Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8.cer
File:                     060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8.cer (raw, json)
Hash identifier:          aO2921pCnzdqzsgk6nPPVI7Q/EdEZo1c9SdNsOMx/h8=
Subject key identifier:   06:0E:B1:A2:EE:92:1D:C2:DE:3C:47:87:10:F4:CC:A6:2B:AC:8A:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51B47A6CADA81155A7CCB6FAE85ADF1E9A0A7492
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cyj48AAjwFKKKHvgc6vbnz5SeBwpAXVjGPVP1jAuZvmr/0/060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cyj48AAjwFKKKHvgc6vbnz5SeBwpAXVjGPVP1jAuZvmr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Aug 2023 21:39:08 +0000
Certificate not after:    Tue 20 Aug 2024 21:44:08 +0000
Subordinate resources:    AS: 266542
                          IP: 160.238.164.0/22
                          IP: 2804:3d9c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b4:7a:6c:ad:a8:11:55:a7:cc:b6:fa:e8:5a:df:1e:9a:0a:74:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 22 21:39:08 2023 GMT
            Not After : Aug 20 21:44:08 2024 GMT
        Subject: CN=060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:18:6c:0a:14:f8:bd:16:50:c0:f4:20:ef:f4:
                    80:65:c2:20:d3:cc:da:3a:4e:b5:75:aa:a5:01:d8:
                    2c:66:9c:44:fa:61:dc:4c:9d:6a:00:a2:81:a1:fd:
                    fc:5e:13:8c:2f:1f:b4:4b:5e:41:b0:ae:d0:b3:c6:
                    f3:02:88:fc:21:fb:35:b4:b7:9b:ab:1d:5d:3a:b3:
                    3a:6b:41:76:d7:72:fd:ca:80:45:e8:02:19:4f:95:
                    5d:d1:ea:73:c5:43:99:67:96:6a:fb:e0:29:c5:a0:
                    db:a2:65:0e:1f:dd:ab:a9:63:c3:b1:f3:90:cc:bc:
                    ec:4d:c6:e1:a0:1d:33:f7:01:b1:70:3a:34:06:1e:
                    56:75:b8:f2:13:8a:04:44:b6:68:ec:5f:d4:ba:6a:
                    c0:29:93:f9:5f:0d:1e:79:1e:fe:a2:f9:c0:2a:4f:
                    6d:47:9f:a8:f2:3d:f8:2b:8d:4a:b3:8e:a0:9e:1d:
                    82:6f:30:db:6f:cb:7a:28:ab:5e:c7:da:77:55:b7:
                    05:ba:5c:e1:ed:19:29:56:0a:27:b3:26:d0:a7:7d:
                    56:0c:37:aa:31:dc:ba:1e:4e:bb:ab:97:0a:f5:4a:
                    6b:ac:14:11:45:31:35:46:c3:bc:55:d5:78:3f:49:
                    30:89:ef:22:60:54:c8:7a:84:c2:e2:ad:9f:83:75:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:0E:B1:A2:EE:92:1D:C2:DE:3C:47:87:10:F4:CC:A6:2B:AC:8A:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cyj48AAjwFKKKHvgc6vbnz5SeBwpAXVjGPVP1jAuZvmr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cyj48AAjwFKKKHvgc6vbnz5SeBwpAXVjGPVP1jAuZvmr/0/060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.164.0/22
                IPv6:
                  2804:3d9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266542

    Signature Algorithm: sha256WithRSAEncryption
         a2:3f:7b:2a:f1:b2:a2:cf:46:16:09:10:89:80:be:4c:63:fb:
         db:3a:ef:b5:4c:ec:99:78:83:bf:7e:00:27:82:bf:33:3a:b9:
         0b:c2:28:72:6a:3e:51:da:e2:07:36:a2:c5:83:54:41:c1:87:
         51:56:6b:d4:6f:18:31:ef:5e:6f:93:4b:a2:8d:7a:a8:ac:74:
         21:a1:b6:e4:39:d4:ad:4b:dd:ed:5e:a6:8d:73:ff:d4:d2:c2:
         68:c4:99:95:e5:5d:8f:d4:65:d9:d9:1b:72:5f:23:28:cc:a2:
         26:ac:76:48:6b:8d:b8:6d:dc:47:de:4f:eb:34:9d:78:43:02:
         8a:32:60:e7:fa:43:42:cf:48:2f:f1:6d:55:08:5e:20:58:ec:
         a1:09:bd:08:f9:c0:54:6a:9b:a3:da:9d:6b:8d:48:6d:2c:09:
         57:04:6f:ec:28:5d:b0:b3:9e:c8:68:86:4d:47:04:41:d0:57:
         f3:72:b7:ee:87:52:d9:fb:6b:6d:4e:1d:7c:13:b0:49:0d:bd:
         ce:6b:de:75:a0:53:94:de:11:e4:d1:37:29:97:02:cc:80:65:
         a2:77:e3:b6:0e:af:68:20:09:ee:f7:b8:08:a1:2e:ce:1f:1a:
         84:08:44:b5:8a:df:cc:a2:d3:67:e2:70:8f:4c:86:b5:56:5b:
         1f:ad:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org