Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB.cer
File:                     C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB.cer (raw, json)
Hash identifier:          oQnonLUmQoCOEJ4Qhkj3QNkF9Bc5Svk5aDNE3aEbhT8=
Subject key identifier:   C6:2A:7A:DA:0E:B2:CE:E0:51:EC:52:1D:7A:D0:98:5B:89:3E:BF:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       78367C99CD1547B62E9504FA07B18125E76DD96E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Jan 2024 14:09:57 +0000
Certificate not after:    Fri 17 Jan 2025 14:14:57 +0000
Subordinate resources:    AS: 28276
                          IP: 186.249.96.0/19
                          IP: 187.102.96.0 -- 187.102.110.255
                          IP: 189.14.64.0/20
                          IP: 2804:56a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:36:7c:99:cd:15:47:b6:2e:95:04:fa:07:b1:81:25:e7:6d:d9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 19 14:09:57 2024 GMT
            Not After : Jan 17 14:14:57 2025 GMT
        Subject: CN=C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:ef:95:26:37:30:47:36:9a:1a:b2:b3:fd:
                    06:44:ff:d7:03:d3:88:7c:a8:28:9d:ca:63:70:14:
                    9b:74:c5:b6:c2:ad:8e:e4:cc:f3:f1:cf:af:d1:d7:
                    2c:8d:8e:78:b1:08:de:19:ac:86:10:41:0a:40:9e:
                    69:37:e9:fc:cc:8a:94:05:bb:a8:47:f7:ba:24:e8:
                    fe:18:73:dd:a9:e8:6c:21:3e:44:1d:10:5a:0e:25:
                    02:83:a9:06:2c:96:fe:e3:b6:9b:75:80:e9:d5:f7:
                    82:09:21:69:b0:fe:a1:63:ed:0c:c1:cc:7c:66:12:
                    05:8d:0c:52:fe:1a:c8:69:53:14:6c:a2:6b:29:3a:
                    23:97:ce:e2:16:64:ba:26:00:f9:47:3f:5c:30:7c:
                    0d:d4:0b:5b:1f:d9:26:ee:bd:82:30:f7:e8:02:24:
                    ba:14:9c:ba:b9:49:92:e0:f3:9a:bc:89:c1:5b:2e:
                    12:89:41:48:93:7b:84:ce:98:72:1b:fa:5d:a1:a0:
                    4c:ff:e0:88:7b:a3:5d:e8:12:83:19:07:e9:0b:01:
                    ba:5f:fc:52:23:5d:48:eb:a2:9b:7d:66:3a:1a:46:
                    59:04:20:18:8f:a2:a5:b3:a8:58:a5:e4:f4:24:5a:
                    e6:8c:be:fb:1b:60:b0:29:af:0d:be:9f:32:e6:33:
                    37:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:2A:7A:DA:0E:B2:CE:E0:51:EC:52:1D:7A:D0:98:5B:89:3E:BF:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.96.0/19
                  187.102.96.0-187.102.110.255
                  189.14.64.0/20
                IPv6:
                  2804:56a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28276

    Signature Algorithm: sha256WithRSAEncryption
         29:85:fe:b5:15:e6:c2:6d:47:a0:45:f6:f6:44:91:71:70:30:
         9c:51:b7:9f:84:82:13:65:e8:b4:a3:d8:43:e8:14:f5:69:f0:
         37:6d:85:97:7c:04:57:09:a4:bf:ff:8e:b8:9f:8e:d7:a9:04:
         41:13:bd:92:dd:fb:a8:0e:69:86:5e:4b:cf:25:05:1c:39:8a:
         f6:1d:fd:be:40:19:48:3d:4b:03:0c:dd:e7:ca:42:0d:9d:35:
         c9:01:a7:c4:17:b6:72:cf:c2:3f:34:62:80:d7:8e:06:3c:aa:
         d3:4a:b4:07:fc:ef:43:d6:18:11:2f:bf:fe:f8:d0:ce:1d:0e:
         d2:e6:6a:0b:5c:98:ea:6b:97:a1:a3:c2:38:0e:9e:96:18:bc:
         03:be:f6:50:ae:34:05:a3:25:03:f5:0e:94:6e:94:d2:26:24:
         48:e4:a9:e1:40:ce:ec:6b:c5:52:e2:08:b2:61:39:9b:56:bf:
         0f:3e:23:cb:3b:22:f4:db:17:d3:39:39:55:2b:6f:ef:95:96:
         79:40:96:59:e3:08:4d:71:7d:27:64:87:0f:88:68:e5:c9:43:
         58:91:84:f5:49:e7:f8:8a:46:e6:e6:25:07:53:10:8d:7a:6f:
         70:19:f5:0e:e7:20:2d:83:7e:3e:3a:3a:3d:a5:9e:da:06:76:
         8b:ab:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org