Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer
File:                     C67929131596EB65AF046524615104BDF0EDC74D.cer (raw, json)
Hash identifier:          RWsbUqI3YqYtaqnoCJ3JAFDqAI7Ty6kGyT2V4rJVYzY=
Subject key identifier:   C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C732C5569F3E63260E639614E59139E2BB4216D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/C67929131596EB65AF046524615104BDF0EDC74D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Sep 2023 20:23:31 +0000
Certificate not after:    Mon 09 Sep 2024 20:28:31 +0000
Subordinate resources:    AS: 263604
                          IP: 143.202.112.0/22
                          IP: 177.71.88.0/22
                          IP: 2804:fcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:73:2c:55:69:f3:e6:32:60:e6:39:61:4e:59:13:9e:2b:b4:21:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 11 20:23:31 2023 GMT
            Not After : Sep  9 20:28:31 2024 GMT
        Subject: CN=C67929131596EB65AF046524615104BDF0EDC74D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:ad:32:e9:59:e3:93:fc:5b:fd:25:d3:36:
                    e9:51:ed:37:a5:a7:13:71:41:93:77:29:b7:87:d7:
                    d3:2a:d0:fa:cd:8b:fe:f7:5e:c5:d9:4a:eb:65:56:
                    c2:69:d0:46:a7:24:02:de:e3:d3:3d:9f:0d:43:2e:
                    20:d6:b2:c3:4e:20:0c:a7:6a:2b:81:8f:9e:ba:61:
                    d9:3a:7a:06:3c:e6:68:3c:f0:06:77:de:d6:a1:75:
                    3b:8c:78:cf:30:17:0a:66:ef:07:96:08:47:dc:1d:
                    d5:e9:2a:66:ca:55:05:0e:b7:60:17:62:08:70:93:
                    34:5b:46:13:65:1b:6e:af:21:5c:72:c9:39:a3:ba:
                    b1:c2:e9:9f:b0:98:e3:8f:11:75:82:8c:96:2f:0a:
                    15:4c:5e:fb:3e:fa:ff:8f:0a:89:fa:e0:4c:8a:82:
                    e6:30:31:5e:59:aa:6f:8d:a0:1b:7c:61:ed:8b:73:
                    9f:88:7a:b6:f1:03:82:04:ee:99:66:00:0f:26:af:
                    2c:66:81:26:c6:63:f1:c4:97:e7:ff:e9:88:b8:ce:
                    76:0b:14:8b:d9:c6:e5:dd:b2:a8:c3:1f:74:a1:ad:
                    b9:56:cd:e4:18:80:66:3b:fe:78:3d:eb:5c:8c:1f:
                    56:6c:e7:14:08:9c:bb:25:77:7e:18:f1:15:70:40:
                    89:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/C67929131596EB65AF046524615104BDF0EDC74D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.112.0/22
                  177.71.88.0/22
                IPv6:
                  2804:fcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263604

    Signature Algorithm: sha256WithRSAEncryption
         9c:94:6f:b7:16:43:7c:53:61:56:9e:ea:a8:88:b0:97:c3:80:
         de:8a:72:97:80:6e:81:61:44:c6:bb:ff:ed:f2:73:db:0a:1d:
         1b:c5:62:69:83:f2:e3:57:d5:b4:a0:f6:be:c1:ca:27:f2:27:
         23:5c:91:49:88:d1:94:4c:b8:91:bb:d8:e4:ca:02:e4:37:d4:
         d7:02:46:cb:12:2d:08:ad:2c:2c:3b:05:80:89:1f:5c:cf:c6:
         37:f1:72:cc:fa:12:4c:d9:dc:dc:d1:f7:42:1d:24:ca:d4:3b:
         15:ff:0c:b9:c4:74:99:69:75:83:3e:17:1e:0b:db:b5:3c:ae:
         26:6b:ac:0c:cb:47:de:3b:c1:00:6a:98:f1:b7:a5:46:d1:c9:
         00:26:46:93:55:64:69:5e:08:83:55:b5:5a:0e:b5:d6:9a:e5:
         a1:f3:44:14:bf:d7:a7:94:ed:03:f2:76:6d:54:ec:02:7b:97:
         6d:1a:51:e2:d9:33:05:72:6b:30:cf:20:10:1e:3c:da:cb:c9:
         39:50:b9:41:59:79:25:6d:cd:a5:7c:ec:c2:73:a4:a5:ad:74:
         9b:01:67:50:b6:31:24:2a:26:1b:96:16:98:97:38:62:f2:da:
         68:35:2a:32:51:8c:e2:76:b9:44:cb:73:be:3d:6b:fe:e9:8e:
         7b:02:aa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org