Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/63449B16E0498FC1A61C1A96A19A3E53061F6922.cer
File:                     63449B16E0498FC1A61C1A96A19A3E53061F6922.cer (raw, json)
Hash identifier:          7AgZwUEKHGEJMzUJKm/kceEyZYsle5CndxMKFui1zh0=
Subject key identifier:   63:44:9B:16:E0:49:8F:C1:A6:1C:1A:96:A1:9A:3E:53:06:1F:69:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7987AD1D31F79AF00EB62A6E05A03390E9167A99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/63449B16E0498FC1A61C1A96A19A3E53061F6922.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2024 20:13:04 +0000
Certificate not after:    Fri 24 Jan 2025 20:18:04 +0000
Subordinate resources:    AS: 269082
                          IP: 45.179.40.0/22
                          IP: 2804:5f30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:87:ad:1d:31:f7:9a:f0:0e:b6:2a:6e:05:a0:33:90:e9:16:7a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 26 20:13:04 2024 GMT
            Not After : Jan 24 20:18:04 2025 GMT
        Subject: CN=63449B16E0498FC1A61C1A96A19A3E53061F6922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:cb:17:32:a3:bc:ba:b4:f6:a3:e1:39:de:
                    b3:76:a7:3b:73:de:09:a1:a9:73:11:f1:08:f9:58:
                    40:16:3c:ef:3d:e9:52:8a:dc:6d:18:b0:b5:f1:1b:
                    82:c3:3d:58:23:d2:6d:bf:1d:3f:4b:00:b3:46:c7:
                    7a:8c:9e:68:51:f7:3d:41:60:84:c3:00:af:f6:9b:
                    69:25:b7:0e:d6:98:57:d1:5b:a9:1d:d0:e1:83:e1:
                    68:04:82:d2:dc:e8:64:6b:20:3b:2e:6d:f9:4d:d1:
                    82:c9:16:fe:dc:f0:7f:a5:d1:46:2f:4a:7e:22:be:
                    b7:47:c7:d7:5f:fc:97:b4:21:6b:6c:f5:46:d6:1f:
                    cd:f9:fd:08:b6:02:f9:5d:2c:31:da:55:71:1a:53:
                    2a:11:83:b7:18:02:4d:42:f9:81:78:36:f3:69:c8:
                    90:5f:44:8a:e4:fc:36:ad:a5:17:a5:64:87:04:47:
                    fa:ab:c3:92:54:be:2a:3b:83:89:da:4e:2e:5e:2b:
                    d5:9e:27:9d:9c:97:45:50:36:da:8c:57:32:55:c8:
                    df:a7:33:a7:ee:a2:8c:54:c9:09:42:1e:96:ba:5e:
                    6b:50:f9:95:07:91:60:60:a0:fe:98:d4:3d:82:d8:
                    09:7f:38:7c:ca:bb:54:d5:7e:60:44:d2:7b:33:4f:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:44:9B:16:E0:49:8F:C1:A6:1C:1A:96:A1:9A:3E:53:06:1F:69:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/63449B16E0498FC1A61C1A96A19A3E53061F6922.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.40.0/22
                IPv6:
                  2804:5f30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269082

    Signature Algorithm: sha256WithRSAEncryption
         8d:7a:fa:a3:89:5d:55:88:d5:41:d9:7b:a6:aa:ce:ea:de:f9:
         f2:15:08:bc:1b:56:7a:26:8f:ae:4a:29:cb:a7:f0:78:fb:85:
         97:59:d3:b0:a8:96:9b:c8:34:a6:a5:15:6a:6b:50:a8:19:a8:
         48:72:b6:58:d9:18:eb:c7:a6:86:c0:e1:4c:6d:ad:52:03:b6:
         10:c7:0e:e9:c5:e3:ff:31:96:da:f1:37:b5:72:c0:96:90:e8:
         ee:e1:43:83:34:a3:32:15:0d:a9:14:30:b0:9a:8e:2b:81:f0:
         48:67:28:64:2c:ca:12:99:c4:f1:89:0e:a7:b4:1b:fc:7c:a6:
         e6:4d:38:28:22:38:06:5f:6d:c1:17:63:bf:55:f2:b7:68:9c:
         7e:15:80:04:a1:b9:dc:5a:0d:26:93:a4:c7:c7:d4:d3:d8:f1:
         16:5f:77:38:e7:0c:ef:b8:de:10:02:5f:e3:d1:8a:7e:50:e9:
         c8:c8:5a:92:90:31:9d:14:d4:ae:7b:a9:2e:c9:5a:0c:c1:fd:
         f5:a3:b0:c1:dd:44:a5:e9:e6:4e:5b:ff:10:c8:5b:5b:61:d0:
         dc:fd:7c:a3:f7:13:67:3a:b6:c1:f6:1b:04:65:69:72:6b:58:
         dd:c0:4b:84:a2:3d:78:8e:89:a4:f7:23:50:4c:28:52:ee:84:
         82:f5:d1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org