Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B63626D7A328D927E57E8F1108832C8C8912FE69.cer
File:                     B63626D7A328D927E57E8F1108832C8C8912FE69.cer (raw, json)
Hash identifier:          330iSr7kAwgN0gZp+GkXJE0mjR/wQSXWSMhLeHxdPqc=
Subject key identifier:   B6:36:26:D7:A3:28:D9:27:E5:7E:8F:11:08:83:2C:8C:89:12:FE:69
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59E1BB4760CCC39214C122328613D4BA9E7BBFAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/B63626D7A328D927E57E8F1108832C8C8912FE69.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 20:47:05 +0000
Certificate not after:    Tue 11 Mar 2025 20:52:05 +0000
Subordinate resources:    AS: 263324
                          IP: 170.247.20.0/22
                          IP: 177.86.156.0/22
                          IP: 2804:1448::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e1:bb:47:60:cc:c3:92:14:c1:22:32:86:13:d4:ba:9e:7b:bf:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 20:47:05 2024 GMT
            Not After : Mar 11 20:52:05 2025 GMT
        Subject: CN=B63626D7A328D927E57E8F1108832C8C8912FE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:34:b8:a3:bc:5b:40:c6:1a:c2:a9:fb:17:
                    62:d8:04:79:09:09:8c:d1:04:5d:b6:54:e3:fa:33:
                    1d:f5:80:95:92:06:fe:33:06:6c:bd:e2:53:98:82:
                    20:3b:78:92:1f:26:ac:c7:99:c2:12:35:4f:8f:b5:
                    69:2a:c0:b6:e7:d1:17:35:bc:9f:12:37:d3:ab:82:
                    cf:d9:4a:91:86:14:60:b4:c3:7e:ac:57:50:ac:11:
                    9f:15:80:06:e5:9d:4f:58:b0:4b:60:78:b6:5c:8b:
                    2b:83:04:0b:a3:76:e0:a1:f2:f9:b7:ea:c0:0b:44:
                    ae:0b:f2:92:e9:6a:ea:06:d1:f7:46:ed:2a:02:03:
                    f2:ed:62:76:cf:55:50:99:54:99:15:71:0b:73:ad:
                    78:23:18:d1:06:eb:47:4d:e7:ae:c1:e5:a5:a2:71:
                    4f:9e:76:39:a1:e2:3d:14:62:5b:62:43:c6:b4:af:
                    31:81:a8:c7:c3:28:72:d4:59:c1:4a:6d:e5:20:5f:
                    f2:c2:3c:8c:1f:54:8f:24:88:50:b8:24:24:8d:71:
                    cf:2d:bf:05:77:d0:52:ee:ce:f8:1b:36:79:b4:39:
                    2b:22:6a:c9:70:93:a2:6a:e2:e0:f9:8b:95:d9:24:
                    ee:da:8d:84:1c:95:36:09:a0:d7:98:01:14:e7:9f:
                    2d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:36:26:D7:A3:28:D9:27:E5:7E:8F:11:08:83:2C:8C:89:12:FE:69
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/B63626D7A328D927E57E8F1108832C8C8912FE69.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.20.0/22
                  177.86.156.0/22
                IPv6:
                  2804:1448::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263324

    Signature Algorithm: sha256WithRSAEncryption
         3b:66:69:c3:0e:7a:86:56:2d:7c:6c:af:f4:73:4a:41:29:86:
         42:b2:ee:39:96:b4:e7:56:34:75:b7:61:5f:bd:0d:94:88:f3:
         80:a0:e8:93:89:5a:94:11:4c:e6:96:8a:0e:c3:b0:56:b1:b3:
         9c:d7:53:80:b7:53:ea:90:f3:a8:1b:de:4d:c6:3f:8b:06:97:
         f9:56:ad:4b:e7:5f:79:d8:99:a1:8f:23:95:cb:22:d7:cc:56:
         99:53:68:4c:e7:c9:81:cc:f6:1b:de:cb:26:ce:89:5f:62:f1:
         40:a1:97:d2:b3:30:1a:3b:c3:94:e6:e7:8f:ba:fd:dc:b2:92:
         bf:23:c7:59:a1:53:05:fc:e2:16:21:f4:7a:43:81:fe:f8:8b:
         1d:45:b9:5d:7f:c7:67:aa:e5:1b:78:5a:bc:47:b2:7e:7e:0c:
         03:4d:1c:a9:a6:ac:15:d7:2d:6e:fb:8c:10:0e:29:25:f6:09:
         7d:47:fe:f9:77:ab:34:19:7a:71:51:56:86:f4:38:60:ef:bf:
         e7:ac:86:bb:62:95:f2:b2:93:ed:1f:1c:62:80:84:10:1d:7b:
         f1:23:0b:b1:8e:e7:73:a5:2b:42:6a:c0:06:97:36:3f:80:98:
         98:1f:17:e8:a4:54:22:b0:dd:d1:16:4b:d3:90:e5:79:46:a6:
         d6:ce:e5:b1
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUWeG7R2DMw5IUwSIyhhPUup57v6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTIyMDQ3MDVaFw0yNTAzMTEyMDUyMDVaMDMxMTAvBgNV
BAMTKEI2MzYyNkQ3QTMyOEQ5MjdFNTdFOEYxMTA4ODMyQzhDODkxMkZFNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWcTS4o7xbQMYawqn7F2LYBHkJ
CYzRBF22VOP6Mx31gJWSBv4zBmy94lOYgiA7eJIfJqzHmcISNU+PtWkqwLbn0Rc1
vJ8SN9Orgs/ZSpGGFGC0w36sV1CsEZ8VgAblnU9YsEtgeLZciyuDBAujduCh8vm3
6sALRK4L8pLpauoG0fdG7SoCA/LtYnbPVVCZVJkVcQtzrXgjGNEG60dN567B5aWi
cU+edjmh4j0UYltiQ8a0rzGBqMfDKHLUWcFKbeUgX/LCPIwfVI8kiFC4JCSNcc8t
vwV30FLuzvgbNnm0OSsiaslwk6Jq4uD5i5XZJO7ajYQclTYJoNeYARTnny03AgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS2NibXoyjZJ+V+
jxEIgyyMiRL+aTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HdWpqVFJybzdxZFZGNnlWN3RpaEFRemFzZDdGWDd4d2sy
NFlzZXVHU0pyWS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR3VqalRScm83cWRWRjZ5Vjd0aWhBUXphc2Q3Rlg3eHdr
MjRZc2V1R1NKclkvMC9CNjM2MjZEN0EzMjhEOTI3RTU3RThGMTEwODgzMkM4Qzg5
MTJGRTY5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKq9xQDBAKxVpwwDQQC
AAIwBwMFACgEFEgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAScMA0GCSqGSIb3
DQEBCwUAA4IBAQA7ZmnDDnqGVi18bK/0c0pBKYZCsu45lrTnVjR1t2FfvQ2UiPOA
oOiTiVqUEUzmlooOw7BWsbOc11OAt1PqkPOoG95Nxj+LBpf5Vq1L51952JmhjyOV
yyLXzFaZU2hM58mBzPYb3ssmzolfYvFAoZfSszAaO8OU5uePuv3cspK/I8dZoVMF
/OIWIfR6Q4H++IsdRbldf8dnquUbeFq8R7J+fgwDTRyppqwV1y1u+4wQDikl9gl9
R/75d6s0GXpxUVaG9Dhg77/nrIa7YpXyspPtHxxigIQQHXvxIwuxjudzpStCasAG
lzY/gJiYHxfopFQisN3RFkvTkOV5RqbWzuWx
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org