Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer
File:                     DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer (raw, json)
Hash identifier:          f/Op1wvZtd3Ok4sS45UQGcEv645ksjneMH8p15d7bNY=
Subject key identifier:   DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       026B6641CFD429B069EB8A6F71ED1B0B0A8DD6AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Mar 2024 14:08:10 +0000
Certificate not after:    Sat 29 Mar 2025 14:13:10 +0000
Subordinate resources:    AS: 262491
                          IP: 131.255.172.0/22
                          IP: 168.90.180.0/22
                          IP: 170.81.72.0/22
                          IP: 177.66.96.0/22
                          IP: 186.233.252.0/22
                          IP: 2804:518::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6b:66:41:cf:d4:29:b0:69:eb:8a:6f:71:ed:1b:0b:0a:8d:d6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 30 14:08:10 2024 GMT
            Not After : Mar 29 14:13:10 2025 GMT
        Subject: CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:f8:be:ef:9c:15:f5:96:cc:f4:b5:73:38:
                    6a:f1:7b:7c:e8:fc:ff:c4:a1:4e:49:b3:26:52:77:
                    e1:22:d5:0b:dd:18:10:ce:c0:fe:35:37:a0:fd:4f:
                    81:88:d9:f3:ba:94:c1:9c:36:39:25:d2:4a:ad:6a:
                    fb:6f:13:bb:12:1c:ef:9c:3c:1c:09:70:54:28:2f:
                    de:a3:f1:03:08:44:65:84:1a:7a:fa:6b:91:f6:21:
                    ef:a6:46:67:e2:9c:d8:3b:a1:98:19:2f:32:2a:47:
                    ac:b9:8e:16:a2:b4:3e:8d:71:6a:53:50:97:ac:39:
                    c6:a9:82:ea:93:f0:32:23:d9:ca:4a:f4:5c:f7:c1:
                    15:22:c2:0a:3b:fc:88:ce:ab:5a:03:8a:48:eb:ba:
                    e7:58:4e:71:8b:6f:20:6a:ae:53:0c:93:18:b3:cb:
                    81:a5:12:d6:bc:ec:cd:69:88:9d:68:e7:79:cb:8f:
                    ba:a4:31:07:ab:b4:2e:a6:5c:e7:1e:03:02:0c:22:
                    70:19:6e:00:4c:0d:f5:e9:2e:6a:fb:2b:72:5a:90:
                    9e:ae:0a:ee:d7:87:28:72:ef:97:85:80:78:ce:d7:
                    98:7f:82:61:57:dc:e8:83:fa:ac:27:16:bc:a8:08:
                    b1:ec:12:56:8e:da:b4:39:88:75:fe:1a:36:b4:07:
                    f1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.172.0/22
                  168.90.180.0/22
                  170.81.72.0/22
                  177.66.96.0/22
                  186.233.252.0/22
                IPv6:
                  2804:518::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262491

    Signature Algorithm: sha256WithRSAEncryption
         51:b7:76:18:ee:45:0a:26:bc:09:1f:eb:30:21:73:ab:7d:59:
         34:84:3b:79:ae:09:76:19:3a:8d:89:de:eb:64:f8:77:00:d9:
         f6:b9:7d:7d:e4:eb:5e:50:2e:53:f1:ff:da:a9:61:38:f6:51:
         e6:47:d3:da:5d:0a:42:b6:a5:fd:2a:6d:fd:34:0d:e7:32:ad:
         73:e6:46:3f:03:e9:3e:e0:52:78:bf:fd:0d:78:d0:be:83:d7:
         ff:87:7e:c3:7a:f0:dc:b7:1b:36:33:16:63:ef:2b:a4:23:36:
         17:2e:d0:26:8d:85:1f:08:0b:6c:ba:6c:b0:b4:ee:d9:86:8b:
         23:29:47:8b:b6:24:7a:37:4a:e9:af:81:06:de:1f:27:dd:ba:
         f3:bf:70:fd:24:6d:7d:86:8d:50:d4:4b:d2:de:35:7c:ba:8c:
         dd:e8:46:b1:94:93:09:ca:a5:68:fd:da:b4:0f:ad:b0:59:34:
         e5:11:a6:f9:75:37:43:bf:cc:73:74:a5:b6:34:23:ae:15:5a:
         dd:97:25:94:a4:c5:13:64:1d:ac:ac:f9:14:bd:65:b7:eb:17:
         33:f1:b9:df:00:8a:2e:5a:b4:1d:ac:93:09:a1:bc:a1:f2:36:
         19:25:80:34:64:fa:ec:94:90:0b:1a:65:9f:01:98:08:4c:94:
         21:22:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org