Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/634E6B03FB7988827C9E56A7ABFC4BE47233236E.cer
File:                     634E6B03FB7988827C9E56A7ABFC4BE47233236E.cer (raw, json)
Hash identifier:          ZypDhRQU6qJD83ZgrjVshlUJy3f3jFVoO6sKqPP2M+k=
Subject key identifier:   63:4E:6B:03:FB:79:88:82:7C:9E:56:A7:AB:FC:4B:E4:72:33:23:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F6F25A9643751D6437AD23505EC1D14B07937
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/634E6B03FB7988827C9E56A7ABFC4BE47233236E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Jan 2023 13:58:58 +0000
Certificate not after:    Mon 29 Jan 2024 14:03:58 +0000
Subordinate resources:    AS: 53045
                          IP: 138.121.232.0/22
                          IP: 170.79.4.0/22
                          IP: 177.85.144.0/21
                          IP: 2804:6d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6f:25:a9:64:37:51:d6:43:7a:d2:35:05:ec:1d:14:b0:79:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 30 13:58:58 2023 GMT
            Not After : Jan 29 14:03:58 2024 GMT
        Subject: CN=634E6B03FB7988827C9E56A7ABFC4BE47233236E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:f3:59:a7:e8:8d:3a:d8:ed:9a:a6:e4:51:
                    71:67:64:67:16:01:25:4b:eb:37:8e:7c:b1:56:bf:
                    f7:f2:fc:9e:34:b6:de:22:b0:fe:a3:f4:ad:b3:ec:
                    7e:67:ac:b6:9b:7a:95:b7:54:8e:67:2f:cb:42:62:
                    be:84:6a:e1:9a:75:c9:5f:82:5b:3f:97:ff:9a:0a:
                    45:96:e7:e5:3e:1a:c5:82:74:a0:71:38:6d:8b:7a:
                    61:40:c1:8d:81:cb:50:a0:21:3e:f0:c2:b4:47:83:
                    96:b6:32:c3:5d:ca:14:6b:7c:15:5c:99:83:5f:7e:
                    e0:d2:c8:95:c6:db:31:88:f6:4a:d4:cf:d1:cb:e5:
                    7c:47:2f:0d:91:67:e5:a9:3b:6b:43:f5:c6:7b:80:
                    ad:af:c2:65:04:f8:62:ec:0f:eb:34:a4:1b:ea:48:
                    c9:e3:ce:f0:0e:43:bf:ae:19:0f:32:07:8a:cc:e5:
                    5f:3d:a0:28:64:72:f3:d6:f5:cf:34:d1:01:fc:d7:
                    6a:31:36:b5:a6:63:bd:2d:f1:11:2c:a1:2b:0d:b7:
                    8a:19:71:d9:81:02:5a:4e:c3:8f:f7:a3:33:7c:cf:
                    f0:54:da:18:87:ec:58:bf:78:1d:2a:2c:55:3b:04:
                    7a:3e:ee:a1:fe:74:35:07:3c:1b:bf:94:5c:db:3f:
                    4b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:4E:6B:03:FB:79:88:82:7C:9E:56:A7:AB:FC:4B:E4:72:33:23:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/634E6B03FB7988827C9E56A7ABFC4BE47233236E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.232.0/22
                  170.79.4.0/22
                  177.85.144.0/21
                IPv6:
                  2804:6d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53045

    Signature Algorithm: sha256WithRSAEncryption
         0e:c9:9c:8f:e8:17:65:de:4f:2f:55:87:63:28:e3:36:8f:cc:
         0b:66:4e:4a:50:56:0d:99:1e:62:3d:1e:dd:b3:07:c0:09:a1:
         14:ab:af:16:1f:aa:66:78:ab:52:4f:f5:b7:7f:81:e1:5a:54:
         73:d1:d0:e7:76:3b:0b:bc:bb:50:01:e0:c1:31:0f:00:e6:a5:
         10:46:41:6b:de:4b:24:b3:23:3c:3b:94:7b:96:b3:f9:38:f4:
         73:0b:64:1c:40:72:20:a3:d0:42:69:83:24:26:a6:51:4b:85:
         ee:58:18:a3:48:b1:23:76:cd:c1:04:e1:ad:cd:24:a2:4a:c9:
         d8:58:11:68:e0:0a:38:a2:9f:0e:71:a6:89:0e:bd:f2:9d:0c:
         51:a7:58:5e:97:7c:7a:c6:f9:31:4d:d9:d4:12:ff:2e:1c:7b:
         25:01:e3:18:56:78:ff:ec:68:01:1a:0d:32:09:40:aa:c2:c7:
         6b:3d:ea:6f:c0:24:3c:17:a8:37:c9:a0:ce:51:22:96:35:cf:
         08:89:82:09:1b:36:5b:52:8b:95:a4:97:c1:e8:52:62:12:08:
         d4:46:2f:2f:24:70:c5:f6:42:d7:b4:ae:6f:ac:8a:0e:5b:5f:
         37:1b:4f:6d:e6:bd:4f:34:cb:24:83:5a:86:c2:ba:41:46:3c:
         c6:9e:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org