Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/648C4362DD5346F387DB57D97560FBCD239648F1.cer
File:                     648C4362DD5346F387DB57D97560FBCD239648F1.cer (raw, json)
Hash identifier:          4gXErHrQNiJYzjtBeyzzV0L+rnRuiu0yTecBn1YWTeE=
Subject key identifier:   64:8C:43:62:DD:53:46:F3:87:DB:57:D9:75:60:FB:CD:23:96:48:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       39A37037E431D71624003E4457256C2ECB521D99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/648C4362DD5346F387DB57D97560FBCD239648F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 18:35:45 +0000
Certificate not after:    Mon 23 Sep 2024 18:40:45 +0000
Subordinate resources:    AS: 262363
                          IP: 177.126.240.0/20
                          IP: 2804:84c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a3:70:37:e4:31:d7:16:24:00:3e:44:57:25:6c:2e:cb:52:1d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 18:35:45 2023 GMT
            Not After : Sep 23 18:40:45 2024 GMT
        Subject: CN=648C4362DD5346F387DB57D97560FBCD239648F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:75:5d:cd:35:b0:8b:31:13:7f:21:ab:12:
                    c6:92:02:fe:2c:f8:00:c8:24:f7:bf:e4:05:11:15:
                    13:ae:c4:9e:01:97:36:60:59:d0:87:70:1b:2a:7c:
                    7b:be:42:0a:8d:69:5d:31:e0:ca:3b:bb:01:eb:5f:
                    18:1e:f2:2f:35:09:9e:8b:f4:ea:5f:1e:2e:da:5c:
                    2c:f5:6f:d3:2f:d7:41:15:50:74:d8:14:46:f9:bf:
                    93:61:4c:93:74:32:e1:b3:cf:9c:3e:11:0a:93:fc:
                    98:ec:5b:a2:85:f8:3b:cd:25:bb:1b:a0:af:d2:80:
                    f7:11:5a:fd:6f:0a:60:a4:07:7c:ee:fe:54:2b:cc:
                    69:61:fd:39:fc:ca:89:07:e9:ac:9c:7e:3b:89:45:
                    33:f1:5e:b1:96:d4:19:80:c6:91:a3:b6:14:d0:53:
                    9e:5f:5b:da:34:32:dd:b3:dc:ba:49:9e:6f:d3:ee:
                    f2:2a:2b:29:2a:dc:27:4e:9b:f0:a0:f7:bb:56:2f:
                    50:87:1e:74:a8:22:ed:e0:07:c3:56:55:0a:88:67:
                    a2:9e:d0:a0:e4:c3:b8:ea:14:5b:47:0a:b3:d1:27:
                    11:2a:da:e9:01:1c:58:9e:e4:e4:85:9b:a5:77:ce:
                    c0:e8:7a:42:60:65:d6:a6:6b:82:6d:f4:ff:ab:9f:
                    62:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:8C:43:62:DD:53:46:F3:87:DB:57:D9:75:60:FB:CD:23:96:48:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/648C4362DD5346F387DB57D97560FBCD239648F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.240.0/20
                IPv6:
                  2804:84c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262363

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:0f:a2:25:dc:0d:f3:7d:10:c1:20:14:7f:ff:fb:ba:64:
         a3:cc:07:47:14:66:b9:8d:2f:3e:00:e5:2d:1d:b1:bc:59:b1:
         04:91:f2:0e:20:36:61:b9:82:3b:37:69:e2:3f:54:62:ac:5b:
         dc:4d:75:70:7d:d4:a9:4a:46:97:6e:9f:c2:30:9a:c0:0f:1c:
         83:4c:b7:5c:55:3c:f2:83:27:e7:ed:04:49:03:f2:7d:28:bf:
         dd:6d:ae:9a:76:e3:36:5b:cb:74:81:4c:30:f5:3a:2c:0c:ad:
         49:96:e9:93:09:a7:41:66:d4:e9:68:40:fc:d1:30:c1:c5:b5:
         d4:14:f8:12:3c:4e:3d:44:cd:25:8f:3a:b8:1c:11:f4:d3:2f:
         8b:d8:00:2e:44:65:cd:f9:d9:05:97:f2:e5:dc:e5:bd:6b:6b:
         91:ed:eb:50:0a:b5:ed:38:27:61:a5:aa:fd:4c:6b:a6:9f:32:
         94:71:60:6d:3e:cc:dd:8e:c0:5b:b2:a0:ef:75:ae:70:33:17:
         74:31:07:3c:3d:e7:53:12:60:54:c9:87:76:ee:75:16:04:d6:
         c5:cb:9e:07:2f:76:3d:29:b9:f9:0f:24:54:47:04:0d:20:fb:
         ab:90:9a:1e:00:0a:26:5e:16:a1:8a:17:62:dc:4a:b6:94:93:
         69:07:67:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org