Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.cer
File:                     620A71C431D2B5B3DF64C60E7119DF06F484D0A8.cer (raw, json)
Hash identifier:          z1jdzuCKhp1USpRf31z0f/AyjW/q3+Sd8q/CR5PxEd8=
Subject key identifier:   62:0A:71:C4:31:D2:B5:B3:DF:64:C6:0E:71:19:DF:06:F4:84:D0:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       28B233177ED851095EB784C265C3A3A4191E58C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Jul 2023 15:53:40 +0000
Certificate not after:    Mon 01 Jul 2024 15:58:40 +0000
Subordinate resources:    AS: 263541
                          IP: 191.5.164.0/22
                          IP: 191.241.20.0/22
                          IP: 2804:1398::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b2:33:17:7e:d8:51:09:5e:b7:84:c2:65:c3:a3:a4:19:1e:58:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  3 15:53:40 2023 GMT
            Not After : Jul  1 15:58:40 2024 GMT
        Subject: CN=620A71C431D2B5B3DF64C60E7119DF06F484D0A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:52:5e:bb:62:40:68:43:30:9b:b1:36:90:52:
                    ab:28:52:67:55:aa:35:45:9b:12:53:38:74:2d:b1:
                    1e:f6:d1:81:82:c6:09:34:f2:84:2b:fa:87:8f:de:
                    0d:f1:ce:21:06:16:65:a8:23:32:f4:8e:ed:c0:c5:
                    70:5f:17:99:61:22:bf:46:c6:59:e6:73:c3:28:e4:
                    28:c7:a4:6e:d7:4a:24:68:67:4b:11:b5:f7:f3:49:
                    6d:b1:4c:c8:8d:eb:5e:9e:50:ca:cf:29:5f:e4:5b:
                    72:b6:1b:a4:6b:35:f8:14:4b:f6:fa:f8:24:24:5e:
                    c1:c4:ac:19:94:57:e0:5b:9a:5b:b6:3a:7c:31:3a:
                    7f:98:e8:6f:0b:2c:a8:00:69:a6:3a:e4:c8:db:ba:
                    f3:25:60:0e:32:9f:6a:96:6e:ce:2e:3d:58:89:33:
                    00:45:7b:a3:2d:84:c4:5a:3c:24:06:31:c0:ce:e0:
                    74:99:ba:39:76:0f:b7:cf:01:7d:46:f7:71:af:75:
                    b5:91:2e:b0:4e:16:89:2e:5a:71:47:80:81:53:25:
                    a7:b5:1c:d3:b8:21:cc:0b:bb:13:43:ea:7a:93:40:
                    0b:5b:84:32:5b:c5:33:53:ec:0a:c5:78:b3:d5:e2:
                    64:c3:63:b2:12:b0:c5:d3:80:4b:0f:0e:ec:a3:5f:
                    97:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:0A:71:C4:31:D2:B5:B3:DF:64:C6:0E:71:19:DF:06:F4:84:D0:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/620A71C431D2B5B3DF64C60E7119DF06F484D0A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.164.0/22
                  191.241.20.0/22
                IPv6:
                  2804:1398::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263541

    Signature Algorithm: sha256WithRSAEncryption
         56:ed:ea:0c:8f:2b:0b:10:b4:35:a4:e6:22:7b:0f:7d:30:58:
         a7:70:63:9a:2e:db:11:5a:26:6f:ad:14:cc:bf:3a:87:b9:07:
         5f:14:78:51:ef:39:69:00:7d:ed:a7:74:12:31:52:fc:c6:85:
         b3:f8:bd:95:35:71:22:51:5e:c2:0a:3f:75:f0:ef:1c:0a:b6:
         97:8d:92:11:5b:87:fd:b7:d0:1a:85:63:5e:13:82:7a:22:6f:
         00:8a:b2:44:e3:a5:66:65:09:46:73:1d:73:5b:1d:d2:fc:35:
         82:2f:b4:ac:6f:79:00:a3:01:86:5e:c7:1d:0b:ae:6f:23:4a:
         53:f1:ea:54:83:57:be:72:20:38:ad:ab:b9:07:a7:4e:e2:95:
         88:dc:87:fc:98:6f:90:09:e8:14:5e:a0:5d:cd:aa:3b:65:ab:
         06:6c:23:9d:4d:1e:9e:e0:97:cd:1a:65:2e:86:11:2c:7a:1b:
         f5:fb:37:dd:08:1f:b6:09:95:33:c2:c2:f8:44:42:7b:ea:42:
         a4:8f:55:a6:1d:42:80:01:09:56:49:30:d7:53:00:e0:17:df:
         3e:bd:0d:83:6b:0c:5a:0b:ca:69:04:d9:72:24:4e:54:d8:80:
         c3:b9:7d:5d:75:06:93:c0:7f:45:8f:b8:67:33:d5:03:0c:6f:
         2e:a4:a4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org