Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/602CB64194520074729044EFE4910BDA414CE00C.cer
File:                     602CB64194520074729044EFE4910BDA414CE00C.cer (raw, json)
Hash identifier:          Rx1VB+tCHbie6v9IPLmRSpV7vFSbzKQQ76OdjcDaKM0=
Subject key identifier:   60:2C:B6:41:94:52:00:74:72:90:44:EF:E4:91:0B:DA:41:4C:E0:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E2800282BB3EB5FEA94CC40F4A68A1E6858DE4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/602CB64194520074729044EFE4910BDA414CE00C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 16:45:07 +0000
Certificate not after:    Wed 19 Mar 2025 16:50:07 +0000
Subordinate resources:    AS: 267279
                          IP: 45.232.196.0/22
                          IP: 2804:4b08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:28:00:28:2b:b3:eb:5f:ea:94:cc:40:f4:a6:8a:1e:68:58:de:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 16:45:07 2024 GMT
            Not After : Mar 19 16:50:07 2025 GMT
        Subject: CN=602CB64194520074729044EFE4910BDA414CE00C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:83:1f:09:69:31:03:67:31:0f:2c:a2:37:
                    99:75:54:5d:b2:31:45:69:fa:69:e8:28:9d:7b:cf:
                    f2:c9:82:8f:11:b6:2d:d7:30:a0:23:2f:86:79:91:
                    f6:e9:4d:16:19:3f:4f:a2:44:56:82:a1:5f:5b:72:
                    3b:c2:14:91:01:4c:d8:b9:76:a0:5b:56:95:bd:95:
                    5c:ee:56:6b:22:c3:cc:e7:34:66:60:a6:f0:db:f8:
                    49:45:0e:53:19:9a:24:13:d7:0f:6b:d0:a6:82:c0:
                    87:b2:51:27:05:a5:4c:51:a2:ad:34:b4:50:e8:86:
                    1c:42:a4:07:1e:17:4d:be:f6:f6:3b:da:fb:45:c9:
                    b3:8b:35:86:64:1b:85:26:41:83:a1:20:a7:1e:46:
                    29:6e:32:4d:5c:db:a3:0f:39:15:42:71:e5:7c:15:
                    da:c1:c3:e5:b5:f9:0c:95:0e:36:d9:bc:c8:87:44:
                    1d:71:4d:c2:60:23:41:65:cc:cf:cc:af:f1:f5:ba:
                    fa:59:0d:99:38:74:f6:3c:fd:87:79:b8:8c:89:83:
                    f4:41:db:99:a4:d7:c5:50:8b:dd:ee:0d:0d:f5:c4:
                    84:73:2c:7c:64:84:a0:50:6c:a9:b4:2c:e4:ba:77:
                    1d:9b:31:46:66:e4:2f:b3:87:08:35:45:24:bb:23:
                    07:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:2C:B6:41:94:52:00:74:72:90:44:EF:E4:91:0B:DA:41:4C:E0:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/602CB64194520074729044EFE4910BDA414CE00C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.196.0/22
                IPv6:
                  2804:4b08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267279

    Signature Algorithm: sha256WithRSAEncryption
         4d:32:50:15:f0:39:74:9e:b4:e2:fc:07:c0:e1:4b:90:57:04:
         e9:99:fe:96:14:c2:cb:33:15:2f:e6:88:2b:fb:b8:f6:b8:24:
         a1:09:15:53:33:33:96:0c:c2:9e:a1:56:3d:a0:4c:e6:2e:1c:
         49:78:74:41:ab:f2:ec:66:e1:e7:fe:dc:34:5b:7e:7d:64:ec:
         f3:10:80:ed:2f:d7:e0:7b:3a:f9:b6:04:d5:a1:19:cf:a6:15:
         b0:45:58:e2:5a:35:c8:05:a7:f6:10:d2:a0:d6:54:b7:44:f1:
         dd:46:c3:57:a0:ab:6a:ed:34:76:cf:82:90:54:b3:c1:e0:c2:
         91:fa:89:9a:d0:67:9a:06:fc:70:74:64:7a:ae:12:ea:ad:92:
         48:c8:72:c9:ad:e0:ad:64:c5:39:d7:ed:89:59:c9:87:37:8e:
         ab:1f:eb:4b:78:34:6c:88:86:1b:be:ef:cd:d6:bd:b8:90:1b:
         f8:3b:e7:ef:de:66:cd:d3:f2:91:21:5f:6f:d0:ae:1f:d7:96:
         a6:2d:01:00:6d:7d:48:e5:fc:13:d7:f1:74:23:fa:1a:ee:0d:
         33:92:3e:3d:4b:4f:89:c9:e9:45:57:04:f2:8e:32:7c:89:65:
         e8:41:41:d0:e1:8a:d9:92:4e:71:a8:26:ef:70:5e:4a:2d:cd:
         c8:7b:82:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org