Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C66444B076AF17ECBCA76EBA7C89B5446748BFEA.cer
File:                     C66444B076AF17ECBCA76EBA7C89B5446748BFEA.cer (raw, json)
Hash identifier:          gsOojEDjPXiLygkcsUAOfJSj913p1ty57xNGtfnNMF8=
Subject key identifier:   C6:64:44:B0:76:AF:17:EC:BC:A7:6E:BA:7C:89:B5:44:67:48:BF:EA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5AE1355272AAFBC1A53DCE680973F892962B388A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/C66444B076AF17ECBCA76EBA7C89B5446748BFEA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Apr 2023 02:05:11 +0000
Certificate not after:    Thu 25 Apr 2024 02:10:11 +0000
Subordinate resources:    AS: 266196
                          IP: 45.6.160.0/22
                          IP: 2804:3c34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e1:35:52:72:aa:fb:c1:a5:3d:ce:68:09:73:f8:92:96:2b:38:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 27 02:05:11 2023 GMT
            Not After : Apr 25 02:10:11 2024 GMT
        Subject: CN=C66444B076AF17ECBCA76EBA7C89B5446748BFEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:e2:0b:fd:75:88:f2:a6:3a:32:37:a2:10:
                    43:ae:b3:ba:55:b8:2d:d3:39:91:5f:2f:e9:72:54:
                    5a:15:37:86:87:3c:14:1f:14:a1:62:23:2b:94:d1:
                    03:20:4d:3a:7d:3a:1d:e7:be:fe:a4:c4:16:31:02:
                    62:53:87:18:ce:a0:f5:6f:47:4f:71:f8:c2:9a:dd:
                    99:df:c2:dd:b7:89:db:62:61:61:16:87:25:d8:c2:
                    f6:e5:7e:06:d7:b9:73:5d:b2:3d:32:2d:1e:d4:55:
                    7c:ca:22:06:fd:04:a5:8a:94:e3:70:89:aa:3a:cd:
                    70:20:0a:7e:28:0b:1c:63:25:cf:e1:7a:70:32:05:
                    c4:26:02:a0:88:8a:5d:34:b9:56:7d:2f:af:ac:14:
                    f3:f4:57:3d:dc:ca:1d:fd:7a:9a:d5:84:36:c9:17:
                    e6:6b:27:b4:b0:60:e6:3f:2f:31:51:9a:31:45:5a:
                    49:5e:33:0d:d3:52:d6:06:3e:f5:29:07:e5:24:05:
                    ef:54:5f:d9:52:77:87:14:79:6d:7a:4e:7e:48:d2:
                    15:b8:dc:e8:42:d4:33:fd:27:bc:0b:d3:41:a9:47:
                    7c:27:8d:de:aa:6b:26:ce:76:96:32:dc:31:ae:35:
                    27:a8:63:92:e2:16:2f:6c:d9:b2:1b:f4:22:dc:22:
                    f8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:64:44:B0:76:AF:17:EC:BC:A7:6E:BA:7C:89:B5:44:67:48:BF:EA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/C66444B076AF17ECBCA76EBA7C89B5446748BFEA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.160.0/22
                IPv6:
                  2804:3c34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266196

    Signature Algorithm: sha256WithRSAEncryption
         5d:72:68:c6:ae:17:78:a9:2b:bf:ee:6f:51:e4:ec:86:e8:5a:
         9b:5f:c5:8d:0c:75:b8:f0:e8:9e:4a:a9:75:0b:66:76:bc:6f:
         ae:0d:c4:df:93:f1:ec:f3:53:76:23:a6:9a:38:5d:f6:7d:08:
         c2:6f:07:14:2a:7a:3b:b4:0f:fe:44:ba:dc:40:82:7e:e6:12:
         47:3e:cf:c5:b1:40:3c:c8:41:d5:d3:54:c6:d1:47:74:91:38:
         51:df:32:2b:4c:8d:c0:9d:d1:4c:08:ca:04:bf:12:3a:ff:23:
         29:f3:61:f4:f0:b6:6b:76:e5:87:c3:eb:19:0b:d8:82:6d:16:
         eb:e7:67:7d:12:90:3d:c8:1c:51:6c:0a:4e:aa:97:d9:ea:40:
         a7:82:f0:44:0e:2c:fb:3a:d4:bb:d0:1a:8b:eb:4c:83:0c:de:
         b3:17:ce:8a:20:bb:81:8c:a7:41:0f:a7:f1:97:6a:a8:5e:0f:
         65:11:f5:49:a3:48:c3:38:d5:62:51:00:0e:c6:89:ea:81:42:
         23:4c:54:22:89:79:ca:6d:0f:e4:13:9a:fd:a3:9f:dc:9f:3e:
         21:c1:16:fc:96:7c:d8:f2:23:92:88:f4:b7:1a:fe:5c:97:6a:
         64:50:fc:7b:49:14:95:4b:6c:25:17:84:26:80:7f:84:75:74:
         fb:5d:dc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org