Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/62FD3E04B256F3B9657B689D949A83F3FE6735B6.cer
File:                     62FD3E04B256F3B9657B689D949A83F3FE6735B6.cer (raw, json)
Hash identifier:          V+7zwePRv1NUvCyod5KsjsaGXBdz7NtXfLKTu0YZz9o=
Subject key identifier:   62:FD:3E:04:B2:56:F3:B9:65:7B:68:9D:94:9A:83:F3:FE:67:35:B6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       216A00ECE184FFF339C39A4CB03F989D9B973879
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/62FD3E04B256F3B9657B689D949A83F3FE6735B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 17:15:10 +0000
Certificate not after:    Mon 16 Sep 2024 17:20:10 +0000
Subordinate resources:    AS: 262644
                          IP: 167.249.12.0/22
                          IP: 177.86.248.0/22
                          IP: 2804:2a64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6a:00:ec:e1:84:ff:f3:39:c3:9a:4c:b0:3f:98:9d:9b:97:38:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 17:15:10 2023 GMT
            Not After : Sep 16 17:20:10 2024 GMT
        Subject: CN=62FD3E04B256F3B9657B689D949A83F3FE6735B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:79:8d:2f:6f:c0:f1:64:38:f2:aa:0e:22:
                    88:26:c9:2f:48:44:00:dd:87:59:f2:20:0f:ce:b7:
                    84:e7:84:ea:b9:65:cf:19:31:cd:7d:dd:bf:db:f4:
                    f4:da:68:ff:76:18:fa:9a:4f:01:b9:23:e0:dd:ed:
                    6d:fa:24:79:0b:99:83:e6:36:3c:c8:d8:be:2d:48:
                    b3:80:94:a5:34:e2:a7:5f:01:4d:74:4b:ae:5d:59:
                    6d:69:6c:98:09:47:78:ac:7e:38:b4:67:e5:06:68:
                    52:d1:41:83:4a:57:6a:4e:db:f4:d2:14:4b:21:bd:
                    01:75:e1:c2:96:af:61:6d:08:af:c3:75:19:c1:49:
                    e8:c2:f7:c7:08:29:e5:8a:ad:89:18:c2:8d:49:6b:
                    54:c1:2e:5d:27:18:e3:22:e3:86:f3:c6:2e:43:e6:
                    80:2e:9d:da:60:c7:28:c4:7b:74:fc:e2:ad:3b:bf:
                    f4:b6:16:03:3f:61:f2:81:8b:54:13:8a:6e:11:fd:
                    92:94:1f:cd:b9:99:12:a4:1a:14:f8:7b:26:79:9d:
                    96:bd:24:47:1d:b1:54:32:b8:dc:a0:45:cd:da:c0:
                    bf:eb:32:16:b6:b1:9b:05:8d:e9:65:ae:df:9f:f8:
                    11:22:60:36:db:0c:8f:29:46:97:71:f3:b4:51:82:
                    44:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:FD:3E:04:B2:56:F3:B9:65:7B:68:9D:94:9A:83:F3:FE:67:35:B6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/62FD3E04B256F3B9657B689D949A83F3FE6735B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.12.0/22
                  177.86.248.0/22
                IPv6:
                  2804:2a64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262644

    Signature Algorithm: sha256WithRSAEncryption
         3d:d0:43:33:06:20:b5:c1:96:4e:0a:c0:a5:2b:aa:f4:94:1b:
         ab:28:e3:29:6d:e3:9f:b8:ff:cb:08:1d:c1:06:5b:00:c8:cb:
         a5:9e:44:b4:18:bf:a8:ab:b4:94:54:67:86:9d:28:b6:4c:9f:
         f1:80:14:05:68:11:58:b2:59:80:fa:94:bb:cb:c5:83:60:b3:
         dc:20:75:8e:12:45:bd:1b:86:d8:7c:b9:5a:d6:55:cf:70:47:
         f6:c8:9e:de:08:71:fe:79:7b:1f:f9:32:f9:fb:d6:a4:9d:d6:
         3c:a5:ed:72:45:c8:62:9c:23:ce:9b:18:9f:cb:d7:41:53:df:
         fd:bc:d0:14:00:6a:54:f8:85:14:dd:f0:8e:40:95:c8:89:94:
         2b:6d:f0:7d:52:8e:aa:80:c0:4a:4c:9f:4d:fb:33:ba:2a:de:
         a1:7d:51:82:49:57:4c:40:14:b6:91:f6:ee:69:e8:4f:25:d4:
         00:db:47:93:de:b1:95:75:81:01:1c:4f:e9:a0:18:9a:14:14:
         90:99:d5:82:98:4b:81:fe:d3:e7:ee:1f:42:b7:bc:94:50:b3:
         5a:06:22:aa:76:f0:52:d0:9d:a1:aa:17:c0:7e:7c:41:d0:f2:
         62:93:31:eb:61:7b:3e:64:cd:6c:39:da:d0:0a:f8:11:f6:44:
         1e:c1:0a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org