:a1:68:14:
                    3c:85:98:19:b5:66:a9:42:78:21:66:ca:04:59:4d:
                    18:da:96:0c:9d:49:c3:a8:61:46:d1:31:a3:8b:8d:
                    da:68:95:d7:a1:19:aa:b6:c3:e0:1f:8d:1e:84:3c:
                    6d:4c:37:be:97:b6:96:9a:8d:17:90:2a:27:cb:ea:
                    34:77:0c:37:28:01:46:22:f8:0d:f9:61:ed:7f:f4:
                    8e:3f:26:1b:34:eb:de:20:91:81:dc:9c:88:1c:3a:
                    bf:7b:8b:e7:96:1a:9e:b1:15:1c:a8:5b:80:cd:fb:
                    29:96:77:77:bb:a5:3b:3c:5e:61:66:dd:f2:e8:fc:
                    ec:f1:41:2a:a5:28:bc:ba:60:32:20:eb:25:72:5c:
                    05:54:5c:3d:d5:f2:6d:b6:f7:58:73:5a:10:9c:4b:
                    00:00:a4:09:c1:d4:a2:11:b6:22:40:d5:cd:6a:7f:
                    87:2f:66:5d:2e:60:19:60:17:aa:a4:53:e0:c1:55:
                    69:3d:f3:a2:cb:4e:ca:73:1b:ee:7f:29:a3:fe:c5:
                    80:8e:9e:83:04:ca:d9:fa:67:fb:d9:ec:c4:ff:00:
                    c5:e9:0e:92:04:54:6a:c5:93:7f:e6:21:3a:d2:b6:
                    4a:58:9c:9f:d0:1b:a4:1d:71:17:49:ff:7f:a1:a5:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:5E:1D:21:E6:94:98:92:41:4A:99:E5:A2:FB:EC:D3:A8:60:1B:83
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ADpGn5uoPrN6v2pYChaToALuK6C7amUV3eeZsZ3Lxg94/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ADpGn5uoPrN6v2pYChaToALuK6C7amUV3eeZsZ3Lxg94/0/A65E1D21E6949892414A99E5A2FBECD3A8601B83.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.144.0/21
                IPv6:
                  2804:64ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263006

    Signature Algorithm: sha256WithRSAEncryption
         2c:ec:29:13:c4:fc:3c:36:c5:46:59:fa:d3:ee:8d:65:a7:94:
         e5:3b:cf:38:dc:14:a1:58:07:07:8e:7c:57:bd:3d:7b:64:ef:
         61:d4:43:6f:aa:1f:65:84:da:36:22:11:ee:67:5d:da:ee:69:
         37:b9:51:fd:6f:66:51:43:b7:3f:46:20:f9:09:4c:3c:54:26:
         4b:db:01:17:94:80:49:62:4e:0b:7d:27:5c:3d:42:30:fd:cf:
         21:e6:19:14:c4:30:7c:b3:45:93:7a:ce:e4:fc:d1:62:9c:16:
         ba:21:56:26:e9:5a:49:a2:cc:9e:20:36:8d:65:d4:eb:a5:0f:
         96:40:31:50:32:19:2d:61:9d:89:ff:b4:21:4c:64:db:04:a2:
         67:13:51:78:39:0d:5d:b1:b4:5e:e9:8b:61:1f:35:c6:d3:35:
         c2:37:f8:f9:08:c1:75:dc:89:8a:91:48:ba:3a:ba:17:25:89:
         ae:8d:e1:5b:ae:db:32:64:01:22:47:b6:e4:11:60:e9:dd:a6:
         2b:c5:a2:b1:ca:98:6f:91:4d:e3:4a:2a:bb:c3:8f:63:06:fa:
         f1:94:05:b8:80:cb:80:4b:90:60:29:62:06:25:0b:96:8d:2e:
         92:c7:73:cb:a6:9a:f8:de:eb:6b:de:65:63:c4:5e:b9:0d:56:
         d4:b4:1f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 01:24:13 2025 by rpki-client