Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/64D90A43947522D97FADCCA2C5687D60AD8508E5.cer
File:                     64D90A43947522D97FADCCA2C5687D60AD8508E5.cer (raw, json)
Hash identifier:          vE1NTztwkbS2S2Ch5STYPkZvU/BBWBUgS62NeCzg+ec=
Subject key identifier:   64:D9:0A:43:94:75:22:D9:7F:AD:CC:A2:C5:68:7D:60:AD:85:08:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       364B852F0147324B66DB19D8BCE2A58F300C43BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/64D90A43947522D97FADCCA2C5687D60AD8508E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Oct 2023 14:08:58 +0000
Certificate not after:    Fri 18 Oct 2024 14:13:58 +0000
Subordinate resources:    AS: 270253
                          IP: 200.110.204.0/22
                          IP: 2804:692c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4b:85:2f:01:47:32:4b:66:db:19:d8:bc:e2:a5:8f:30:0c:43:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 20 14:08:58 2023 GMT
            Not After : Oct 18 14:13:58 2024 GMT
        Subject: CN=64D90A43947522D97FADCCA2C5687D60AD8508E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5e:d3:ac:93:e0:e8:13:b0:51:a7:0f:51:4b:
                    a0:0f:d1:ec:27:79:22:e5:eb:12:0b:9b:93:36:ab:
                    61:13:e0:7a:7e:af:01:6c:49:88:96:3f:34:7d:a3:
                    52:4c:a3:4f:28:64:b9:a7:90:4e:4c:56:af:70:97:
                    26:8b:39:ed:c8:17:0d:72:b4:8b:a6:b5:77:1e:89:
                    a3:7a:47:70:e0:e5:22:ff:c7:d2:1f:8f:1a:07:88:
                    a6:3d:9c:6d:bb:44:5f:bf:49:69:66:f6:82:b1:3f:
                    09:36:fc:05:0a:8e:ce:8f:39:e3:ce:02:aa:be:6a:
                    dd:d2:b6:66:78:48:b7:d9:33:6f:c2:2b:b1:d7:a5:
                    0e:3d:3e:a0:cd:02:91:be:dd:9a:50:93:19:01:08:
                    ee:79:94:44:2f:0f:1b:ad:ea:fe:ba:38:a3:18:92:
                    4f:e6:52:c2:18:df:13:f1:a4:30:61:49:bd:ba:e0:
                    58:f6:9e:75:c8:1b:e4:8c:72:5e:46:26:f1:71:a2:
                    d1:af:fb:30:06:ad:70:cb:81:e2:e9:08:bd:e4:be:
                    c1:4a:70:9a:02:36:f2:21:96:12:b4:70:40:02:3c:
                    3d:40:84:56:bc:7a:68:c0:42:91:dd:50:ff:ac:26:
                    98:17:6b:b3:51:13:7f:91:33:e3:3b:b3:3d:73:1f:
                    66:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:D9:0A:43:94:75:22:D9:7F:AD:CC:A2:C5:68:7D:60:AD:85:08:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/64D90A43947522D97FADCCA2C5687D60AD8508E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.204.0/22
                IPv6:
                  2804:692c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270253

    Signature Algorithm: sha256WithRSAEncryption
         41:02:3f:00:d7:5d:0d:2e:8f:c0:de:05:fd:b6:ec:14:ab:c7:
         b6:22:34:56:f0:1e:94:ee:11:66:4f:f0:2a:96:6e:b9:6a:d8:
         01:a4:c0:ed:58:8f:a3:81:68:9f:ff:14:ff:89:6d:1b:12:ff:
         7a:c2:91:6a:e9:71:fd:d8:5b:73:ca:a1:5a:58:9a:00:73:71:
         c2:47:24:b1:c3:d6:63:45:7b:73:68:5a:fe:31:1d:e1:69:65:
         ee:47:47:56:b7:08:b2:1c:3b:af:06:50:dc:2f:69:3e:33:24:
         ad:db:cb:e4:cc:fa:c5:c0:b1:52:0e:96:5c:fb:77:0b:6e:1b:
         06:af:b1:a9:e6:6d:c3:5d:e4:1d:4d:79:d2:fe:4f:2e:90:ce:
         c1:75:09:62:c8:8a:d3:7e:0f:ab:92:35:d5:7d:b0:f0:0a:0a:
         57:0b:b2:ed:e2:ca:e4:02:fe:3d:43:89:35:2c:91:63:79:ff:
         d0:e3:e5:15:31:b3:7e:36:59:b3:dd:c0:bc:b4:de:72:9b:f6:
         af:d3:c4:af:d8:a5:d3:a3:85:ab:96:8a:4e:51:b5:e7:73:5e:
         e9:c1:e6:b2:93:6b:32:d1:96:16:d0:0d:81:1a:54:8e:0e:3d:
         48:f7:5b:3d:16:69:1a:60:24:d4:9f:f0:4b:bd:58:2b:f8:aa:
         4f:19:cc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org