Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer
File:                     D63F65BC868A989F5016FC5F923857D26EE2A068.cer (raw, json)
Hash identifier:          xmKrBwcG0K2Jn+6VF7doVCAJoVSyg47AEq6HVuc405g=
Subject key identifier:   D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       372F759BA24A75DC0BA53BCC6D0682C6E5577A20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/D63F65BC868A989F5016FC5F923857D26EE2A068.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 07 Apr 2024 17:16:29 +0000
Certificate not after:    Sun 06 Apr 2025 17:21:29 +0000
Subordinate resources:    AS: 268651
                          IP: 45.165.8.0/22
                          IP: 2804:5474::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2f:75:9b:a2:4a:75:dc:0b:a5:3b:cc:6d:06:82:c6:e5:57:7a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  7 17:16:29 2024 GMT
            Not After : Apr  6 17:21:29 2025 GMT
        Subject: CN=D63F65BC868A989F5016FC5F923857D26EE2A068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5c:1b:05:6f:bb:11:b3:e2:07:dd:9b:ff:1d:
                    ea:85:19:2f:3f:1a:d3:d8:f8:f3:f7:5c:21:23:0c:
                    a8:2a:11:e8:56:84:33:7b:57:95:25:39:a7:7e:f8:
                    08:cd:4a:1d:74:61:d3:b1:bb:db:d6:f1:61:47:73:
                    3a:a7:f7:a3:b3:0e:f7:97:fc:1a:5e:b4:b7:16:02:
                    b9:11:53:1d:b6:f9:b2:8e:7b:06:f5:b5:b0:8e:58:
                    5c:f6:4c:c0:01:fa:69:6d:93:f3:97:bf:89:c7:62:
                    18:39:53:8d:32:fd:16:ec:8d:29:23:ee:6d:f4:37:
                    af:02:6a:92:df:63:b2:85:26:07:e2:4d:97:a1:10:
                    15:a9:d2:cd:a3:52:bd:f8:2a:78:27:59:7a:2a:ca:
                    68:5f:ef:bf:f7:3d:1c:d2:de:9f:be:d2:2e:30:81:
                    71:88:88:95:6e:4a:06:b9:aa:2c:2b:5c:4e:8b:c5:
                    fe:03:32:66:3e:c5:9c:24:41:18:b3:34:53:21:65:
                    ec:23:52:bf:ca:91:2e:03:17:15:f3:59:46:bd:a9:
                    0d:ff:db:9e:cc:e1:85:66:e9:ff:1c:8d:49:48:3b:
                    ec:f4:c1:09:16:4a:6d:f4:ab:a3:fc:3a:09:5a:8d:
                    77:c3:32:16:21:07:41:31:1f:bd:2d:e1:f7:c4:9f:
                    05:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/D63F65BC868A989F5016FC5F923857D26EE2A068.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.8.0/22
                IPv6:
                  2804:5474::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268651

    Signature Algorithm: sha256WithRSAEncryption
         89:69:15:f8:66:84:11:30:aa:75:c6:3a:53:c6:d8:e5:ac:88:
         ef:1e:b6:59:06:57:db:56:97:6f:1c:41:32:d0:af:73:4b:75:
         90:38:c2:df:44:55:07:0a:dd:57:4b:77:24:2f:63:47:3e:52:
         98:85:8f:62:15:d9:9c:3b:a2:58:34:0d:1c:2c:72:f6:1a:7b:
         10:b7:11:c0:c5:0a:a9:cc:fa:e5:5b:ca:de:b9:45:fa:e8:60:
         e5:05:c2:56:d0:9c:40:60:85:0d:f5:04:bf:5b:16:98:94:8f:
         af:e0:bd:63:57:8b:b5:61:52:fc:14:1a:e1:4a:f3:39:21:30:
         66:92:b4:91:9e:3b:22:68:7f:8d:18:48:93:c3:64:4f:6e:b4:
         3c:6e:1b:5e:f3:17:b5:21:33:f3:9c:34:a7:01:60:3c:95:77:
         82:22:f3:ca:db:92:7b:e1:a1:50:94:2e:b2:60:60:3e:4d:7b:
         ce:e5:38:9b:66:01:20:93:58:f8:87:2a:e6:0c:7c:00:ce:ba:
         47:67:c3:c6:f1:ec:1b:f3:d4:07:29:10:2d:3f:fe:cd:a7:1f:
         20:41:bb:71:fd:ee:36:dc:ea:61:d0:0b:53:7f:bd:f8:0e:71:
         4b:60:96:62:d5:0b:00:dd:e4:ed:37:89:e6:b8:f2:f6:b7:a6:
         21:80:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org