Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A66DDA8A5EEDDF69630CFBB6B041152978397596.cer
File:                     A66DDA8A5EEDDF69630CFBB6B041152978397596.cer (raw, json)
Hash identifier:          J4cBsc9jtgXSrhIMg4lSH/ODB65Sev+0VsqBz9mvqlY=
Subject key identifier:   A6:6D:DA:8A:5E:ED:DF:69:63:0C:FB:B6:B0:41:15:29:78:39:75:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       66007B0A952CB54AA1D366C6398E287D34617F76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/A66DDA8A5EEDDF69630CFBB6B041152978397596.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 18:50:21 +0000
Certificate not after:    Tue 03 Dec 2024 18:55:21 +0000
Subordinate resources:    AS: 268106
                          IP: 45.169.108.0/22
                          IP: 2804:5818::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:00:7b:0a:95:2c:b5:4a:a1:d3:66:c6:39:8e:28:7d:34:61:7f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 18:50:21 2023 GMT
            Not After : Dec  3 18:55:21 2024 GMT
        Subject: CN=A66DDA8A5EEDDF69630CFBB6B041152978397596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:41:a4:f9:65:3e:03:52:50:67:ca:6e:a3:88:
                    63:77:10:dd:13:e7:4f:f8:87:53:98:e4:30:a3:66:
                    87:69:c5:30:37:ed:c5:fb:0a:1f:49:8f:25:e0:ad:
                    af:f6:63:0b:65:d8:b9:3e:f9:af:0d:ea:2d:4d:8a:
                    70:7c:a4:2e:ad:be:e6:ca:8e:34:b2:83:b8:22:9b:
                    91:ca:4b:ca:63:4f:bb:3c:80:b4:ae:9b:d1:c2:4d:
                    da:91:73:61:b4:5f:04:cf:c9:fe:25:a3:09:4b:f8:
                    96:cc:76:41:1b:8b:76:45:dc:b7:36:ba:34:21:63:
                    da:40:c8:5d:2c:c8:01:fb:ba:ea:9e:92:ac:15:9d:
                    2b:a2:e5:b5:0b:6b:26:54:6e:16:27:5f:4e:f8:4e:
                    c3:60:99:96:89:6b:3e:1c:6c:91:10:d1:65:6e:37:
                    cb:a9:57:5a:bd:21:d2:8e:4b:a4:af:05:6f:7b:ec:
                    27:da:c5:50:f7:34:21:25:01:5b:60:e0:6a:86:c5:
                    b9:1f:e4:15:c0:e7:a4:32:7c:f1:3c:f5:ef:a3:f7:
                    1e:54:f5:c8:2f:aa:a4:7f:b7:29:88:ba:9c:91:b4:
                    d0:12:7b:a1:a7:4d:8d:a0:f1:b2:9d:bc:5f:e9:70:
                    48:2c:0b:1f:41:bd:fe:38:7e:2a:c9:36:ec:0d:26:
                    ad:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:6D:DA:8A:5E:ED:DF:69:63:0C:FB:B6:B0:41:15:29:78:39:75:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/A66DDA8A5EEDDF69630CFBB6B041152978397596.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.108.0/22
                IPv6:
                  2804:5818::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268106

    Signature Algorithm: sha256WithRSAEncryption
         64:cc:0b:14:3a:e7:a8:60:f3:79:16:a3:bd:b4:9f:0a:a7:0f:
         b7:9a:71:c4:0a:59:a9:a9:df:f9:04:86:d7:b7:3e:a7:75:a4:
         aa:c8:d2:1d:92:2c:49:b0:4b:2d:8f:b5:cb:0c:b6:54:7c:f2:
         bd:2a:b4:18:17:56:6b:37:46:88:62:78:5a:a1:01:9a:f9:7f:
         95:76:f6:a7:db:ab:32:11:34:2d:2b:e2:09:e1:16:a7:06:1b:
         ea:e0:06:8d:4c:67:27:c7:41:03:ce:8e:18:e0:0f:84:03:7d:
         77:46:2e:92:0d:6b:b3:f6:4d:e1:32:85:09:88:9b:45:9e:6c:
         66:ac:fc:3e:5d:d1:b1:6d:d8:96:64:78:69:76:39:a3:ad:68:
         25:d9:23:98:e3:f9:8e:60:90:83:21:e7:e2:7f:ba:46:61:e9:
         b3:51:4c:24:ae:2c:e1:64:73:f7:68:1d:db:26:ee:3d:e5:33:
         de:7c:37:a7:b8:0b:66:a6:3f:bc:df:06:0b:d6:5f:de:98:4d:
         6f:c3:25:b4:fe:0e:8b:dc:6a:3f:72:68:c0:33:0a:8a:75:7c:
         6e:b5:f2:69:22:66:1e:14:28:50:55:1a:39:ef:67:62:a8:ba:
         e6:30:66:0f:b8:d5:aa:83:59:3d:86:4c:17:23:00:74:ea:0a:
         8c:aa:03:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:41 2024 by rpki-client on console-ams.rpki-client.org