Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer
File:                     674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer (raw, json)
Hash identifier:          swziwfYz0RZ6w7VLy7gGm+6nXBfGpa9bfHliWwHzG9A=
Subject key identifier:   67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       516F946D973884A0FB91C80635890F3D23359CC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Jul 2023 19:01:19 +0000
Certificate not after:    Mon 08 Jul 2024 19:06:19 +0000
Subordinate resources:    AS: 61584
                          IP: 138.94.128.0/22
                          IP: 170.254.168.0/22
                          IP: 2804:23b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:6f:94:6d:97:38:84:a0:fb:91:c8:06:35:89:0f:3d:23:35:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 10 19:01:19 2023 GMT
            Not After : Jul  8 19:06:19 2024 GMT
        Subject: CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:03:f7:66:f2:f0:8d:11:12:0d:52:9f:d5:4e:
                    18:76:d9:73:e5:a4:26:62:4d:ab:33:d1:22:32:00:
                    7e:d8:79:00:35:e6:8c:15:02:69:a9:7e:32:4f:08:
                    55:9f:30:57:51:72:85:84:b2:47:d6:1e:8c:da:d3:
                    e2:d1:9e:15:ec:80:08:f6:64:05:dd:a3:09:91:34:
                    b0:79:e4:d8:6c:0a:b0:45:03:25:9a:5a:6c:df:a1:
                    45:43:ef:52:60:b6:d1:ba:94:c6:d2:a5:b4:02:3d:
                    b4:9d:a1:22:3f:57:54:a3:99:30:b4:5c:01:9a:68:
                    a7:8a:ed:5a:88:f2:0b:56:3c:39:b7:59:ea:0b:ed:
                    9e:72:cd:b3:5a:47:fc:2d:34:cf:a3:44:e4:d4:d4:
                    f0:6a:f0:6a:e7:ba:cd:dc:7f:b1:a1:a0:fa:e0:8e:
                    6b:44:a8:1e:fe:96:ba:fc:8d:a0:9b:5c:48:9b:c7:
                    f2:6e:fa:37:b1:99:e3:2b:30:8d:3a:35:60:74:11:
                    f5:49:74:b2:52:41:79:79:44:53:aa:c8:c8:f1:4a:
                    45:13:f4:17:cd:84:3e:60:c5:37:2a:d5:84:c1:78:
                    a7:77:54:17:e4:4e:be:a9:30:56:fd:92:c8:8e:f2:
                    ff:78:4b:44:3f:62:cb:31:df:3e:65:f1:f0:3b:99:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.128.0/22
                  170.254.168.0/22
                IPv6:
                  2804:23b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61584

    Signature Algorithm: sha256WithRSAEncryption
         4f:2d:eb:c1:53:de:77:84:a3:40:f9:b0:d6:4d:d0:11:9c:a2:
         08:45:9a:57:d7:cd:fd:ad:77:91:59:37:38:f0:f0:c3:79:04:
         a1:05:31:bd:3e:dd:ed:72:5d:63:4b:76:8a:8e:02:d6:09:5c:
         a9:8a:c0:e2:a2:09:6a:df:03:2d:48:bc:b0:0c:d5:8e:23:50:
         c0:92:7a:d5:db:1e:b3:22:de:b4:5a:03:6d:79:bb:15:c4:af:
         4a:b9:99:87:ed:8d:cd:92:d8:5d:41:6a:40:7a:f0:50:d4:b9:
         22:a7:1b:a8:32:c5:ce:47:60:59:68:16:e7:e4:03:d7:d3:60:
         cb:15:24:65:b5:b2:45:bd:13:45:9a:ef:0f:8d:c7:1f:af:2c:
         9e:d1:0d:6f:ee:b6:17:9d:f1:f3:86:06:3d:33:8b:6a:67:a1:
         4f:08:2e:e5:13:56:af:e0:2e:6e:3f:17:80:fd:de:9e:49:86:
         98:a2:6e:ce:7e:35:aa:2a:73:14:37:6c:4c:b2:60:32:a0:6b:
         76:6a:be:ca:93:ce:41:02:d8:29:e8:17:fa:03:27:0a:e6:4b:
         de:6e:2b:1c:7b:88:85:e5:a1:5e:be:6c:ad:97:0b:1b:06:3f:
         ed:9d:d1:9e:b6:a4:c2:5d:17:3c:91:87:f7:19:bd:15:59:ef:
         3d:27:3f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org