Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.cer
File:                     679534B939B34FA7D85CBB2A06E0610EC372ADC7.cer (raw, json)
Hash identifier:          LAsFVHavbJZ+T3NFVdOoUCLZmrURWzRBk6veNl3zDzQ=
Subject key identifier:   67:95:34:B9:39:B3:4F:A7:D8:5C:BB:2A:06:E0:61:0E:C3:72:AD:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2A5236A6599D048F8DAFC9667AE7F2C0B8B8BD25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 14:44:05 +0000
Certificate not after:    Mon 16 Dec 2024 14:49:05 +0000
Subordinate resources:    AS: 263360
                          IP: 191.37.136.0/22
                          IP: 2804:14f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:52:36:a6:59:9d:04:8f:8d:af:c9:66:7a:e7:f2:c0:b8:b8:bd:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 14:44:05 2023 GMT
            Not After : Dec 16 14:49:05 2024 GMT
        Subject: CN=679534B939B34FA7D85CBB2A06E0610EC372ADC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:9e:36:c4:5a:43:c2:b8:41:c2:63:35:ae:
                    f4:8d:75:a9:45:87:58:34:3a:d5:40:cd:89:63:13:
                    6f:ce:fa:7a:5d:f1:4c:ea:c5:48:e2:21:ec:6c:a2:
                    f7:01:5a:b6:3b:da:1f:57:da:58:65:6d:fc:31:f6:
                    f7:66:82:50:d0:09:f5:ef:0b:7f:b1:bb:9d:2c:15:
                    d9:b0:62:3d:c8:38:1b:c0:02:c4:51:77:75:e4:14:
                    cb:26:48:c5:04:1a:1c:c4:36:d0:76:59:e0:8e:1a:
                    df:46:0a:6d:62:5a:f5:51:0e:5e:23:85:69:31:b5:
                    09:49:c5:62:45:1a:91:10:2d:51:4a:3c:ec:6a:cc:
                    60:13:b1:58:72:fe:8c:cd:7c:31:dc:e1:f5:50:75:
                    fd:a8:0b:c2:0c:2b:42:c4:d0:74:13:da:ec:b0:ec:
                    c3:b0:ff:de:fe:a6:7d:71:1a:38:c9:db:2e:25:02:
                    49:c7:e4:fd:4b:ec:8a:86:3b:17:3e:43:90:43:6e:
                    d3:3e:10:af:96:87:81:21:4a:0f:ce:22:57:08:fe:
                    8a:9e:51:d6:00:4d:06:e1:b2:a1:7d:3b:69:6e:18:
                    f0:87:62:7e:99:7a:28:2f:90:e9:42:1a:e2:ce:72:
                    a7:97:c6:ad:29:de:eb:aa:1a:74:b7:6a:7a:2c:c0:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:95:34:B9:39:B3:4F:A7:D8:5C:BB:2A:06:E0:61:0E:C3:72:AD:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.136.0/22
                IPv6:
                  2804:14f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263360

    Signature Algorithm: sha256WithRSAEncryption
         0d:67:e7:8e:d8:b0:df:32:45:79:38:1b:cc:76:c9:80:1f:38:
         5d:df:45:a7:ed:38:51:fa:65:b1:28:64:df:84:03:4c:ff:c6:
         a8:00:cb:c9:4a:a5:42:6f:c2:e4:80:2e:49:28:71:88:c9:05:
         69:f4:f3:e5:05:3a:df:62:32:13:c0:18:bb:f1:4c:18:45:ee:
         cf:1f:3a:a0:3b:de:55:16:3b:08:cc:a9:e9:99:2e:c8:16:b1:
         9a:d2:dc:70:47:2e:c0:24:b1:35:27:49:cc:20:ab:62:42:a1:
         a2:90:a2:83:0b:4d:7f:39:c0:90:b7:eb:59:b9:57:80:6a:8f:
         06:a7:80:31:98:46:38:3d:02:c9:c4:9a:62:c3:86:03:c2:eb:
         64:ff:34:5e:b6:e4:00:06:4a:fc:63:92:b5:87:45:04:90:a8:
         01:4e:28:a8:30:ec:a1:40:47:09:85:b9:02:f7:a8:6e:7f:1a:
         6f:b1:90:b1:f8:06:f7:bf:bb:73:a5:7b:f9:6b:d2:16:3c:42:
         25:74:1f:ce:2e:15:c3:3a:d4:04:a7:e2:39:58:73:32:29:38:
         8c:ec:ed:4a:e8:2a:a7:1c:81:17:c5:b4:5e:af:f4:d2:35:fd:
         06:99:1c:e9:00:42:66:e1:8d:ce:1a:40:ba:49:f0:a9:fa:24:
         fd:49:b3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org