Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer
File:                     E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer (raw, json)
Hash identifier:          rxu6B/9hvsVReVYlMgqkn9Wp2g8nH1cJkNlJnxUHFNU=
Subject key identifier:   E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6708DD801468E6E38D18DE25A5255FC4E764C7DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Dec 2023 14:09:18 +0000
Certificate not after:    Mon 09 Dec 2024 14:14:18 +0000
Subordinate resources:    AS: 28202
                          IP: 177.44.0.0/17
                          IP: 177.130.128.0/18
                          IP: 179.189.160.0/19
                          IP: 186.216.64.0/18
                          IP: 187.44.0.0/18
                          IP: 187.120.64.0/18
                          IP: 189.91.0.0/19
                          IP: 191.53.0.0/16
                          IP: 191.240.0.0/17
                          IP: 2804:87c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:08:dd:80:14:68:e6:e3:8d:18:de:25:a5:25:5f:c4:e7:64:c7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 11 14:09:18 2023 GMT
            Not After : Dec  9 14:14:18 2024 GMT
        Subject: CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:3c:40:24:d7:ac:d1:ba:d6:13:2b:c3:6b:
                    f6:f6:bf:19:f9:e8:02:fb:d3:84:9a:49:ef:ea:8d:
                    17:d6:f5:8e:62:aa:08:72:18:37:67:41:30:e0:07:
                    ee:46:8d:1c:55:ba:06:1a:17:db:7a:a4:52:53:3e:
                    5e:a7:25:f8:d8:57:f0:2b:a5:18:b6:1c:6d:5d:5b:
                    48:03:14:bd:4a:2d:04:c1:97:5e:1b:fa:af:d3:ef:
                    8d:ec:d2:86:6f:8b:ca:84:c8:29:13:df:a4:27:ad:
                    cf:49:ff:4f:87:10:85:ad:71:37:a7:5d:4c:1a:93:
                    95:2b:ab:97:f3:08:e8:8d:79:38:34:32:46:77:51:
                    d9:23:d7:92:1f:78:60:af:3b:9c:4a:2a:49:e5:a9:
                    1a:8d:0a:97:6d:c4:33:46:b0:22:59:82:fb:d9:1e:
                    a2:d5:29:2a:a3:43:55:cc:13:fd:c7:ff:48:ae:82:
                    72:6c:43:e1:93:61:92:c2:f2:28:34:cf:21:73:62:
                    c2:5d:58:2f:81:9e:14:a8:cd:72:de:ee:01:b1:33:
                    fb:56:4a:a0:88:0a:b0:66:da:04:dd:29:ab:1c:b2:
                    4d:54:4d:f2:f8:b4:df:06:53:a3:8d:4b:02:c9:98:
                    9f:49:ac:55:e5:f0:ef:bd:29:53:b6:5d:b9:ce:30:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.0.0/17
                  177.130.128.0/18
                  179.189.160.0/19
                  186.216.64.0/18
                  187.44.0.0/18
                  187.120.64.0/18
                  189.91.0.0/19
                  191.53.0.0/16
                  191.240.0.0/17
                IPv6:
                  2804:87c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28202

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:67:f0:4b:6d:cf:9b:d1:a8:1e:b4:f8:05:d2:d5:2a:43:
         9d:e4:b6:16:28:07:60:87:77:e0:b9:2f:d2:9c:be:1e:96:59:
         ed:c2:6e:8b:fb:30:7f:5f:80:bb:b1:1d:ea:e9:af:35:62:7a:
         fa:4e:ef:ac:32:25:4d:1d:f6:a0:f3:f4:2d:00:e0:2c:da:2b:
         ba:0f:68:98:48:f3:26:e1:95:f8:be:d6:81:d4:f0:c8:4b:7f:
         a8:57:84:ef:6b:19:ae:01:ba:9d:ab:88:b1:66:52:7c:7f:cc:
         e5:38:ee:4e:82:ca:7d:e5:66:22:5f:55:78:27:a5:5c:60:57:
         91:9e:88:2b:bb:99:97:df:c5:09:db:ef:21:88:c4:b1:37:b4:
         4d:4b:cf:21:45:c6:e0:b3:8d:bc:50:48:8c:8e:ab:b9:6f:ee:
         78:65:63:ed:b8:2b:3a:af:54:f6:dd:65:f8:fc:c8:f9:08:f3:
         a5:24:84:72:12:0d:aa:5f:b6:f2:5f:5e:b3:df:cb:a8:d5:7e:
         65:8d:c0:f1:4c:19:82:f2:14:50:ae:f6:9a:c8:96:4d:67:78:
         44:3b:c3:89:11:b4:19:1f:9c:32:0a:06:28:30:22:c8:c5:90:
         d6:2a:a6:40:c7:97:d6:d8:a1:26:5f:bb:dc:5a:68:7c:9d:46:
         d3:cb:18:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org