Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6320CD7E38D87C910B5072CD7D4824F3E72D236C.cer
File:                     6320CD7E38D87C910B5072CD7D4824F3E72D236C.cer (raw, json)
Hash identifier:          XZGJmYo+3vTXAPOSx4s19joCQBlsN46WbBevdKgP1mI=
Subject key identifier:   63:20:CD:7E:38:D8:7C:91:0B:50:72:CD:7D:48:24:F3:E7:2D:23:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3774A7173835F874D41F81D54607A2BAA64B920C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/6320CD7E38D87C910B5072CD7D4824F3E72D236C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 06:00:17 +0000
Certificate not after:    Mon 31 Mar 2025 06:05:17 +0000
Subordinate resources:    AS: 270428
                          IP: 190.111.184.0/22
                          IP: 2804:6bd4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:74:a7:17:38:35:f8:74:d4:1f:81:d5:46:07:a2:ba:a6:4b:92:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 06:00:17 2024 GMT
            Not After : Mar 31 06:05:17 2025 GMT
        Subject: CN=6320CD7E38D87C910B5072CD7D4824F3E72D236C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:16:68:20:db:82:5a:1e:54:4a:22:b9:2e:
                    8c:03:a7:dd:ae:76:ad:28:9a:ea:78:33:b6:84:cc:
                    ea:e6:d3:db:74:c8:0d:3c:0e:e3:88:7a:e5:26:d6:
                    84:c3:bd:76:0c:63:e4:8a:f4:52:3d:c0:d2:63:27:
                    7c:07:8d:3d:7a:3e:22:27:9e:63:eb:58:51:70:c8:
                    e0:63:d5:b8:93:e8:70:da:c8:87:c4:06:23:e1:78:
                    98:43:f6:a1:94:2a:b2:ca:f6:1c:e5:26:15:03:e8:
                    b4:4c:3b:ef:dd:49:c2:14:ac:f6:08:c6:73:03:b5:
                    2a:10:7c:30:84:99:f0:93:ab:96:17:7d:98:e8:c6:
                    b3:0e:9c:0c:3a:2f:c3:de:11:96:b1:14:45:f1:67:
                    ec:8a:72:0e:09:7e:45:e1:65:d5:6a:64:1f:4c:e6:
                    bb:7f:4c:9c:55:6e:c2:00:04:d7:c6:dd:0e:ba:98:
                    27:fa:20:19:36:66:ec:b2:19:31:80:88:e5:8f:d8:
                    ce:38:55:5c:97:74:4e:37:01:42:3f:18:7d:c0:c4:
                    53:0a:06:90:0d:ba:f5:7f:0c:1b:09:b5:a0:b9:2e:
                    2c:ee:6c:d3:7c:9a:15:da:25:3f:3b:e4:4d:ba:8e:
                    d5:37:18:e8:a5:9e:ba:4d:bb:48:ce:db:ff:ca:e0:
                    3c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:20:CD:7E:38:D8:7C:91:0B:50:72:CD:7D:48:24:F3:E7:2D:23:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/6320CD7E38D87C910B5072CD7D4824F3E72D236C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.184.0/22
                IPv6:
                  2804:6bd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270428

    Signature Algorithm: sha256WithRSAEncryption
         ad:e5:f7:d2:64:74:51:c0:b5:37:1e:92:59:61:c0:c0:d9:68:
         e8:15:95:03:ef:7e:9c:0d:a9:c4:8e:bc:a1:09:d2:35:35:2e:
         35:fd:35:28:96:c9:b1:36:e0:5a:21:5c:dc:1e:e2:fc:ec:98:
         45:5e:c0:d5:63:ea:24:cd:99:0f:f1:e3:9d:2f:29:e8:36:bb:
         d2:5d:1b:04:d6:20:13:9d:be:0c:02:d1:3d:d1:0d:78:7a:3d:
         d1:3d:a3:f0:6a:e7:d3:a0:fe:69:c0:6c:ef:cc:05:8f:9d:79:
         c0:e8:80:be:6b:87:c3:9e:c5:fb:d3:4d:be:ef:4e:64:5f:27:
         97:c5:45:1d:e6:a3:86:14:40:2e:dd:42:52:61:56:dd:af:fd:
         04:a7:72:a7:3f:3f:61:03:a5:39:68:4e:ed:94:b2:dc:f7:d7:
         3c:32:f4:d0:4a:66:0f:c5:72:5f:28:60:43:e4:90:7d:c6:49:
         26:1b:54:fa:c0:59:92:f8:6a:cb:e6:4b:81:fb:21:5f:fa:54:
         f0:5d:7e:1c:e8:05:0a:2c:a4:cb:ae:d2:8c:d0:e7:7c:14:b8:
         a2:5a:6f:ac:8d:3d:58:6a:6b:e3:a2:a5:bd:e5:7f:f5:43:df:
         d4:f2:37:bf:a3:0e:69:a4:53:fa:3d:f4:6c:7b:a5:93:20:83:
         68:69:30:01
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUN3SnFzg1+HTUH4HVRgeiuqZLkgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDEwNjAwMTdaFw0yNTAzMzEwNjA1MTdaMDMxMTAvBgNV
BAMTKDYzMjBDRDdFMzhEODdDOTEwQjUwNzJDRDdENDgyNEYzRTcyRDIzNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHlhZoINuCWh5USiK5LowDp92u
dq0omup4M7aEzOrm09t0yA08DuOIeuUm1oTDvXYMY+SK9FI9wNJjJ3wHjT16PiIn
nmPrWFFwyOBj1biT6HDayIfEBiPheJhD9qGUKrLK9hzlJhUD6LRMO+/dScIUrPYI
xnMDtSoQfDCEmfCTq5YXfZjoxrMOnAw6L8PeEZaxFEXxZ+yKcg4JfkXhZdVqZB9M
5rt/TJxVbsIABNfG3Q66mCf6IBk2ZuyyGTGAiOWP2M44VVyXdE43AUI/GH3AxFMK
BpANuvV/DBsJtaC5LizubNN8mhXaJT875E26jtU3GOilnrpNu0jO2//K4DwBAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjIM1+ONh8kQtQ
cs19SCTz5y0jbDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zcXc1S3NiRlFicHVjNVNtTXgyMmgyRTcxU2dhdkZpRE1h
UDFEeDNwWnN1Ny8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zcXc1S3NiRlFicHVjNVNtTXgyMmgyRTcxU2dhdkZpRE1h
UDFEeDNwWnN1Ny8wLzYzMjBDRDdFMzhEODdDOTEwQjUwNzJDRDdENDgyNEYzRTcy
RDIzNkMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr5vuDANBAIAAjAHAwUA
KARr1DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIFwwDQYJKoZIhvcNAQELBQAD
ggEBAK3l99JkdFHAtTcekllhwMDZaOgVlQPvfpwNqcSOvKEJ0jU1LjX9NSiWybE2
4FohXNwe4vzsmEVewNVj6iTNmQ/x450vKeg2u9JdGwTWIBOdvgwC0T3RDXh6PdE9
o/Bq59Og/mnAbO/MBY+decDogL5rh8OexfvTTb7vTmRfJ5fFRR3mo4YUQC7dQlJh
Vt2v/QSncqc/P2EDpTloTu2Ustz31zwy9NBKZg/Fcl8oYEPkkH3GSSYbVPrAWZL4
asvmS4H7IV/6VPBdfhzoBQospMuu0ozQ53wUuKJab6yNPVhqa+Oipb3lf/VD39Ty
N7+jDmmkU/o99Gx7pZMgg2hpMAE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org