Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/06431EDE7346822530FD0E10DF59381A708AE9CC.cer
File:                     06431EDE7346822530FD0E10DF59381A708AE9CC.cer (raw, json)
Hash identifier:          5EicXhpah1OBRHrdFsf4T+NDL9gkVfImDXobZZCEhZk=
Subject key identifier:   06:43:1E:DE:73:46:82:25:30:FD:0E:10:DF:59:38:1A:70:8A:E9:CC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16B85988E5D6316246A32D5496337CA768BB2A93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/0/06431EDE7346822530FD0E10DF59381A708AE9CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Oct 2023 18:51:39 +0000
Certificate not after:    Thu 03 Oct 2024 18:56:39 +0000
Subordinate resources:    AS: 266130
                          IP: 45.6.108.0/22
                          IP: 45.174.156.0/22
                          IP: 2804:3b1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b8:59:88:e5:d6:31:62:46:a3:2d:54:96:33:7c:a7:68:bb:2a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  5 18:51:39 2023 GMT
            Not After : Oct  3 18:56:39 2024 GMT
        Subject: CN=06431EDE7346822530FD0E10DF59381A708AE9CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:a0:d7:83:9c:c6:ed:41:fa:fb:8d:e4:b6:
                    c4:63:bd:f6:95:6a:8f:ab:3b:8b:96:62:69:d7:66:
                    29:5d:d3:b6:7e:0d:49:e2:51:9b:5e:61:b8:30:aa:
                    1c:b0:1b:49:09:f6:77:02:8a:bd:1e:9a:65:fb:db:
                    b6:0a:f3:5d:3e:42:49:d3:82:50:46:b0:ec:7b:55:
                    a1:9d:83:64:31:42:d0:bf:19:89:ac:98:de:c4:cf:
                    c8:68:5e:18:7c:56:d1:ca:bc:ab:5c:04:8e:02:a8:
                    8f:fc:04:5e:90:a0:8e:83:9a:f6:64:4b:6c:f3:d6:
                    e7:77:b5:3a:43:f0:00:a4:11:9d:0f:46:7a:5d:29:
                    f6:93:5b:aa:bf:1e:0a:68:fb:ba:63:35:77:1f:75:
                    09:d2:15:16:e4:b1:b1:19:47:89:e0:d5:cf:26:46:
                    af:81:2b:a2:08:76:16:d5:d1:a8:9f:99:d0:29:35:
                    e5:2b:95:26:92:14:ca:78:e0:92:01:46:d2:d7:f4:
                    f7:b0:1a:8e:92:29:3c:85:41:e8:09:62:54:2d:19:
                    6a:9d:1f:04:6b:63:45:a0:03:d6:68:9a:02:bb:4a:
                    d1:10:6a:d4:36:d0:61:f1:32:5b:4d:9e:d6:87:91:
                    5b:4e:1f:bb:0c:66:4d:3f:91:41:8e:cf:10:20:34:
                    f4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:43:1E:DE:73:46:82:25:30:FD:0E:10:DF:59:38:1A:70:8A:E9:CC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/0/06431EDE7346822530FD0E10DF59381A708AE9CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.108.0/22
                  45.174.156.0/22
                IPv6:
                  2804:3b1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266130

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:a8:4a:2e:9d:5b:16:f4:2f:30:56:e2:71:39:b5:ff:fb:
         b6:d8:36:76:48:04:b9:89:11:11:91:0c:59:83:f0:01:6c:4a:
         48:70:0e:b2:0c:29:60:7f:2c:89:40:00:6d:b1:9d:f8:bd:82:
         48:cd:15:66:fa:d8:e9:f3:ad:95:dc:15:29:41:75:67:18:b8:
         19:04:9b:d0:82:14:24:63:98:dc:7b:83:26:63:ce:24:2e:fe:
         13:81:bc:48:08:37:15:f4:bb:0c:67:6f:46:38:77:f9:97:9a:
         1e:a5:60:8e:a6:56:00:c8:0b:ba:ff:d7:5b:87:ae:21:42:4b:
         a4:9d:05:6b:28:22:97:c2:d1:e9:bb:2a:bc:a9:d6:15:36:b4:
         e2:bb:19:49:60:ef:01:2f:42:e1:a2:a6:4b:6f:f7:df:87:f4:
         35:18:e9:44:df:7a:0b:6e:a6:a2:dd:22:84:f5:9b:e4:ec:f6:
         a3:fc:92:37:da:94:25:52:eb:40:18:ff:21:94:41:64:fc:cc:
         49:3c:25:a4:27:08:69:eb:4a:ac:e1:d3:75:f7:2e:b2:13:75:
         25:92:29:63:69:2a:78:5c:7a:56:5d:81:5e:a4:3d:ed:29:3c:
         18:dd:9b:1e:bf:3f:af:9f:44:5a:34:59:95:10:9f:3c:27:38:
         2e:17:18:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org