Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E.cer
File:                     EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E.cer (raw, json)
Hash identifier:          OsrmE4cyz62TM2mmbOWH/rNOyyIkkZy3KiiMP1tOHuw=
Subject key identifier:   EC:63:F9:E2:F3:CC:53:B3:BB:0B:F4:E2:B9:F1:A0:C1:B0:14:E5:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       579FA6530AC460BC32EA0F8E2D25CC7C19C3D7C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/0/EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jan 2024 03:15:18 +0000
Certificate not after:    Tue 14 Jan 2025 03:20:18 +0000
Subordinate resources:    AS: 263492
                          IP: 191.243.36.0/22
                          IP: 2804:12b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9f:a6:53:0a:c4:60:bc:32:ea:0f:8e:2d:25:cc:7c:19:c3:d7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 16 03:15:18 2024 GMT
            Not After : Jan 14 03:20:18 2025 GMT
        Subject: CN=EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:09:52:8e:1f:f0:3f:55:35:b6:cb:45:21:62:
                    9e:dc:18:fa:e6:e2:a9:ea:71:a6:14:43:40:1c:c1:
                    b8:43:23:a9:2a:5f:9c:fc:51:7e:3d:78:34:ae:aa:
                    c2:cb:73:c1:c4:a1:0a:07:7d:9a:7a:85:1a:dc:b8:
                    25:43:0a:15:ee:a3:2f:d4:65:5f:38:ef:26:24:d1:
                    b3:57:61:78:be:7b:6b:e2:4b:af:71:42:92:12:3e:
                    fc:fe:64:ed:55:52:05:a6:d3:b2:27:88:af:2f:30:
                    5b:0e:1f:cf:28:83:b8:df:50:d7:9d:1a:01:95:c3:
                    af:6d:ab:2a:80:25:c3:15:38:e7:dd:b5:12:72:83:
                    39:24:7d:90:29:4a:6c:0c:49:2d:78:fd:e8:19:2d:
                    4c:7d:9e:ca:4a:ec:a9:6c:0a:84:6b:e6:3c:29:2a:
                    32:83:09:69:15:cd:f2:be:c9:e2:91:7d:5f:57:72:
                    f5:8f:b1:fd:4e:80:0e:8f:b3:4b:6b:f3:e0:0b:37:
                    db:8f:ef:77:cf:ad:ff:a8:fa:a0:31:61:5e:91:13:
                    8c:49:3d:fc:56:6e:d0:0f:25:d2:41:fb:62:10:70:
                    b6:10:16:d1:91:99:13:eb:3e:eb:d0:e3:7d:4e:1f:
                    ce:ab:96:fa:e4:83:a6:26:72:07:f3:3c:94:7c:4d:
                    87:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:63:F9:E2:F3:CC:53:B3:BB:0B:F4:E2:B9:F1:A0:C1:B0:14:E5:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/0/EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.36.0/22
                IPv6:
                  2804:12b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263492

    Signature Algorithm: sha256WithRSAEncryption
         6a:b3:5f:8d:51:47:f6:91:3c:c1:7a:2d:ef:04:da:bd:0d:46:
         8a:6a:c1:e7:40:8d:38:23:0e:87:04:80:55:8d:0c:28:6a:38:
         5a:14:7d:a9:4b:43:71:9d:f7:49:f4:c0:51:58:8f:95:c7:b0:
         9c:54:4b:be:ed:82:ee:87:75:5d:e5:e4:71:71:94:25:23:58:
         02:3c:56:55:27:4c:06:f9:8b:7d:87:c1:cf:16:f8:6e:c1:d5:
         cd:c2:f2:e6:d1:68:b7:4c:03:56:a1:fa:80:2c:93:79:d5:c7:
         e6:6c:f5:de:fc:6a:8c:fd:10:38:e2:61:b4:8e:a2:a3:56:c7:
         f3:43:df:5b:e7:a9:57:da:28:e7:bc:b8:06:c5:35:87:db:e5:
         9e:b9:9e:dd:7c:88:78:b4:60:ce:20:3a:b8:05:fb:20:07:9d:
         d8:79:fa:82:a4:94:4d:d4:db:06:ef:f5:73:1a:7e:2a:ca:05:
         78:53:e2:fb:00:c9:1f:6b:aa:db:cf:47:5e:cc:4c:68:95:39:
         73:15:c5:c6:2a:48:91:18:f3:40:21:5c:88:c0:5b:d6:fe:5c:
         e5:d7:6a:7b:2f:01:2d:03:d9:3c:51:8f:56:6b:77:9f:0e:da:
         ef:73:a2:c2:1d:a2:a1:c4:47:d5:3b:7f:40:18:83:48:5f:6e:
         0c:98:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org