Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/63861FCD57ACAD57AA4C2A10C7BB9185E53A8E22.cer
File:                     63861FCD57ACAD57AA4C2A10C7BB9185E53A8E22.cer (raw, json)
Hash identifier:          sbTPz4rg4+gKnmLcIFL7fbq9NI/8R5clUq6vqsRuKc8=
Subject key identifier:   63:86:1F:CD:57:AC:AD:57:AA:4C:2A:10:C7:BB:91:85:E5:3A:8E:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E72220473C8AC0923B3D231CDD8A3DD38548391
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/63861FCD57ACAD57AA4C2A10C7BB9185E53A8E22.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Feb 2023 14:35:19 +0000
Certificate not after:    Tue 20 Feb 2024 14:40:19 +0000
Subordinate resources:    AS: 262797
                          IP: 131.72.92.0/22
                          IP: 179.97.64.0/21
                          IP: 186.237.0.0/20
                          IP: 2804:23c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:72:22:04:73:c8:ac:09:23:b3:d2:31:cd:d8:a3:dd:38:54:83:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 14:35:19 2023 GMT
            Not After : Feb 20 14:40:19 2024 GMT
        Subject: CN=63861FCD57ACAD57AA4C2A10C7BB9185E53A8E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:2d:96:10:b6:de:0b:9d:11:95:89:31:e5:
                    ca:ea:e9:bd:ff:bb:08:d4:7b:dc:12:1f:c2:42:ad:
                    26:ab:07:ba:55:a0:b0:c5:8f:f9:13:6d:48:32:d6:
                    59:ae:81:df:c5:7f:bf:2d:91:42:b2:81:80:78:39:
                    9c:40:1e:23:2f:8a:2f:d1:fe:b5:01:c4:64:6e:a8:
                    8c:3a:36:51:b9:71:00:5f:07:43:e6:44:47:56:35:
                    0f:0e:a5:df:60:26:38:3d:0f:22:22:28:73:63:57:
                    6d:30:30:6d:e7:fe:41:a7:40:c3:52:2b:17:d1:37:
                    70:a5:7b:46:67:0e:8b:0d:de:68:23:84:7c:12:a1:
                    a8:98:de:b2:7b:0c:5d:bb:d5:a3:fc:ea:64:48:0d:
                    73:d1:33:bd:a6:f7:5a:9c:8c:a0:66:e6:56:08:26:
                    16:1a:76:46:a1:0d:c7:b3:05:30:dd:d3:b4:e1:3f:
                    36:5b:1a:d8:3d:53:2f:70:b0:36:21:14:f0:f4:01:
                    6c:5f:2b:ba:61:f2:5e:87:54:16:57:62:16:0a:0f:
                    b9:0b:11:6c:5d:f0:da:88:cc:3b:df:9b:50:f5:bf:
                    1b:95:bc:0c:ee:aa:a1:da:c7:75:f6:43:d5:4f:34:
                    1e:2d:2f:41:d0:57:4d:b5:6e:1e:93:24:79:eb:4d:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:86:1F:CD:57:AC:AD:57:AA:4C:2A:10:C7:BB:91:85:E5:3A:8E:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/63861FCD57ACAD57AA4C2A10C7BB9185E53A8E22.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.92.0/22
                  179.97.64.0/21
                  186.237.0.0/20
                IPv6:
                  2804:23c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262797

    Signature Algorithm: sha256WithRSAEncryption
         35:12:2f:4f:1b:96:1c:36:da:01:e3:c5:ae:c9:17:af:51:d1:
         bf:ae:17:17:d5:26:b0:17:a5:4a:bf:e4:f3:90:74:f3:97:f7:
         48:62:73:4e:57:7d:b4:06:21:26:fb:a5:68:0f:62:e6:7d:0f:
         4d:49:ba:33:fb:1c:26:2c:b5:89:de:6b:c4:b9:aa:bb:5a:0f:
         ea:9e:50:80:2b:c2:c8:aa:38:ef:e7:6a:6d:e6:e7:a4:c7:46:
         dd:2e:e8:55:8e:53:13:f2:c5:aa:29:c9:e3:17:15:6d:53:5f:
         96:94:8c:39:21:53:3a:59:5e:68:59:ab:d8:d2:52:9f:d1:b8:
         c6:82:06:b6:f6:06:a0:9b:09:f6:dc:17:e1:38:3f:55:dd:38:
         03:34:6d:96:46:8d:f4:8d:73:48:04:4e:1d:1b:a0:d5:24:b5:
         fa:00:79:b9:69:05:f0:c7:50:e6:c1:13:e7:ab:59:ac:bf:aa:
         b3:1c:68:75:a9:05:05:97:62:55:05:97:06:58:16:e2:4d:2c:
         9b:22:f6:6a:f7:84:11:e1:da:bc:e0:a0:3f:b7:7f:a7:aa:41:
         b4:ec:1f:d6:77:5a:9c:0b:e7:c0:7b:db:c3:c8:59:07:0d:54:
         23:31:72:bf:b0:1d:d0:07:17:b5:14:ce:48:ad:29:8a:a6:7e:
         e8:cb:80:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org