Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.cer
File:                     69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.cer (raw, json)
Hash identifier:          sZsMWAUqdkHq25Pa0VSF/MYw9eg+XYrijJTK5Vz49u8=
Subject key identifier:   69:B6:3B:F9:48:7B:CA:DD:2E:9F:C3:79:21:B9:F2:74:EC:FE:BA:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       95E8CACCC861D42A128FAE304EC8088ED2F872
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1/69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 11:52:44 +0000
Certificate not after:    Tue 14 May 2024 11:57:44 +0000
Subordinate resources:    AS: 271592
                          IP: 190.9.120.0/22
                          IP: 2804:7df0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            95:e8:ca:cc:c8:61:d4:2a:12:8f:ae:30:4e:c8:08:8e:d2:f8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 16 11:52:44 2023 GMT
            Not After : May 14 11:57:44 2024 GMT
        Subject: CN=69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:a1:54:a6:eb:a1:63:63:d0:f7:fa:d8:96:
                    8c:b5:2d:ec:13:21:fa:85:63:25:59:21:72:06:4d:
                    a1:a6:ee:5f:ee:13:b4:71:d0:29:01:48:fd:c6:18:
                    fb:34:28:68:ca:95:25:84:c1:39:a4:43:c6:2f:e2:
                    29:e7:df:7e:6b:d2:7a:0d:c4:84:f1:4c:ff:48:5a:
                    2e:0d:16:d0:ea:75:c8:01:b8:fa:ff:93:ed:f5:33:
                    76:15:dc:f2:e7:e1:14:bd:13:9b:51:56:9e:4e:3c:
                    ff:3c:1b:de:8d:0d:94:ff:5a:1c:95:85:a7:b8:97:
                    7b:57:9d:dc:16:73:16:d1:b7:ca:c8:59:cf:e0:48:
                    ed:bb:98:4e:98:9d:6d:d4:cc:55:7b:a9:db:e0:c3:
                    09:ac:45:49:1a:9b:7d:d9:22:14:bf:e1:45:78:3c:
                    c5:8b:4c:a7:9e:1a:81:c1:24:d8:55:b0:4d:ae:0a:
                    f8:83:6b:41:3e:44:35:3f:bc:a8:dc:a3:32:05:5d:
                    99:64:85:59:21:aa:9c:5b:67:fc:ac:ba:75:98:25:
                    6c:e5:13:35:fd:35:5a:14:7d:b9:73:eb:a2:ba:db:
                    e6:56:8f:1a:2c:69:b4:fa:a8:53:46:ac:d0:89:f0:
                    30:c6:f9:b6:09:9a:cc:1b:dc:e8:f0:6c:55:5f:15:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:B6:3B:F9:48:7B:CA:DD:2E:9F:C3:79:21:B9:F2:74:EC:FE:BA:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1/69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.120.0/22
                IPv6:
                  2804:7df0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271592

    Signature Algorithm: sha256WithRSAEncryption
         09:d8:72:bc:31:9c:ca:3f:d4:36:18:91:eb:95:87:1f:e5:19:
         a4:c7:96:13:57:9f:76:3f:98:b7:4c:cd:21:7a:3f:83:26:59:
         e4:53:8e:01:6e:05:e6:60:70:94:ee:6f:3d:a7:c2:12:e6:a3:
         d1:d0:c0:44:40:85:00:d4:7b:41:2a:42:de:cd:ab:b3:21:6d:
         c0:a3:26:3f:08:0f:b6:59:d9:b7:37:3d:86:e6:55:b2:81:55:
         ad:b1:67:a6:7a:23:01:71:6d:f9:40:b1:59:95:56:d4:4b:ad:
         88:bf:d2:0b:d9:f7:cc:25:76:fa:84:78:57:84:0a:63:1b:ff:
         b4:73:73:92:9b:16:fd:14:41:57:04:e2:bc:30:17:fa:98:65:
         92:e5:b2:11:f8:5e:fb:27:c1:c7:64:ed:f1:bb:22:75:14:2b:
         b8:0a:ed:f1:42:93:7d:84:10:f2:13:90:8a:4d:69:28:25:c1:
         fb:35:86:81:c0:cf:fe:8c:2e:5a:19:16:05:7d:a9:f4:fe:73:
         82:02:49:19:e7:32:78:8d:7b:ed:fa:34:4b:c6:10:8e:4a:ea:
         06:9d:80:1d:b5:60:39:6a:7c:f0:a7:c1:54:65:8e:60:9a:bb:
         19:50:4f:25:57:33:45:d0:d5:81:65:02:85:73:07:b1:48:65:
         2c:0e:8e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org