Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6F2B3CD0C5BBAE216D3C05BCF421D9E602C3C598.cer
File:                     6F2B3CD0C5BBAE216D3C05BCF421D9E602C3C598.cer (raw, json)
Hash identifier:          1Noc0+wmkLBtqTGu4dyVxz35v9Jcf3fefW0DxARCYI4=
Subject key identifier:   6F:2B:3C:D0:C5:BB:AE:21:6D:3C:05:BC:F4:21:D9:E6:02:C3:C5:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       44D23369C1DB5FBAF4B2B19098550B5A3B7BEBD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/6F2B3CD0C5BBAE216D3C05BCF421D9E602C3C598.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 20 Aug 2023 15:17:54 +0000
Certificate not after:    Sun 18 Aug 2024 15:22:54 +0000
Subordinate resources:    AS: 266920
                          IP: 45.225.16.0/22
                          IP: 2804:4558::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d2:33:69:c1:db:5f:ba:f4:b2:b1:90:98:55:0b:5a:3b:7b:eb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 20 15:17:54 2023 GMT
            Not After : Aug 18 15:22:54 2024 GMT
        Subject: CN=6F2B3CD0C5BBAE216D3C05BCF421D9E602C3C598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cd:da:80:a7:83:4e:f2:2c:ac:1d:7c:c8:df:
                    f3:c4:78:01:a3:59:a6:96:ce:89:9b:99:c2:55:51:
                    50:b3:0d:6e:52:9d:ff:ad:66:46:59:d2:03:a2:6b:
                    35:5e:57:a9:25:ac:c6:e4:e5:b9:f3:e0:a9:1d:35:
                    a7:8a:e3:ae:72:16:9b:ee:97:c1:46:48:e7:2f:f4:
                    e0:07:63:68:4b:ce:d8:fe:89:f7:72:8f:96:80:22:
                    90:2f:be:71:b4:fc:d4:57:91:93:24:11:f9:01:61:
                    9c:43:6b:02:45:20:5f:03:34:a0:44:8a:66:51:32:
                    03:a1:56:50:28:be:9f:30:1b:ff:4c:55:fc:12:46:
                    60:b2:41:c4:90:ed:b4:32:cf:ca:15:ae:61:99:49:
                    29:2a:cd:6a:e8:f6:9a:90:4d:1b:b6:a3:3f:71:8d:
                    83:c6:3a:f3:13:d6:29:f3:ed:7e:57:71:8f:84:67:
                    51:02:34:3b:9f:38:1d:36:ed:49:18:a8:e2:14:e4:
                    2b:83:1d:e7:2f:75:fb:80:b3:32:59:be:d5:b2:84:
                    f7:56:71:27:f0:7c:39:f0:77:8e:e1:bc:51:b6:1f:
                    cd:14:1d:eb:a9:9d:98:26:6a:cd:4c:66:03:46:2e:
                    29:55:32:2f:c5:6b:1b:9d:cd:66:1a:78:9b:d3:fd:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:2B:3C:D0:C5:BB:AE:21:6D:3C:05:BC:F4:21:D9:E6:02:C3:C5:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/6F2B3CD0C5BBAE216D3C05BCF421D9E602C3C598.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.16.0/22
                IPv6:
                  2804:4558::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266920

    Signature Algorithm: sha256WithRSAEncryption
         b1:99:01:c3:88:f1:e4:b9:ae:f1:a1:fe:f2:5e:0a:ec:4d:31:
         e1:7e:50:12:4e:08:8c:f7:2a:df:2e:9b:77:ea:03:15:52:69:
         cb:8f:98:68:7c:13:6d:d3:fa:71:3c:cd:e3:3a:2f:ec:8b:3a:
         6e:bd:63:8c:12:12:48:40:d4:28:ce:b3:50:5f:57:00:5b:74:
         24:f4:55:0b:de:37:93:dd:91:b7:73:43:dd:14:d7:17:ce:97:
         7f:a2:99:7a:f2:6d:62:1f:08:ce:2b:2e:49:a3:10:fc:70:c0:
         a7:8d:be:b8:41:49:c0:90:79:f5:66:fa:95:29:bb:e0:69:29:
         5c:b8:48:56:45:e3:14:12:cd:48:4f:69:86:45:cf:ab:3a:2f:
         a0:7b:3c:92:7c:1c:2d:60:5a:e9:89:99:1a:f7:6e:83:ca:fc:
         00:87:f6:5b:62:58:94:3a:aa:b8:96:fa:6c:aa:47:45:3a:e6:
         b6:ad:c7:3f:ab:47:65:aa:5a:f4:58:05:a5:f2:ef:f3:25:d1:
         59:59:d7:d7:31:4e:b8:f7:23:60:75:6b:4f:09:ae:eb:42:f2:
         bb:e6:03:62:76:3a:26:df:7c:c5:d2:cb:67:4f:ba:85:e2:18:
         c8:24:36:49:84:db:95:e5:70:6d:f3:ca:09:f1:14:bd:a4:85:
         42:b9:88:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 15:10:32 2025 by rpki-client