Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D63C20563BA26C504096AB105F96D77EB9D755E4.cer
File:                     D63C20563BA26C504096AB105F96D77EB9D755E4.cer (raw, json)
Hash identifier:          /iCo9U4zCo0qGGDTbRlO13a2aikWI0Hea7yu8+jusuw=
Subject key identifier:   D6:3C:20:56:3B:A2:6C:50:40:96:AB:10:5F:96:D7:7E:B9:D7:55:E4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A14BDEB41B00B6F286665CBFDAF9B45C9628C1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/D63C20563BA26C504096AB105F96D77EB9D755E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Jan 2024 18:44:38 +0000
Certificate not after:    Fri 03 Jan 2025 18:49:38 +0000
Subordinate resources:    AS: 267492
                          IP: 201.182.12.0/22
                          IP: 2804:4250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:14:bd:eb:41:b0:0b:6f:28:66:65:cb:fd:af:9b:45:c9:62:8c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  5 18:44:38 2024 GMT
            Not After : Jan  3 18:49:38 2025 GMT
        Subject: CN=D63C20563BA26C504096AB105F96D77EB9D755E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:ee:c8:5f:e2:0b:65:5a:c5:31:cf:26:2c:
                    d3:b9:d1:01:c9:6a:96:3c:55:2e:3e:9d:ad:a3:b7:
                    fc:d4:d8:28:bc:c0:ea:0c:55:95:d2:a5:c0:a7:92:
                    43:5e:96:11:b6:dd:b1:2c:b9:68:f9:6a:ba:82:2d:
                    2b:bc:8f:b0:af:b7:1b:99:54:78:93:02:30:84:21:
                    ab:03:19:0f:7b:5f:15:7c:20:80:b0:36:a5:20:d1:
                    43:59:e6:9e:8f:3e:91:3d:57:c2:ff:4c:ef:69:c5:
                    ce:56:48:fc:00:be:fc:ac:06:7f:f6:48:ed:96:b5:
                    50:b0:e9:e8:69:b0:1d:cc:a6:70:4d:c4:f6:f9:a3:
                    48:71:7e:65:be:00:44:d2:ff:60:1e:b9:1d:3a:6b:
                    a1:ef:d9:5e:a3:29:46:e1:fb:1c:71:5b:2f:7e:fc:
                    ca:f7:49:c9:50:ff:b5:13:00:d8:de:45:43:4c:f6:
                    d4:7e:1a:e2:5b:2d:5d:8e:bd:3d:d3:ad:bb:92:c5:
                    6b:1f:d7:ec:d4:d7:bc:e3:2f:6c:fd:c1:da:03:47:
                    b4:00:15:f9:5b:91:03:0e:08:42:6b:4a:8b:25:a1:
                    2b:b9:d4:b7:1f:96:fa:b8:5a:fb:15:f0:d3:01:42:
                    9b:09:94:89:00:79:76:ab:54:57:ca:e3:a0:8f:62:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:3C:20:56:3B:A2:6C:50:40:96:AB:10:5F:96:D7:7E:B9:D7:55:E4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/D63C20563BA26C504096AB105F96D77EB9D755E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.12.0/22
                IPv6:
                  2804:4250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267492

    Signature Algorithm: sha256WithRSAEncryption
         17:f0:4d:c4:d0:6a:d4:8d:6b:8d:e1:d9:e0:8f:cd:44:09:bf:
         ae:91:c6:1e:0f:4b:47:6b:44:94:dd:ca:1f:dd:0e:5a:93:93:
         6e:ee:7f:eb:eb:92:fd:e4:fb:e0:a0:95:42:5d:b9:2e:83:48:
         10:06:4b:12:b7:32:3e:47:2b:60:74:3c:a1:fa:80:29:b3:c1:
         44:54:f3:95:9d:b4:70:8b:59:0e:0d:f9:ab:45:8e:31:1b:66:
         9f:dd:b3:ba:32:6f:2f:7a:91:0c:f2:42:37:3c:81:b9:bc:96:
         72:21:30:ee:41:aa:ac:47:c5:c0:50:00:23:10:5f:f0:b6:07:
         d8:09:66:92:d7:54:c9:3a:71:ad:87:97:e4:0f:e5:40:75:ed:
         e9:b5:b7:30:ed:d1:f9:26:a7:62:ae:22:08:c4:20:a1:95:14:
         2e:da:6d:54:09:96:be:0a:f4:f6:ff:d4:8d:5b:dc:af:9f:57:
         52:ea:27:b6:04:0f:99:cd:7b:a3:f0:13:f0:12:5d:80:b9:1f:
         d8:fa:be:cf:13:2c:2f:ce:97:46:ba:ae:22:5b:38:bc:8f:71:
         f1:8d:5f:98:5f:7a:a6:0f:c2:60:a4:7c:bd:83:9b:c1:58:b9:
         46:6a:94:9d:bb:f6:52:b9:aa:dc:8c:46:04:6d:c3:03:0d:58:
         2b:b5:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org