Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/62FBF527B426B909C7FD9ADD14F0F50C00209B6D.cer
File:                     62FBF527B426B909C7FD9ADD14F0F50C00209B6D.cer (raw, json)
Hash identifier:          uHfm+FJvOzX2OUhtJOIwgckfXOPVW3gMSHGz36nl2l4=
Subject key identifier:   62:FB:F5:27:B4:26:B9:09:C7:FD:9A:DD:14:F0:F5:0C:00:20:9B:6D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1047CFCDC6724B556E29CCA712B4FC95AFF5ED92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/0/62FBF527B426B909C7FD9ADD14F0F50C00209B6D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Dec 2023 16:50:05 +0000
Certificate not after:    Fri 13 Dec 2024 16:55:05 +0000
Subordinate resources:    AS: 52998
                          IP: 177.53.200.0/23
                          IP: 177.84.132.0/22
                          IP: 2801:80:210::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:47:cf:cd:c6:72:4b:55:6e:29:cc:a7:12:b4:fc:95:af:f5:ed:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 16:50:05 2023 GMT
            Not After : Dec 13 16:55:05 2024 GMT
        Subject: CN=62FBF527B426B909C7FD9ADD14F0F50C00209B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:9f:a0:54:6c:d5:f7:4c:33:e7:80:dd:64:
                    c0:87:63:82:d1:9f:90:99:71:6d:fd:01:45:7d:bc:
                    af:fc:33:c7:02:3d:2d:99:db:33:de:7d:2c:01:fc:
                    bb:ab:69:a0:5b:ee:47:a3:91:f9:44:82:8c:af:6e:
                    9b:fa:38:64:fb:28:fb:e5:aa:f0:0e:2e:82:31:5c:
                    89:dc:78:dd:d1:58:91:db:0a:99:2f:b4:b0:72:d9:
                    27:3e:83:0a:5e:5c:b7:9d:d3:c4:5c:de:ca:fa:53:
                    e4:30:8a:38:90:cb:40:c3:e1:f3:e2:18:0f:ff:e9:
                    61:04:1f:cf:a4:3b:7a:aa:ca:fa:46:00:11:d9:41:
                    39:78:84:85:bc:1d:41:9f:98:ff:d9:68:43:88:40:
                    5d:f9:bd:9b:8b:29:f9:ee:00:0d:06:36:1a:df:69:
                    e9:5f:83:c5:12:ff:ed:78:5e:7a:ae:39:03:5f:56:
                    9f:52:1e:ae:e0:58:cb:8b:95:4d:a4:15:83:d1:94:
                    e6:8f:66:60:dd:54:0e:48:0b:6c:28:d2:80:01:c8:
                    a4:ea:b9:31:dd:84:97:ad:b3:e7:06:f8:e3:a4:71:
                    45:81:27:42:76:fa:5c:c0:07:c5:cb:81:d9:f5:c0:
                    4b:3c:e8:7e:7c:67:25:36:00:1b:e1:07:ab:ee:9c:
                    a8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:FB:F5:27:B4:26:B9:09:C7:FD:9A:DD:14:F0:F5:0C:00:20:9B:6D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/0/62FBF527B426B909C7FD9ADD14F0F50C00209B6D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.200.0/23
                  177.84.132.0/22
                IPv6:
                  2801:80:210::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52998

    Signature Algorithm: sha256WithRSAEncryption
         63:d0:dc:8d:4d:d9:db:5f:3f:1a:ad:36:1c:11:9c:7c:4f:6b:
         26:61:a6:ab:5e:17:02:1b:97:04:23:f4:b7:90:82:78:f4:97:
         c9:bc:96:9c:4d:97:50:34:17:88:61:33:f9:39:2d:2e:2f:8e:
         fd:0d:08:89:29:16:a0:7d:00:65:e9:83:de:95:e8:01:b0:36:
         b9:0e:fa:6f:00:37:59:4a:63:6e:be:24:e1:88:7f:86:dc:dc:
         d8:4c:48:a0:ed:e1:19:77:fd:ec:67:83:a1:ad:f0:87:cf:b3:
         bd:af:de:e3:73:7d:92:b7:95:ec:dd:c9:68:3c:89:da:84:cd:
         11:24:06:6f:f9:d6:8f:7f:4a:2f:b1:ec:44:d8:52:bb:37:bb:
         8a:2b:e8:3e:b4:1f:04:dd:a4:b4:bb:50:5f:c1:bb:53:17:35:
         5d:78:59:30:8c:88:21:e0:86:8b:da:95:ca:0e:0c:c2:97:56:
         fd:74:c5:25:79:0a:cb:9b:79:90:d5:fb:8e:4f:e0:86:ef:d6:
         37:1b:2d:59:c0:28:80:e6:85:b3:2c:91:f7:f7:48:8a:b3:37:
         b7:76:02:7f:91:7c:30:55:fb:d0:b1:73:22:04:f9:53:72:1a:
         ec:ed:a6:df:77:23:9b:6c:7e:4b:a7:5a:8f:70:3b:1a:4a:bd:
         e1:c0:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org