Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.cer
File:                     63D2D46E742FC22F105852BE96AF5CD79AC0736B.cer (raw, json)
Hash identifier:          vnJCv0aWfCfwf+6fPZ1PdUzb8FV93w856yz62HSHmjA=
Subject key identifier:   63:D2:D4:6E:74:2F:C2:2F:10:58:52:BE:96:AF:5C:D7:9A:C0:73:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       49363E9F93B96DE19F50628BB75CCABD944DAF03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 18:50:05 +0000
Certificate not after:    Mon 02 Sep 2024 18:55:05 +0000
Subordinate resources:    AS: 28299
                          IP: 177.12.160.0/20
                          IP: 177.185.192.0/20
                          IP: 187.1.128.0/20
                          IP: 189.38.80.0/20
                          IP: 191.6.192.0/19
                          IP: 2804:10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:36:3e:9f:93:b9:6d:e1:9f:50:62:8b:b7:5c:ca:bd:94:4d:af:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  4 18:50:05 2023 GMT
            Not After : Sep  2 18:55:05 2024 GMT
        Subject: CN=63D2D46E742FC22F105852BE96AF5CD79AC0736B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:86:67:3c:63:7e:2e:fa:ee:2a:62:33:56:0c:
                    9a:f4:5b:72:86:d6:fb:85:a1:8f:fa:82:c4:31:30:
                    55:65:1d:8e:e8:0e:3b:55:30:19:c0:25:b3:20:f0:
                    e9:3f:33:ef:a7:b0:48:24:96:88:f2:73:b6:6d:af:
                    65:0c:93:10:5b:73:6d:6f:ce:21:ee:37:b1:92:1b:
                    ae:6c:fb:d3:ae:f3:a2:40:ff:5e:a7:d3:fe:0a:51:
                    d4:08:4a:81:63:67:60:ed:a6:65:5e:5b:48:34:59:
                    17:b2:65:13:71:51:16:07:84:3c:f5:ab:0f:42:d7:
                    13:c9:e9:27:86:a1:6e:01:27:5d:7e:5c:39:ae:47:
                    83:5d:0a:cc:73:a9:c7:2d:36:c1:ae:95:8d:03:a8:
                    a1:77:2f:c7:60:ba:66:3f:cd:d1:e8:e2:6a:6e:af:
                    be:f3:39:fa:45:a2:c5:78:3e:81:12:6c:cb:fa:cb:
                    d4:ce:53:08:9f:ff:1c:e9:0d:9c:9f:58:52:24:a6:
                    cd:a6:13:45:c0:1e:3a:8e:de:f8:27:df:42:0d:92:
                    e5:40:59:6b:5b:c5:e2:74:5a:a7:86:a2:ef:af:97:
                    74:c0:f2:b0:b4:d3:90:72:84:c8:e1:c6:8a:3b:54:
                    1f:d8:98:86:35:18:4d:00:e9:25:9d:46:db:c3:0f:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:D2:D4:6E:74:2F:C2:2F:10:58:52:BE:96:AF:5C:D7:9A:C0:73:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.160.0/20
                  177.185.192.0/20
                  187.1.128.0/20
                  189.38.80.0/20
                  191.6.192.0/19
                IPv6:
                  2804:10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28299

    Signature Algorithm: sha256WithRSAEncryption
         60:27:4c:92:09:82:9b:5b:e8:d0:23:cc:f1:2e:90:1a:de:12:
         13:b3:fa:e9:1d:2c:70:7f:4c:09:c5:28:62:f5:6c:cc:b8:fa:
         4c:1a:58:32:5a:14:82:a5:29:55:47:3c:cd:ca:d2:7f:03:9c:
         62:73:45:6b:69:2e:c5:0f:2d:2d:c1:63:25:9f:ce:dc:5e:dc:
         40:7f:18:3f:c1:62:bd:a2:47:ee:ec:72:db:7c:a7:46:f0:44:
         60:a0:f4:21:95:05:45:ed:2c:c4:f5:f7:76:4b:d3:a0:e5:cf:
         59:d8:cd:1c:94:e4:5b:db:0e:49:17:39:fd:b3:ec:ba:1f:be:
         86:8a:38:2d:8d:1b:f3:67:fa:57:24:45:e6:79:6d:77:e1:25:
         5f:49:41:d0:97:10:bf:21:a4:7f:ad:95:26:81:80:41:6f:51:
         1a:ba:b9:b0:4c:d5:08:67:80:31:a2:55:6d:1b:51:b3:ee:33:
         22:46:1a:d8:18:bf:c9:60:7b:09:23:fc:ce:3f:70:29:e7:ca:
         f8:c3:c7:68:16:5e:dc:89:4c:23:b0:26:b2:42:73:36:0d:24:
         89:7a:24:2b:e9:e3:1a:89:12:64:d3:c8:17:46:d3:87:13:29:
         95:b5:85:aa:02:94:b1:ef:dc:9a:4e:f7:d8:4c:50:e8:51:b3:
         a5:4f:c7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org