Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C64C749CDDED82B52D268A701AC64F5932801E3C.cer
File:                     C64C749CDDED82B52D268A701AC64F5932801E3C.cer (raw, json)
Hash identifier:          qSwcEGxg0NhWqISnYeiqxICtYaI+4ii3aTelIuiDVqQ=
Subject key identifier:   C6:4C:74:9C:DD:ED:82:B5:2D:26:8A:70:1A:C6:4F:59:32:80:1E:3C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C2E4E7890E4900D4F93F0F4606D0575354D2A4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/C64C749CDDED82B52D268A701AC64F5932801E3C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 18:55:28 +0000
Certificate not after:    Mon 02 Sep 2024 19:00:28 +0000
Subordinate resources:    AS: 52873
                          IP: 138.219.244.0/22
                          IP: 177.128.208.0/21
                          IP: 200.229.220.0/22
                          IP: 2804:890::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2e:4e:78:90:e4:90:0d:4f:93:f0:f4:60:6d:05:75:35:4d:2a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  4 18:55:28 2023 GMT
            Not After : Sep  2 19:00:28 2024 GMT
        Subject: CN=C64C749CDDED82B52D268A701AC64F5932801E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:ba:f7:c7:b5:d1:15:73:b6:90:74:c6:f1:
                    66:37:8c:63:ae:ca:33:b6:53:41:fc:f7:96:70:a2:
                    28:8a:19:f7:ed:86:b4:da:14:35:f7:ab:60:77:74:
                    13:bb:f9:c6:26:78:74:c6:f1:13:48:91:7e:7c:91:
                    c2:6e:da:01:cf:49:19:d2:d1:32:87:10:d2:d6:19:
                    5b:20:f6:b0:e9:0f:ac:e2:cf:13:df:b7:c8:b8:96:
                    ca:e4:93:05:09:42:6c:ed:8f:4f:65:3c:77:1f:6c:
                    17:21:52:c4:9d:e4:8c:f6:23:e5:80:d3:76:31:ea:
                    ce:2d:8b:c6:32:41:15:45:1f:ec:25:e8:35:78:d3:
                    1d:09:0d:45:69:fd:ef:50:2e:98:84:44:1b:94:4c:
                    e0:9a:11:be:dc:3b:4a:02:d8:21:8a:70:79:6d:d3:
                    f3:36:99:a3:da:68:82:08:61:2c:8b:cb:24:b6:8e:
                    d0:a0:50:6f:86:f2:31:c8:54:27:b8:e4:ec:06:eb:
                    12:4a:fb:74:e8:29:96:c8:8a:f1:36:5f:d1:b0:9d:
                    ff:ef:2f:a9:26:5c:43:ca:22:0a:b3:d7:66:7a:ab:
                    a6:d9:30:e7:53:51:b4:8e:3f:ac:fc:b3:bd:54:9e:
                    94:3f:15:50:4d:40:c5:5a:f8:95:b2:28:34:fb:c7:
                    09:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:4C:74:9C:DD:ED:82:B5:2D:26:8A:70:1A:C6:4F:59:32:80:1E:3C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/C64C749CDDED82B52D268A701AC64F5932801E3C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.244.0/22
                  177.128.208.0/21
                  200.229.220.0/22
                IPv6:
                  2804:890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52873

    Signature Algorithm: sha256WithRSAEncryption
         8b:03:db:77:3c:68:df:23:19:9b:07:0c:69:77:bb:3d:3c:f5:
         14:a2:89:72:a2:b2:28:e6:37:7b:c2:91:d9:43:6c:e9:9b:96:
         06:d3:7e:c3:d7:6e:67:7b:b9:1a:6a:bb:c2:a2:0b:cb:d8:9c:
         da:ac:8b:f7:41:2c:c9:ca:45:7f:6c:3e:cd:74:d8:73:af:6e:
         4c:80:3c:a1:68:55:e3:ac:e5:d6:2d:97:d1:99:ea:ed:ca:4a:
         14:43:16:bc:e0:b4:ee:9e:96:f4:37:af:6a:34:82:f6:92:a2:
         41:40:ea:2f:3d:07:6b:c3:ef:64:2b:b6:dd:1a:9a:4b:50:46:
         fb:4a:ec:28:d9:d7:a5:f1:42:a8:fe:73:e4:e6:da:bb:87:cf:
         59:2e:2d:4b:36:c4:57:aa:1f:a5:fd:a1:03:43:3a:b2:c7:46:
         c6:8a:bf:9e:ba:10:4d:2a:93:1b:56:b0:c2:5f:9c:de:b7:12:
         e3:2c:fa:61:46:88:e4:6e:37:00:be:4d:a1:29:bb:0f:89:b6:
         59:d0:de:1e:24:78:b1:15:18:70:bf:2c:8a:35:05:c6:60:d7:
         4a:56:25:e7:a8:f4:ce:02:02:21:f1:e8:4d:ae:d2:fa:cc:4f:
         dc:07:43:63:42:7b:83:b8:de:ef:74:ff:00:a6:2c:36:c8:97:
         e1:59:67:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org