Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A62FFCE926857B56B0E4EEBEE63D7B8F1B547559.cer
File:                     A62FFCE926857B56B0E4EEBEE63D7B8F1B547559.cer (raw, json)
Hash identifier:          /BvCsH5pmh896P08eHhSj7ts/QqohyhCnPemMfPv7gI=
Subject key identifier:   A6:2F:FC:E9:26:85:7B:56:B0:E4:EE:BE:E6:3D:7B:8F:1B:54:75:59
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2ABAD04F0B7710423EE5164096BCFBACB632EA0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/A62FFCE926857B56B0E4EEBEE63D7B8F1B547559.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Sep 2023 14:12:27 +0000
Certificate not after:    Mon 09 Sep 2024 14:17:27 +0000
Subordinate resources:    AS: 262468
                          IP: 138.122.28.0/22
                          IP: 168.121.100.0/22
                          IP: 168.196.52.0/22
                          IP: 177.53.144.0/22
                          IP: 179.108.48.0/20
                          IP: 191.5.192.0/20
                          IP: 2804:e94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ba:d0:4f:0b:77:10:42:3e:e5:16:40:96:bc:fb:ac:b6:32:ea:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 11 14:12:27 2023 GMT
            Not After : Sep  9 14:17:27 2024 GMT
        Subject: CN=A62FFCE926857B56B0E4EEBEE63D7B8F1B547559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:0d:ff:ea:ba:61:4a:3d:8d:eb:e7:34:f3:
                    14:c1:da:f1:6c:66:ae:6b:da:db:32:ec:3e:9f:54:
                    49:df:f0:35:f4:02:b7:77:7c:07:cf:4b:dd:ae:3d:
                    4a:fb:bd:8c:ce:fa:2c:c0:00:79:1d:98:78:e6:5a:
                    12:cc:2b:65:25:81:1f:a8:28:5f:f6:97:41:bf:32:
                    3a:b5:4e:36:21:ad:74:ac:69:1f:77:d6:49:3a:18:
                    de:e3:6f:eb:b3:33:aa:3f:fc:21:67:26:ce:6f:8e:
                    16:1b:89:a6:9c:4a:67:68:e4:87:d3:7b:82:bf:28:
                    3e:74:9c:ee:e6:e8:75:be:2d:25:66:d6:79:f5:dd:
                    2e:95:8e:ff:e0:8d:89:ae:4c:1e:30:81:9d:3f:f8:
                    1e:43:7d:89:c0:44:ce:15:0d:35:4a:be:84:6b:b4:
                    05:16:49:a6:3b:e3:41:a4:8f:2f:d7:67:44:91:57:
                    d4:46:b8:6d:b4:ac:5b:ae:12:73:95:32:94:13:41:
                    1f:49:0c:01:96:09:3f:1d:a5:95:bc:11:fa:02:a6:
                    0f:b7:c4:af:c1:a2:a8:e0:4e:5b:f0:c1:34:13:af:
                    51:23:39:2b:bc:17:2f:ff:80:28:5f:d7:0a:df:d6:
                    0b:f1:9f:1a:d6:22:49:fb:e3:5d:ce:47:81:f0:ef:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:2F:FC:E9:26:85:7B:56:B0:E4:EE:BE:E6:3D:7B:8F:1B:54:75:59
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/A62FFCE926857B56B0E4EEBEE63D7B8F1B547559.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.28.0/22
                  168.121.100.0/22
                  168.196.52.0/22
                  177.53.144.0/22
                  179.108.48.0/20
                  191.5.192.0/20
                IPv6:
                  2804:e94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262468

    Signature Algorithm: sha256WithRSAEncryption
         21:7a:73:73:57:cf:d4:f1:aa:3e:84:8c:33:11:1a:f3:79:ab:
         fc:25:e9:8d:6d:d5:25:5c:76:15:9c:cb:63:cb:15:19:19:82:
         9b:ab:86:b1:77:aa:64:0c:7d:49:7b:77:e9:4d:15:a0:c5:e9:
         14:3e:8d:9d:9d:3f:c4:aa:26:d6:43:2f:35:79:e3:d7:ed:19:
         56:2b:7f:c8:fe:b5:0b:09:6e:e4:50:cc:38:b6:7d:59:8f:00:
         f9:d2:d3:48:ec:24:be:af:78:02:07:e4:ea:8f:b5:b0:eb:b4:
         26:8a:4b:8f:d8:a0:f2:75:40:a7:a7:6d:73:22:f3:75:b7:d7:
         a6:5f:16:25:1a:e6:61:ad:ee:00:32:bf:9e:ef:82:fd:e3:f3:
         67:65:94:76:ad:f2:36:96:91:39:17:35:05:95:7d:db:3c:e9:
         dc:48:ff:af:2e:92:60:b0:fa:ae:3f:c3:63:6d:71:ec:7e:87:
         1c:9f:7b:6b:94:80:72:0e:f0:13:b0:10:09:b0:7a:a1:ab:9d:
         30:24:25:0d:40:07:80:16:7c:b0:09:cd:a4:21:64:7f:81:32:
         75:94:00:a5:ca:86:7c:96:c5:a9:21:3f:45:0b:ad:18:ec:69:
         b9:d3:67:91:33:20:80:10:21:a4:8c:c5:c7:00:8c:f0:5e:ba:
         92:7d:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:41 2024 by rpki-client on console-ams.rpki-client.org