Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.cer
File:                     64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.cer (raw, json)
Hash identifier:          DJnJaeQgxVeeznT3P2KC6ZCAXB/rDsPdibU55rHTjnc=
Subject key identifier:   64:CF:7F:A7:AF:F5:D7:80:6F:86:7C:5F:3E:DF:CE:14:61:E7:8A:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D16F5F7374E0C4A6AB67851E159C7045CCC037F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Sep 2023 19:18:59 +0000
Certificate not after:    Fri 20 Sep 2024 19:23:59 +0000
Subordinate resources:    AS: 270687
                          IP: 200.142.232.0/22
                          IP: 2804:6fd4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:16:f5:f7:37:4e:0c:4a:6a:b6:78:51:e1:59:c7:04:5c:cc:03:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 19:18:59 2023 GMT
            Not After : Sep 20 19:23:59 2024 GMT
        Subject: CN=64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:ab:25:7d:c3:ef:cd:e7:3c:f6:97:40:e1:
                    c3:3e:16:1a:9f:2f:5c:e0:2d:fe:5e:88:eb:44:df:
                    c7:79:66:8e:c8:85:95:01:5a:9e:16:9f:97:a4:cd:
                    c9:a6:7e:e1:b9:c9:28:eb:a1:06:08:6d:d6:df:f4:
                    65:8b:ab:35:77:34:2a:9b:ca:4d:fd:2a:7e:3f:4e:
                    b1:8b:7b:d5:76:ce:2a:26:c7:ef:30:1e:76:6e:a7:
                    f2:75:d3:7f:9a:4e:f5:63:4e:13:e8:1e:3c:66:49:
                    bb:5c:75:be:9c:90:54:20:6f:bc:2c:ca:b2:6e:c0:
                    1b:92:ed:37:9c:c4:52:77:cc:25:c9:9b:bf:5e:81:
                    28:32:19:2e:ec:f4:e5:6f:cd:ed:5f:60:c5:1b:01:
                    e1:7e:8c:f2:1b:ff:91:3e:36:71:d1:0a:b4:e4:43:
                    be:58:1b:1f:63:34:05:8b:4b:ee:6b:54:70:33:a3:
                    21:89:70:79:19:31:2a:3e:67:a3:98:0e:e4:d3:d5:
                    e1:e2:4e:52:14:b5:6a:a7:69:c4:4e:63:71:7a:12:
                    3f:10:96:a4:04:f6:6c:90:bb:4c:75:b4:bc:1c:4c:
                    d5:43:89:e0:9a:b5:7a:bc:37:5d:8a:47:5f:32:66:
                    04:13:ce:3f:8a:3f:c5:fc:56:92:57:70:84:c7:48:
                    e0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:CF:7F:A7:AF:F5:D7:80:6F:86:7C:5F:3E:DF:CE:14:61:E7:8A:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.232.0/22
                IPv6:
                  2804:6fd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270687

    Signature Algorithm: sha256WithRSAEncryption
         25:47:17:21:02:46:53:80:3f:4b:20:01:dd:48:62:a6:60:7e:
         be:34:3f:83:cc:48:33:c9:12:fc:40:60:eb:13:bd:e5:8a:7d:
         2d:02:81:72:07:9e:33:67:f5:dd:03:7e:22:68:68:70:d5:5a:
         5b:5b:96:ff:68:70:d0:53:bd:ab:93:ff:0e:30:22:25:d1:d5:
         fa:fb:c9:7a:f0:08:a9:fa:06:12:e0:d4:40:5c:a2:94:2c:9f:
         3b:29:1d:fc:22:9f:10:08:ec:71:18:59:00:99:95:4b:87:72:
         fa:7c:b9:6a:62:b1:6e:ff:03:0b:ce:ea:c1:56:a6:ff:52:42:
         f7:f5:c6:b3:e1:87:41:64:de:49:17:93:07:74:ba:e0:a9:aa:
         cb:cb:fb:42:fe:d6:28:40:1c:33:20:3e:e7:4d:e0:cb:26:8c:
         14:4c:a9:70:fa:92:dd:33:36:cb:0e:37:45:72:13:3a:9c:a0:
         1c:3d:94:89:4a:dd:79:1e:19:9b:78:78:cb:26:b2:6b:6a:58:
         c3:b4:a0:af:59:83:67:99:6d:39:c0:8c:db:ac:21:6b:df:4f:
         96:3e:fe:e5:7a:f0:4f:c7:62:3a:37:c0:f7:64:4f:2a:2c:b0:
         27:5a:73:5d:64:bb:df:be:ed:60:3a:a6:da:e1:a0:c5:a3:33:
         ad:8c:33:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org