Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C63806621ABBC4CDC2DA29D5A8E315B014535CDA.cer
File:                     C63806621ABBC4CDC2DA29D5A8E315B014535CDA.cer (raw, json)
Hash identifier:          rATYD6oPLY4pcn3lWFvRAcQ3KDrXCXkQcfd3hJlSjNw=
Subject key identifier:   C6:38:06:62:1A:BB:C4:CD:C2:DA:29:D5:A8:E3:15:B0:14:53:5C:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       44738630E3D685CA83EBD47F27F115C0F56A29B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/C63806621ABBC4CDC2DA29D5A8E315B014535CDA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 20:00:51 +0000
Certificate not after:    Thu 18 Apr 2024 20:05:51 +0000
Subordinate resources:    AS: 265904
                          IP: 131.196.44.0/22
                          IP: 2804:3fa4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:73:86:30:e3:d6:85:ca:83:eb:d4:7f:27:f1:15:c0:f5:6a:29:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 20 20:00:51 2023 GMT
            Not After : Apr 18 20:05:51 2024 GMT
        Subject: CN=C63806621ABBC4CDC2DA29D5A8E315B014535CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:37:d2:bc:e5:fd:2d:3b:e9:b6:e3:72:94:
                    e5:86:0a:45:01:45:7b:0c:1a:45:3e:a7:a3:2d:d8:
                    17:dd:12:e5:45:27:6e:60:de:ff:19:7b:f0:06:ee:
                    98:c2:0e:de:51:b6:9b:6c:87:c4:80:7d:a3:99:cc:
                    25:24:d2:64:00:6a:e1:90:70:c0:cd:b8:7d:7e:b6:
                    c8:32:35:7a:4b:60:1b:d4:1b:dd:9b:18:29:7d:cd:
                    4b:d6:fe:bf:23:c1:e2:b6:92:2c:d5:25:ab:3c:27:
                    ec:33:9b:de:df:9a:fe:53:31:20:52:be:82:f2:66:
                    18:c1:5b:35:4e:b2:8f:17:f4:8f:53:e3:d2:05:7e:
                    dc:61:91:fa:73:1c:df:a7:19:a4:ba:9e:fb:c4:a5:
                    37:51:41:3c:2d:8f:95:57:ee:b7:8b:aa:36:0a:48:
                    d2:82:bb:ce:03:72:f4:0c:98:a1:2e:0a:6f:66:53:
                    93:e1:8f:ac:85:6b:a1:f9:3d:e3:1b:2f:a8:86:c5:
                    eb:e0:e5:f4:8b:e5:2e:1d:cf:03:4e:28:9b:20:f2:
                    25:d0:f0:ac:cc:8b:81:29:20:57:da:7a:fd:23:51:
                    31:7f:6a:63:61:66:05:c7:ee:7a:eb:b7:9a:9b:44:
                    25:a6:8a:56:fa:b2:af:42:9a:a9:f3:20:57:bb:6b:
                    89:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:38:06:62:1A:BB:C4:CD:C2:DA:29:D5:A8:E3:15:B0:14:53:5C:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/C63806621ABBC4CDC2DA29D5A8E315B014535CDA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.44.0/22
                IPv6:
                  2804:3fa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265904

    Signature Algorithm: sha256WithRSAEncryption
         10:50:1f:ef:52:7d:79:7e:34:61:3d:2c:0d:d8:f6:a6:73:54:
         82:7d:8c:4e:0d:5e:cb:8f:d7:bc:e6:41:d8:47:9e:6e:08:a7:
         15:a1:8f:13:7f:ff:e9:5c:98:61:c2:d1:00:99:4f:df:c9:02:
         fe:c3:9b:06:66:b5:c4:5a:ed:df:52:28:54:89:ab:07:c8:b7:
         43:0c:dd:a9:03:9d:9a:3d:a3:c2:f1:18:96:28:00:9c:e9:a3:
         da:86:37:e9:94:fe:16:9d:42:ac:79:77:0c:09:17:02:37:e7:
         46:2c:fe:1f:74:31:49:82:e4:0c:64:bb:6f:7d:b1:31:b7:de:
         39:a0:69:e7:e9:c8:91:8e:37:9e:84:cc:63:c3:9d:5a:2e:42:
         7b:ef:35:6a:3c:dd:3a:8f:2b:48:05:d2:e6:34:1d:69:a6:ce:
         a3:c8:87:a3:c0:46:7e:44:71:3a:aa:48:64:4b:b2:11:02:d5:
         e1:3a:68:8e:8a:25:d1:62:21:60:5a:70:56:a8:e9:ed:14:89:
         3d:d0:5c:8f:43:72:9a:96:fb:ad:bc:73:53:5b:5c:be:09:a7:
         71:54:46:ce:46:74:9d:ee:65:03:25:7a:ec:27:26:6c:6d:a7:
         6a:19:77:36:62:39:aa:91:c0:68:05:fc:4a:2d:02:22:6c:ca:
         7c:e8:6b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org