Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/62BD461875786A00B21F073E8D02ACCE9BC15828.cer
File:                     62BD461875786A00B21F073E8D02ACCE9BC15828.cer (raw, json)
Hash identifier:          msH6AIw8MfJKw/xU3JLDtYkpiNHYUu8p5Ocp/sC8h00=
Subject key identifier:   62:BD:46:18:75:78:6A:00:B2:1F:07:3E:8D:02:AC:CE:9B:C1:58:28
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B8E50D7B9F0FCDDF9552F1C6E3A772FA729DCA6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/62BD461875786A00B21F073E8D02ACCE9BC15828.mft
caRepository:             rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Jul 2023 14:29:29 +0000
Certificate not after:    Mon 15 Jul 2024 14:34:29 +0000
Subordinate resources:    AS: 28130
                          IP: 138.99.248.0/22
                          IP: 143.208.40.0/22
                          IP: 170.150.164.0/22
                          IP: 186.227.96.0/20
                          IP: 186.251.144.0/21
                          IP: 187.19.96.0/20
                          IP: 2804:1cc::/32
                          IP: 2804:2b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8e:50:d7:b9:f0:fc:dd:f9:55:2f:1c:6e:3a:77:2f:a7:29:dc:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 17 14:29:29 2023 GMT
            Not After : Jul 15 14:34:29 2024 GMT
        Subject: CN=62BD461875786A00B21F073E8D02ACCE9BC15828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:6f:17:fa:56:cb:96:af:8f:96:eb:54:06:
                    02:82:cb:8d:c4:8f:42:31:b6:4b:3e:00:08:b7:17:
                    2e:fb:dd:60:e2:aa:5c:f1:dc:00:f7:70:0b:3f:ab:
                    a2:7e:09:d5:f3:de:d0:61:5d:f1:0f:aa:17:f1:da:
                    fc:94:34:dc:76:5a:9c:4d:0f:25:83:2b:df:11:d7:
                    c5:0e:37:b6:ff:4e:80:04:b2:3f:a3:53:51:e0:39:
                    a0:f0:da:f4:0a:7d:93:5a:8d:a0:6b:51:26:bb:4a:
                    3b:be:f3:f6:fc:46:40:92:21:ae:1a:d1:f3:1c:87:
                    31:7e:bb:78:ea:53:14:c7:97:93:2e:ec:e9:a2:aa:
                    e8:c0:53:52:91:9c:31:3f:f2:79:ed:a0:aa:8b:77:
                    b4:b2:d8:f7:b4:6d:d0:37:9f:a2:ae:c5:7a:7b:9b:
                    f2:33:dd:06:56:a7:20:fd:80:5e:86:30:af:d9:ab:
                    a6:c7:01:b6:21:5d:db:6c:30:1e:3c:1c:bd:f7:68:
                    d3:0e:2b:45:6b:e5:6b:4b:10:3f:62:13:ad:15:85:
                    2a:de:88:6a:66:a1:07:ff:0f:8d:b9:26:e5:06:0d:
                    1e:f3:2a:21:34:99:ee:7a:d9:e1:52:25:8c:4d:3d:
                    d7:27:b6:49:d0:52:ee:26:8a:8a:9e:53:af:05:84:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:BD:46:18:75:78:6A:00:B2:1F:07:3E:8D:02:AC:CE:9B:C1:58:28
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/62BD461875786A00B21F073E8D02ACCE9BC15828.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.248.0/22
                  143.208.40.0/22
                  170.150.164.0/22
                  186.227.96.0/20
                  186.251.144.0/21
                  187.19.96.0/20
                IPv6:
                  2804:1cc::/32
                  2804:2b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28130

    Signature Algorithm: sha256WithRSAEncryption
         53:6e:92:ef:5e:f0:97:9a:a2:b4:07:ec:d8:77:fa:65:f7:a4:
         49:c2:71:cb:4b:52:7c:f5:55:f3:9f:29:af:67:9c:a5:3c:d1:
         19:42:be:4d:3a:aa:53:44:d0:97:41:77:3a:81:61:cb:13:13:
         52:b3:cc:7b:8e:34:4b:7a:70:aa:0e:f7:26:de:89:cc:15:87:
         3b:d9:f0:eb:bd:9f:a7:e4:aa:b9:3a:6b:36:2c:74:b7:d6:34:
         cc:b0:88:3e:95:0c:d4:b5:03:42:40:7e:72:5f:0e:19:aa:c0:
         93:68:15:e8:5a:b1:e7:7e:44:a4:8f:05:22:94:fd:5c:ef:24:
         0d:52:52:f4:b5:12:ce:87:f4:39:62:ae:89:f9:2d:01:3d:5b:
         6f:32:a4:70:98:9d:60:a8:36:c0:f0:79:bd:53:69:17:5b:a0:
         cd:51:f6:68:fd:23:ef:aa:ea:cb:4d:2b:98:7c:d1:33:e4:27:
         ec:95:fd:90:52:13:61:85:c5:cf:57:46:ac:82:95:76:d9:da:
         92:f4:40:6e:24:1d:05:bc:d1:a4:34:02:72:06:04:a1:17:7d:
         7f:d6:8b:af:9c:eb:29:60:44:df:90:c6:9c:84:89:b2:18:9f:
         36:cb:eb:47:d3:64:8b:7e:66:49:13:e6:6c:75:0a:84:9d:a6:
         e4:27:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org