Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/63B9E9EAB498419AB34BC2DB5D662FF049264549.cer
File:                     63B9E9EAB498419AB34BC2DB5D662FF049264549.cer (raw, json)
Hash identifier:          qaM95s63mKSybvrmq2n+XRvw5UHHIDfLePchlQlXKpU=
Subject key identifier:   63:B9:E9:EA:B4:98:41:9A:B3:4B:C2:DB:5D:66:2F:F0:49:26:45:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04E94FDA924EA7E8C54A6798005B007E93C4DEC7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/63B9E9EAB498419AB34BC2DB5D662FF049264549.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 15:29:14 +0000
Certificate not after:    Thu 18 Jul 2024 15:34:14 +0000
Subordinate resources:    AS: 263129
                          IP: 177.155.84.0/22
                          IP: 2804:172c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e9:4f:da:92:4e:a7:e8:c5:4a:67:98:00:5b:00:7e:93:c4:de:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 15:29:14 2023 GMT
            Not After : Jul 18 15:34:14 2024 GMT
        Subject: CN=63B9E9EAB498419AB34BC2DB5D662FF049264549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:58:35:47:c7:1b:44:f9:d0:2a:61:35:cc:
                    28:e1:58:7c:16:32:72:4f:70:da:7c:22:51:9c:f9:
                    f9:be:9e:c3:43:70:bb:d3:bc:ac:3b:4a:1e:ff:0a:
                    13:d6:99:db:30:68:ad:ff:5e:e2:b8:57:f6:2e:d7:
                    b0:17:04:34:75:5a:8a:f8:e6:34:c4:c9:10:63:62:
                    ea:48:cc:32:2a:39:ac:ca:14:c6:7a:48:48:8f:de:
                    1f:72:aa:0e:1c:b8:84:c5:24:8f:3f:f1:73:00:66:
                    9b:a4:d0:fc:70:5a:fb:bf:98:b6:6e:67:ef:95:ce:
                    8b:2f:67:2b:46:f2:37:70:59:78:88:4b:62:07:e6:
                    4e:ea:86:23:ba:7e:c9:e3:20:9a:75:ec:a2:77:de:
                    6a:58:71:45:d5:3c:7e:fc:e1:60:1f:24:4f:67:2c:
                    b7:33:3e:fa:4e:6d:c9:c3:ac:4f:b8:7a:fd:97:5c:
                    41:c5:18:b8:67:95:2b:03:ee:5a:f3:3b:39:ab:d7:
                    f2:d5:05:d3:8f:0b:19:a3:fb:db:4a:12:29:8b:70:
                    a8:94:d8:b1:88:8e:8a:fd:55:ba:b1:b6:8c:7d:b6:
                    e8:05:59:81:6a:f7:13:af:32:09:33:dc:c8:8a:42:
                    b3:47:a0:44:d7:e7:41:4c:13:5b:d3:e8:f2:71:d2:
                    b1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:B9:E9:EA:B4:98:41:9A:B3:4B:C2:DB:5D:66:2F:F0:49:26:45:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/63B9E9EAB498419AB34BC2DB5D662FF049264549.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.84.0/22
                IPv6:
                  2804:172c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263129

    Signature Algorithm: sha256WithRSAEncryption
         52:3c:7c:04:6e:84:66:93:ca:d4:55:c1:da:c8:5a:d0:48:80:
         41:4e:22:b1:28:52:49:b2:3b:ca:5a:29:ee:a0:05:9d:2f:7e:
         43:25:96:a2:d5:f6:d0:ce:ca:a3:94:97:69:ae:5d:8d:06:88:
         d7:00:00:fd:77:73:00:8a:10:1f:63:4e:09:c3:68:dc:ad:f5:
         31:df:27:6a:a5:aa:46:89:ca:13:1f:e2:20:8c:4a:8f:98:5c:
         67:35:52:d6:a6:3e:21:1e:ac:d0:b3:a7:f0:eb:d4:fb:0d:11:
         8e:9e:96:7b:01:6a:99:8c:31:57:6e:15:95:98:09:4f:f8:50:
         25:ea:47:89:89:2d:2e:ab:40:2b:36:0a:eb:b9:fa:c2:af:f2:
         b8:ff:50:df:4b:fd:f4:fa:9d:af:a6:3c:e7:fc:ac:21:c4:35:
         9f:6d:cc:ad:4c:5f:40:75:a3:5e:9e:5f:0c:5e:13:6c:2c:0f:
         2a:4a:77:ac:55:bb:78:95:43:84:8a:b2:04:00:dc:74:6d:e6:
         29:53:e8:d5:0d:03:95:14:f4:7b:cf:bc:07:87:33:1c:2f:3f:
         00:34:70:19:12:be:7f:65:90:04:b2:42:18:4e:63:e5:d0:b8:
         84:53:26:0a:70:9d:06:44:e7:cb:30:e7:b4:07:ff:04:58:59:
         df:d7:a8:1c
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBOlP2pJOp+jFSmeYAFsAfpPE3scwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjAxNTI5MTRaFw0yNDA3MTgxNTM0MTRaMDMxMTAvBgNV
BAMTKDYzQjlFOUVBQjQ5ODQxOUFCMzRCQzJEQjVENjYyRkYwNDkyNjQ1NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oFg1R8cbRPnQKmE1zCjhWHwW
MnJPcNp8IlGc+fm+nsNDcLvTvKw7Sh7/ChPWmdswaK3/XuK4V/Yu17AXBDR1Wor4
5jTEyRBjYupIzDIqOazKFMZ6SEiP3h9yqg4cuITFJI8/8XMAZpuk0PxwWvu/mLZu
Z++VzosvZytG8jdwWXiIS2IH5k7qhiO6fsnjIJp17KJ33mpYcUXVPH784WAfJE9n
LLczPvpObcnDrE+4ev2XXEHFGLhnlSsD7lrzOzmr1/LVBdOPCxmj+9tKEimLcKiU
2LGIjor9Vbqxtox9tugFWYFq9xOvMgkz3MiKQrNHoETX50FME1vT6PJx0rG9AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjuenqtJhBmrNL
wttdZi/wSSZFSTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81eVpobUtUTGhHZVlWOXFOdnVuSzFZd0JaanpxcEJaTnZ2
cUZlRldzNkptby8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52
dnFGZUZXczZKbW8vMC82M0I5RTlFQUI0OTg0MTlBQjM0QkMyREI1RDY2MkZGMDQ5
MjY0NTQ5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKxm1QwDQQCAAIwBwMF
ACgEFywwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAPZMA0GCSqGSIb3DQEBCwUA
A4IBAQBSPHwEboRmk8rUVcHayFrQSIBBTiKxKFJJsjvKWinuoAWdL35DJZai1fbQ
zsqjlJdprl2NBojXAAD9d3MAihAfY04Jw2jcrfUx3ydqpapGicoTH+IgjEqPmFxn
NVLWpj4hHqzQs6fw69T7DRGOnpZ7AWqZjDFXbhWVmAlP+FAl6keJiS0uq0ArNgrr
ufrCr/K4/1DfS/30+p2vpjzn/KwhxDWfbcytTF9AdaNenl8MXhNsLA8qSnesVbt4
lUOEirIEANx0beYpU+jVDQOVFPR7z7wHhzMcLz8ANHAZEr5/ZZAEskIYTmPl0LiE
UyYKcJ0GROfLMOe0B/8EWFnf16gc
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org