Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer
File:                     61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer (raw, json)
Hash identifier:          wrGJzqJJAsyOyWu33ri5OsF2Q80nAp9xI0CW4mjHCNU=
Subject key identifier:   61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       06330B8DDBEF75EA693ED8A409A5EE2B927E3757
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Aug 2023 15:55:09 +0000
Certificate not after:    Wed 28 Aug 2024 16:00:09 +0000
Subordinate resources:    AS: 263913
                          IP: 138.204.240.0/22
                          IP: 170.231.216.0/22
                          IP: 2804:279c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:33:0b:8d:db:ef:75:ea:69:3e:d8:a4:09:a5:ee:2b:92:7e:37:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 30 15:55:09 2023 GMT
            Not After : Aug 28 16:00:09 2024 GMT
        Subject: CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:06:32:34:7a:d4:c1:19:9c:2e:c5:a2:e6:a9:
                    c9:90:73:ed:82:71:c9:88:15:90:83:17:70:89:af:
                    56:5d:2a:1f:ff:62:bf:35:fb:a3:b2:5a:b3:db:eb:
                    89:9d:ce:7e:57:56:1b:51:6a:54:91:11:e1:51:52:
                    6b:38:b7:4d:b2:03:69:80:b5:13:ed:27:2d:98:cf:
                    99:0d:b1:bd:ac:66:f3:71:1f:15:c7:a7:6b:44:ac:
                    a0:dc:c7:41:28:72:43:4e:88:48:9b:9d:2e:df:62:
                    5e:1b:c2:4e:40:7e:75:d3:44:ab:49:48:f9:61:cc:
                    49:3d:ab:94:4b:8b:d4:66:b9:2c:4a:2a:f9:95:18:
                    83:07:13:fe:93:63:db:5a:46:36:29:48:b4:e6:19:
                    20:d3:c4:62:58:1e:a5:99:75:98:ed:e4:0a:1c:ea:
                    6f:e4:25:d8:8c:f2:29:c7:7d:bd:18:72:a8:19:0a:
                    57:88:86:cd:0e:7f:95:e2:e8:ab:88:5e:0c:b7:05:
                    ce:3b:32:48:a7:75:da:1d:22:2f:e3:1d:a7:8a:27:
                    cd:82:ec:16:a1:c1:98:4f:e2:0e:67:7f:5d:08:82:
                    77:68:f6:1e:47:1e:c4:00:54:d2:cd:3b:de:29:57:
                    39:17:5e:7f:a8:06:c9:ae:0d:39:46:d3:34:55:41:
                    b3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.240.0/22
                  170.231.216.0/22
                IPv6:
                  2804:279c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263913

    Signature Algorithm: sha256WithRSAEncryption
         4a:ce:89:dd:2e:65:bf:4e:e3:e7:c2:35:88:13:d2:9e:c6:fd:
         f3:39:e1:ce:bc:4e:ad:bf:07:92:d6:9f:f0:15:8c:00:f5:3c:
         f9:0e:14:ad:ae:22:5d:7d:9b:c5:8d:73:f0:76:e7:5a:d6:a2:
         c2:16:79:2e:28:e7:86:1a:6a:10:da:67:43:fe:4d:f1:b8:b3:
         e4:7a:01:9b:0b:d1:0e:5a:1a:c7:73:42:54:1b:13:3e:ea:f8:
         b3:a4:e4:79:fd:3b:64:c5:26:56:de:fe:98:f8:47:be:2b:f6:
         78:eb:05:13:f6:f9:a8:f1:a4:cc:86:4a:6e:b7:71:b8:a5:3f:
         ca:0f:a1:72:73:82:8d:13:a3:bf:ca:96:5a:c4:c5:b4:01:ba:
         db:7b:3e:50:64:75:c0:61:59:3b:f6:dd:44:75:51:8c:0a:bc:
         f9:b4:fa:a5:bb:1b:75:62:22:81:20:de:e1:94:ae:38:d0:83:
         df:4a:76:4b:a9:2f:df:8a:64:b5:fc:c9:9e:84:22:08:fd:db:
         6b:58:2d:f8:f5:cf:d8:ef:89:b5:b5:dc:cf:8c:f8:90:16:6b:
         df:85:21:d3:dc:1f:bd:7f:b7:12:d5:cb:0f:1b:7a:08:c5:de:
         25:ba:e0:21:b1:fe:76:55:94:d8:99:5a:de:32:88:02:8a:0e:
         33:b9:a3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org