Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/63807A0C0AB729067F4CC2BB8DE2A2F42EE9A2D3.cer
File:                     63807A0C0AB729067F4CC2BB8DE2A2F42EE9A2D3.cer (raw, json)
Hash identifier:          h4imiDZeEVFEBLAmrLhZLynPsrx/1QHo6meCZI5T+1A=
Subject key identifier:   63:80:7A:0C:0A:B7:29:06:7F:4C:C2:BB:8D:E2:A2:F4:2E:E9:A2:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       135D40D406A14113F408C256A0AB144B75B6058A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/63807A0C0AB729067F4CC2BB8DE2A2F42EE9A2D3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 20:48:18 +0000
Certificate not after:    Mon 17 Mar 2025 20:53:18 +0000
Subordinate resources:    AS: 270604
                          IP: 187.0.32.0/22
                          IP: 2804:6e8c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5d:40:d4:06:a1:41:13:f4:08:c2:56:a0:ab:14:4b:75:b6:05:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 20:48:18 2024 GMT
            Not After : Mar 17 20:53:18 2025 GMT
        Subject: CN=63807A0C0AB729067F4CC2BB8DE2A2F42EE9A2D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:2b:be:f4:1d:79:bc:2c:97:26:a5:ac:53:
                    80:d5:de:df:0b:fa:24:82:ea:64:f1:cd:f0:89:7a:
                    13:77:cf:7b:a9:a1:04:b8:54:97:7b:11:89:6e:11:
                    37:b3:1e:ec:55:98:a3:ec:a8:9d:36:0a:d9:11:4c:
                    3b:f4:41:0c:09:6c:6e:6b:e7:4e:dd:63:05:21:bc:
                    30:16:57:df:a2:67:5b:b3:23:50:b7:48:df:df:a0:
                    d7:73:26:d0:11:17:dd:8a:14:56:86:1a:22:a4:6e:
                    59:ef:a9:f9:d1:90:e6:78:97:0c:e5:7e:b2:53:8d:
                    22:19:6b:09:a2:90:05:7b:14:1f:d8:64:5d:f0:8b:
                    90:24:95:07:bb:b5:63:1d:1c:14:8d:f1:4b:93:50:
                    3d:32:87:7f:0b:2d:10:dd:7c:70:fc:d3:98:31:de:
                    8c:3c:6f:30:2f:f5:86:e1:a6:43:93:2e:5f:eb:cf:
                    d6:28:7f:50:49:94:55:4a:7a:99:f5:ca:cb:f0:62:
                    d1:c9:51:45:66:e1:09:6b:d9:fc:90:37:05:b0:04:
                    99:26:07:d9:ad:b2:31:1c:f2:7f:fd:f9:a9:9b:4d:
                    92:5d:46:f4:fb:30:e5:cd:cf:25:4e:86:cb:cc:80:
                    5e:0f:71:29:5c:d1:45:a1:ae:41:47:ef:00:90:9b:
                    76:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:80:7A:0C:0A:B7:29:06:7F:4C:C2:BB:8D:E2:A2:F4:2E:E9:A2:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/63807A0C0AB729067F4CC2BB8DE2A2F42EE9A2D3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.32.0/22
                IPv6:
                  2804:6e8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270604

    Signature Algorithm: sha256WithRSAEncryption
         19:d4:53:9b:6f:2a:04:9c:39:97:7f:44:aa:05:cc:82:a6:95:
         f2:0d:dc:2f:d7:23:9c:9e:c7:4e:c6:e7:3f:10:c5:92:b6:0f:
         43:e0:27:d2:eb:5f:62:83:25:dc:04:93:2d:b5:dc:84:07:28:
         15:dd:b6:d7:ce:3b:88:89:26:90:1e:85:24:27:b0:a4:75:92:
         e5:91:43:8f:9b:b5:44:26:c4:18:e0:b2:a9:40:64:c3:0f:ac:
         e2:86:74:a7:24:ea:37:70:fc:c7:b2:c3:6b:e8:16:78:4f:e4:
         73:e0:12:33:c2:6e:ec:da:5e:e9:54:a8:72:4b:eb:0f:d5:85:
         80:1e:f4:6f:af:36:c8:26:3f:bd:ea:9e:ab:be:7a:b1:2d:13:
         98:1a:ac:9c:b0:50:79:f4:5d:05:b1:8f:43:8f:34:4c:1a:3c:
         37:b0:eb:fb:87:ab:01:ef:63:39:e7:e5:91:7b:77:2f:af:dc:
         f3:b8:29:ba:53:ae:62:12:90:09:ed:f7:91:83:c4:cd:a8:82:
         4a:ef:32:a6:bc:65:f7:3b:5d:f0:84:70:0b:43:cb:b3:df:a3:
         9d:3a:7b:74:9c:8e:09:e1:c0:b6:70:49:94:aa:74:eb:36:05:
         f2:4f:15:f1:f9:f1:68:ae:18:d2:5c:92:24:ec:2b:5e:19:65:
         b8:bb:56:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org