Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.cer
File:                     60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.cer (raw, json)
Hash identifier:          TUngFt6dlGjxHjjbFNRHT8K/+aT2H0cxjjSz8IqVUNc=
Subject key identifier:   60:EF:ED:D1:2B:A8:B6:1A:14:A1:F1:50:E6:8B:A1:BF:6F:8A:19:9E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       52740480F1552C0E61B322B1797EF2609447772D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 14:29:59 +0000
Certificate not after:    Tue 11 Mar 2025 14:34:59 +0000
Subordinate resources:    AS: 267936
                          IP: 45.166.52.0/22
                          IP: 2804:5574::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:74:04:80:f1:55:2c:0e:61:b3:22:b1:79:7e:f2:60:94:47:77:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 14:29:59 2024 GMT
            Not After : Mar 11 14:34:59 2025 GMT
        Subject: CN=60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:73:bc:14:19:74:48:e1:7a:6a:84:c6:b8:65:
                    02:b6:aa:72:16:49:da:5a:08:21:16:6b:6b:7f:bb:
                    a7:03:00:c1:de:d3:ce:fe:2c:4e:13:75:57:dc:2c:
                    d5:1c:48:21:d3:40:55:c4:16:32:63:c9:d2:af:19:
                    95:39:ac:c3:cb:d9:b3:3f:2a:98:55:bb:bf:fb:59:
                    c9:e8:a5:98:49:ee:05:87:88:1a:5c:c1:23:7e:a5:
                    e7:31:e9:3d:14:d7:86:8b:a5:99:a6:94:07:08:b6:
                    f3:37:eb:00:fd:2c:c7:d8:fc:14:00:f1:1d:b4:ba:
                    9f:7e:d6:a9:1a:bc:a3:a2:ae:54:e6:29:22:9e:2b:
                    25:48:cd:09:54:61:0f:13:d8:23:b2:01:e4:c9:a3:
                    bf:9a:c9:58:fa:60:85:cf:8e:e6:10:b9:4c:44:be:
                    0f:2a:2f:e2:a3:d8:a4:f8:ff:a7:b1:1a:d0:35:2b:
                    a9:23:0a:17:77:9a:9a:35:7a:58:3b:5a:df:30:1e:
                    60:cc:79:1a:a5:97:22:bb:30:95:cd:22:33:41:d9:
                    86:71:8a:96:a0:53:a3:9d:e0:b6:6f:fd:f8:cd:59:
                    93:60:d8:69:e8:7a:d5:dd:a3:df:1f:82:01:4a:e2:
                    91:15:ce:7d:6c:61:aa:f3:03:3c:09:8d:13:c3:6b:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:EF:ED:D1:2B:A8:B6:1A:14:A1:F1:50:E6:8B:A1:BF:6F:8A:19:9E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.52.0/22
                IPv6:
                  2804:5574::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267936

    Signature Algorithm: sha256WithRSAEncryption
         b4:e1:fa:27:ca:7a:e7:4c:b0:15:ba:a4:17:6f:e0:f9:41:f9:
         07:40:22:ca:f3:53:32:a5:34:b8:3d:65:7d:1d:51:63:93:4e:
         f9:eb:e1:da:a2:bf:f8:02:32:f9:dd:96:39:e6:a5:1b:8a:5d:
         06:0e:59:d9:08:15:84:0e:08:bc:74:61:7d:7e:df:96:17:9c:
         9e:73:a8:d4:6e:90:09:18:5b:7c:c3:06:cf:a5:01:9e:b9:5b:
         cc:cf:d0:28:82:fa:0d:58:4e:16:6c:86:3b:13:92:fc:8e:fe:
         25:31:87:b3:c1:bb:b3:b9:39:2d:e9:ea:ab:8d:d7:0f:47:93:
         25:1b:d3:c6:d7:69:bb:c4:c6:74:bb:8a:3b:f8:7c:0a:32:0a:
         eb:aa:02:2c:9a:59:20:40:47:f5:e9:38:cf:b5:26:e4:b1:42:
         8e:dd:29:de:c3:af:bd:f0:9c:6a:8e:5a:f6:15:4f:90:80:66:
         db:b7:a0:be:1f:d2:cb:fa:13:9c:3b:bb:2b:f6:54:4f:48:ce:
         66:cb:dd:8d:52:c2:a9:a0:be:5a:09:0e:53:2b:2d:51:f6:46:
         f5:83:6e:8f:99:19:75:e6:71:dd:a5:8e:69:0c:c1:0d:b3:97:
         5e:d6:eb:05:3a:ad:47:65:2d:91:73:2c:be:02:04:27:fe:d8:
         4e:e8:91:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org