Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/621EBC7A9F2A3D2908C3CD9EFA82CBF10411904C.cer
File:                     621EBC7A9F2A3D2908C3CD9EFA82CBF10411904C.cer (raw, json)
Hash identifier:          Klq1tXM/i62ifC4MwXXzQX06LVadWoFCv1VNQN9576w=
Subject key identifier:   62:1E:BC:7A:9F:2A:3D:29:08:C3:CD:9E:FA:82:CB:F1:04:11:90:4C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6E347BCF1D368368527371C633B2BCBE2D321164
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/621EBC7A9F2A3D2908C3CD9EFA82CBF10411904C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 12:57:06 +0000
Certificate not after:    Fri 01 Nov 2024 13:02:06 +0000
Subordinate resources:    AS: 53080
                          IP: 45.175.80.0/22
                          IP: 138.186.36.0/22
                          IP: 170.82.64.0/22
                          IP: 170.150.4.0/22
                          IP: 186.194.176.0/20
                          IP: 187.95.0.0/20
                          IP: 191.253.0.0/20
                          IP: 201.216.100.0/22
                          IP: 2804:71c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:34:7b:cf:1d:36:83:68:52:73:71:c6:33:b2:bc:be:2d:32:11:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 12:57:06 2023 GMT
            Not After : Nov  1 13:02:06 2024 GMT
        Subject: CN=621EBC7A9F2A3D2908C3CD9EFA82CBF10411904C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:31:19:86:96:2a:5e:1b:d3:ee:2b:24:9d:
                    88:1a:91:4f:02:cc:d7:41:c8:99:d3:6c:56:2e:9e:
                    3c:3c:c1:9e:16:42:c0:99:38:bd:f8:6c:b3:8d:f2:
                    86:c1:57:11:b7:aa:f6:b7:de:90:37:29:80:36:ec:
                    a7:5b:2d:c4:51:b2:eb:7b:ba:e6:17:92:88:c4:0d:
                    49:a2:94:52:f6:c4:89:6d:9d:41:ee:40:08:32:63:
                    72:59:c5:3f:d4:d5:51:4d:69:24:be:c5:6b:9f:3d:
                    39:1c:8d:c5:a9:ed:a9:f7:e7:e6:c8:61:03:33:65:
                    27:db:c6:70:bb:28:75:36:80:71:a0:9b:45:ae:98:
                    37:8f:f3:a7:02:b9:7a:73:70:67:bc:a2:ec:23:9d:
                    53:9d:e3:55:63:c4:a0:c2:ad:5a:3c:ac:14:44:38:
                    33:ca:91:a2:e1:52:65:5c:df:d4:0e:58:e3:87:7b:
                    c0:7a:1f:41:1d:8f:87:34:57:95:56:99:c3:4b:3c:
                    83:b8:4c:db:85:d0:31:6b:ee:95:cc:99:22:f2:f8:
                    37:6c:f4:fd:fe:25:a4:bd:b6:f2:f5:24:e6:d9:cc:
                    bb:d4:9a:ff:8f:b0:0c:a9:41:f1:9f:ff:75:82:e0:
                    b1:55:07:ad:fb:99:91:2e:b7:c4:89:87:cf:60:17:
                    8a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:1E:BC:7A:9F:2A:3D:29:08:C3:CD:9E:FA:82:CB:F1:04:11:90:4C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/621EBC7A9F2A3D2908C3CD9EFA82CBF10411904C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.80.0/22
                  138.186.36.0/22
                  170.82.64.0/22
                  170.150.4.0/22
                  186.194.176.0/20
                  187.95.0.0/20
                  191.253.0.0/20
                  201.216.100.0/22
                IPv6:
                  2804:71c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53080

    Signature Algorithm: sha256WithRSAEncryption
         8a:e6:b5:6c:eb:95:5f:67:12:0b:0f:b8:91:65:e2:61:b4:21:
         cd:39:f2:cb:a6:2a:8b:84:12:9f:a0:8d:84:20:00:7f:ae:da:
         66:a7:1d:76:77:90:4e:84:51:77:1d:b3:ea:30:3b:a8:8f:11:
         b8:3a:be:9e:29:e8:43:5c:8e:8a:3f:7b:0f:3b:58:b7:de:ff:
         97:c0:c5:25:54:4a:a5:bc:3c:19:e3:ac:7d:22:a5:db:fa:ab:
         58:bf:3d:6d:7a:15:88:e6:a7:d3:89:48:50:a5:3b:5c:d0:03:
         45:5e:f9:23:20:13:41:99:3b:90:34:94:56:f6:a3:c5:9a:93:
         76:37:8d:27:f9:11:c9:22:31:5a:d8:b1:90:75:50:1b:56:e9:
         eb:21:b6:1b:32:40:34:29:ee:a5:a8:89:dc:50:10:88:48:9b:
         b8:79:e0:47:99:f8:bc:35:aa:16:e7:b5:aa:a1:62:dc:df:d4:
         e4:08:0c:0c:1f:a6:1b:c5:e1:60:3d:89:f8:95:46:ab:56:5b:
         ad:41:a1:42:48:ca:35:b8:ce:d8:90:de:d3:c3:f6:d1:e7:fc:
         77:ca:a1:c8:37:74:27:38:0f:cc:a8:c2:31:43:1d:f4:4e:85:
         8e:1d:a3:e0:88:f4:aa:ba:71:b9:05:b5:fe:ae:a3:4f:c3:f0:
         33:8f:19:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org