Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/628F331577861FC4A2FE5DE89BCB94B1D29B3363.cer
File:                     628F331577861FC4A2FE5DE89BCB94B1D29B3363.cer (raw, json)
Hash identifier:          qmfYY29ou8lGvGHIDbtjnfbVXTGs+XHk2fXe/KsWKzw=
Subject key identifier:   62:8F:33:15:77:86:1F:C4:A2:FE:5D:E8:9B:CB:94:B1:D2:9B:33:63
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       45DAC1A65E59FD32D6106F3991902F3FAAF491D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/0/628F331577861FC4A2FE5DE89BCB94B1D29B3363.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 09:35:43 +0000
Certificate not after:    Tue 09 Jul 2024 09:40:43 +0000
Subordinate resources:    AS: 268687
                          IP: 45.165.140.0/22
                          IP: 2804:5510::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:da:c1:a6:5e:59:fd:32:d6:10:6f:39:91:90:2f:3f:aa:f4:91:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 11 09:35:43 2023 GMT
            Not After : Jul  9 09:40:43 2024 GMT
        Subject: CN=628F331577861FC4A2FE5DE89BCB94B1D29B3363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:46:70:72:64:e6:17:f4:fa:3c:49:e7:c3:
                    a9:ad:3f:4f:67:df:72:e0:ff:d8:bc:6d:0c:6f:ed:
                    6a:aa:15:3a:13:31:b8:40:1d:d5:0c:1f:73:52:ae:
                    0d:4f:b1:6d:dd:b9:f5:00:93:1e:d1:66:36:49:00:
                    5e:c7:7b:4b:5f:64:65:c7:20:cf:d9:24:74:52:08:
                    e3:45:96:e6:9b:04:8c:e8:38:7e:71:9a:b0:ea:fa:
                    78:5e:4b:de:0a:e3:bc:99:0d:27:1c:d7:1a:43:99:
                    d3:1d:de:ec:11:0a:1a:59:b4:c3:43:17:18:41:67:
                    75:2f:13:4b:ca:a6:4f:f9:23:33:d4:50:63:0e:a4:
                    fd:4b:5d:36:0a:c7:b3:b5:14:60:cc:e6:fd:8c:e5:
                    a2:74:ed:95:a9:d7:ab:d1:1f:be:e4:82:16:86:b4:
                    d6:51:ec:54:14:7a:e4:ff:a5:16:33:4f:fd:85:74:
                    c1:7f:5c:3e:06:62:df:38:cb:0a:3e:63:e2:23:75:
                    28:22:9c:4e:2a:4e:01:77:25:90:01:2b:57:9d:d1:
                    e1:2b:e0:75:19:33:ea:e3:e9:9b:aa:26:73:8a:dd:
                    8c:b2:7f:8f:1d:19:c9:f7:46:34:31:8f:eb:96:eb:
                    3e:2e:ba:38:da:1c:f7:f9:92:cc:95:ac:fa:bb:95:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:8F:33:15:77:86:1F:C4:A2:FE:5D:E8:9B:CB:94:B1:D2:9B:33:63
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/0/628F331577861FC4A2FE5DE89BCB94B1D29B3363.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.140.0/22
                IPv6:
                  2804:5510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268687

    Signature Algorithm: sha256WithRSAEncryption
         92:bf:c7:03:0d:93:6a:71:cb:1e:60:4c:da:e2:2e:49:af:9c:
         7e:ba:47:3f:03:27:0a:81:a5:19:f9:ee:2b:56:08:ee:9c:9b:
         f0:67:8a:a2:c2:b0:5e:e5:6f:12:eb:a6:80:f1:a8:36:69:8d:
         ea:46:04:b0:e3:19:9b:12:fb:79:93:27:93:64:54:0a:9c:3a:
         77:12:d8:b2:5d:84:1b:e9:40:34:96:20:63:a0:ca:00:56:90:
         c7:7b:2c:3a:e0:d3:4a:7d:9f:ce:a9:ca:db:b9:6f:a4:ce:2c:
         5f:e5:34:36:90:fd:9b:e6:08:f6:48:29:2c:d8:1d:6f:19:39:
         f5:e0:52:5e:97:7d:52:e1:44:e4:c2:58:b2:84:e6:fb:7d:19:
         81:66:94:22:6e:16:04:74:fa:62:db:65:e5:d8:4f:cf:43:7e:
         f6:1e:a5:87:ad:ac:6c:e5:93:22:09:6e:7f:04:d5:8b:46:cd:
         8b:0a:d1:27:1e:77:ee:97:3c:32:5c:e8:32:05:4d:60:67:85:
         04:98:2a:ba:a8:e9:94:ec:48:29:69:dd:7f:40:98:7c:8e:d7:
         eb:1d:e1:2b:8f:fd:58:26:d6:28:cd:63:77:bc:31:00:bf:1e:
         52:af:30:69:20:8e:73:f0:c2:e0:53:79:a4:87:47:81:a1:81:
         17:7c:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org