Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/064E7290B7DD05F11BDA6949B918245474DCC895.cer
File:                     064E7290B7DD05F11BDA6949B918245474DCC895.cer (raw, json)
Hash identifier:          UPys97fJ1wW+dVCDZp/oDTjdDTiOU2vazUYUieGMWSA=
Subject key identifier:   06:4E:72:90:B7:DD:05:F1:1B:DA:69:49:B9:18:24:54:74:DC:C8:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5279EB43A4FFC7E755CEDD3015101C400354AA17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/064E7290B7DD05F11BDA6949B918245474DCC895.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Nov 2023 10:12:53 +0000
Certificate not after:    Thu 31 Oct 2024 10:17:53 +0000
Subordinate resources:    AS: 263283
                          IP: 179.127.72.0/21
                          IP: 2804:1658::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:79:eb:43:a4:ff:c7:e7:55:ce:dd:30:15:10:1c:40:03:54:aa:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  2 10:12:53 2023 GMT
            Not After : Oct 31 10:17:53 2024 GMT
        Subject: CN=064E7290B7DD05F11BDA6949B918245474DCC895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c7:70:c3:12:2a:34:86:48:e1:14:7d:cb:37:
                    fb:65:4f:83:92:36:4a:ae:23:6d:1b:22:e0:ed:16:
                    c5:14:26:38:e5:c9:22:49:47:82:52:29:b6:00:06:
                    03:9d:3b:3c:cc:47:e6:03:1b:02:a7:2a:90:8d:d8:
                    93:0d:47:87:4c:e9:8a:8c:90:f0:1c:f0:8b:3e:a1:
                    f6:9e:f6:64:6b:ef:a8:62:a5:d9:c4:94:24:aa:f8:
                    ec:a9:bc:2b:2c:01:7b:af:2e:28:fa:02:e3:73:02:
                    95:9e:6f:e3:12:45:3e:67:78:5b:d2:f9:5b:12:67:
                    85:a2:1c:29:ee:52:be:d0:69:ea:73:bf:32:b8:d6:
                    5c:71:05:f9:35:bc:5a:65:94:96:15:02:8f:51:4f:
                    9b:8e:f5:19:ba:1a:7c:f3:80:4c:c7:71:5c:ed:59:
                    59:59:02:3e:b2:2c:5d:e0:b4:3d:46:ee:03:92:d7:
                    be:f0:9a:8c:87:35:02:d6:31:f2:76:f0:66:31:86:
                    f2:d5:02:d0:13:da:83:8a:9f:47:5b:b2:13:9d:f2:
                    d0:66:7d:29:1b:3d:7f:ac:8d:97:af:2d:7f:01:5f:
                    9a:19:07:99:d2:53:87:f4:36:0c:88:bd:1d:1b:31:
                    84:82:35:36:a8:d6:af:09:71:a0:55:8f:0a:ff:24:
                    7e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:4E:72:90:B7:DD:05:F1:1B:DA:69:49:B9:18:24:54:74:DC:C8:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/064E7290B7DD05F11BDA6949B918245474DCC895.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.72.0/21
                IPv6:
                  2804:1658::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263283

    Signature Algorithm: sha256WithRSAEncryption
         a6:dd:45:9b:69:fe:ed:9e:bc:65:92:ef:43:fa:87:61:19:32:
         a1:9d:d0:4e:e9:f5:45:8c:a5:93:e5:4b:0b:9e:fa:81:ad:71:
         c4:08:50:7d:78:66:ce:9b:de:2b:d9:df:2f:f0:ba:67:de:84:
         ce:bf:d2:1c:12:f2:c3:10:a4:82:d2:f4:9d:ad:05:14:47:0d:
         a1:c8:27:0c:96:b2:2d:0d:34:29:9b:1b:6f:2a:9f:3b:53:39:
         2b:2d:f4:83:97:e5:b6:25:1d:4d:f9:aa:79:6c:e8:c5:d7:a3:
         2b:10:5b:0b:1a:29:b2:de:e0:69:1a:28:86:de:00:60:d7:bf:
         79:59:52:b1:ac:37:91:26:97:e1:ff:4f:df:94:b9:c0:5c:c5:
         6f:51:de:5f:14:90:13:fd:17:99:50:6e:09:ef:b2:80:f2:dd:
         a8:df:0d:d3:fe:ec:84:c0:ba:c0:06:ff:d0:87:21:e0:2c:00:
         4b:4a:be:cb:93:fd:0c:81:64:d2:be:13:62:72:46:29:50:b5:
         2d:2c:ee:c8:28:3e:f6:70:a6:ca:93:10:11:c9:9d:b7:34:50:
         73:0f:6d:51:de:f8:bf:91:fa:9a:01:97:c9:d8:47:ad:53:b7:
         37:f1:c8:3a:2c:d1:bd:5c:5e:67:ae:c9:fa:c6:fd:57:d2:f7:
         86:82:44:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org