Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0B6CD308E623278047DCE10ECFEBF0893EEDAA0C.cer
File:                     0B6CD308E623278047DCE10ECFEBF0893EEDAA0C.cer (raw, json)
Hash identifier:          PzzSdj7uDtEAy5CxPIBFjFDMKwRwsIFAlW9YUmWOKGU=
Subject key identifier:   0B:6C:D3:08:E6:23:27:80:47:DC:E1:0E:CF:EB:F0:89:3E:ED:AA:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F70FD95D43D0C7D241FC7C483FA1C94C71D50AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/0B6CD308E623278047DCE10ECFEBF0893EEDAA0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jul 2021 21:02:02 +0000
Certificate not after:    Thu 28 Jul 2022 21:07:02 +0000
Subordinate resources:    AS: 53019
                          IP: 177.70.160.0/20
                          IP: 2804:5dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:70:fd:95:d4:3d:0c:7d:24:1f:c7:c4:83:fa:1c:94:c7:1d:50:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 29 21:02:02 2021 GMT
            Not After : Jul 28 21:07:02 2022 GMT
        Subject: CN=0B6CD308E623278047DCE10ECFEBF0893EEDAA0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cd:b7:14:19:c6:a0:8e:04:61:bc:a4:c0:bf:
                    3f:8b:b5:ae:96:66:bd:b6:8b:32:6c:49:33:f7:8a:
                    d1:06:8d:78:aa:37:c1:ae:c0:87:3b:4d:93:56:44:
                    23:50:69:26:d8:d8:5f:2d:48:13:6b:72:b2:63:e9:
                    8e:6a:f6:13:a3:e2:a9:6e:06:59:4d:48:03:0d:e2:
                    82:9d:69:5f:ef:e7:93:4f:54:27:93:61:ae:10:e9:
                    e6:8f:41:41:80:2d:30:00:2f:03:ed:bc:65:d1:52:
                    29:bf:88:7d:56:ad:7d:db:9f:6f:76:5c:eb:0e:58:
                    8e:58:51:4e:1e:14:d6:34:fe:4b:e3:9c:1f:bc:5f:
                    3a:9c:63:4e:44:7d:03:99:83:40:83:3a:1b:39:e3:
                    7a:35:ef:08:44:83:67:19:14:9e:88:44:68:1f:06:
                    7c:cc:6d:d1:4d:4e:11:53:8d:d1:d7:ab:35:dc:05:
                    ce:82:d7:62:18:97:1f:c8:0e:cf:49:2e:db:b0:0c:
                    22:39:c2:9d:f9:7b:78:af:13:e2:da:93:fd:77:51:
                    d3:18:cb:2e:91:8c:d8:8c:d5:ed:a8:ba:f2:81:9f:
                    9c:ce:e5:d1:2a:76:2d:d0:28:8c:78:56:19:a3:01:
                    01:68:64:9e:cb:11:dc:f9:9f:24:c3:f4:78:94:60:
                    12:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:6C:D3:08:E6:23:27:80:47:DC:E1:0E:CF:EB:F0:89:3E:ED:AA:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/0B6CD308E623278047DCE10ECFEBF0893EEDAA0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.160.0/20
                IPv6:
                  2804:5dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53019

    Signature Algorithm: sha256WithRSAEncryption
         4f:a8:b6:60:33:fc:d3:8a:14:36:d9:7b:1c:84:c0:b2:5b:50:
         44:52:93:02:fe:5c:ba:d6:36:a4:63:f3:d1:75:ac:3b:68:33:
         75:ae:c2:d0:89:d9:a0:b5:97:2d:37:da:04:b5:1f:fd:f1:0f:
         79:4f:8a:7e:b3:e3:03:57:76:b8:90:da:58:1e:22:06:60:9f:
         1c:2d:a0:60:ef:ed:e6:32:44:51:33:0b:0a:96:16:92:f3:8d:
         a9:6d:43:1f:2d:03:d9:ef:ce:52:46:45:58:d7:f7:37:bd:d0:
         48:2f:77:c4:e9:62:bb:be:53:29:8a:ce:8b:dc:41:c6:c7:4e:
         cf:f5:fd:fb:50:ad:9c:f0:d8:40:c6:36:6d:c9:b2:b8:de:d4:
         3b:c9:b0:18:a6:47:f1:65:da:40:ae:2b:94:96:51:ce:e0:e9:
         a2:bb:7d:9a:32:78:3c:d7:20:03:89:1f:81:4e:70:d4:37:4c:
         d9:8d:69:20:fa:0f:26:5d:f4:e5:79:7b:e4:3b:af:7b:45:3e:
         81:a5:ab:8e:23:e3:a7:e2:19:a7:74:81:87:0e:e8:81:b4:aa:
         0a:d5:bd:1c:5c:a4:5e:9b:9f:3d:50:b6:42:d6:2e:1a:c4:c0:
         20:55:d4:14:71:65:2b:7c:fe:11:32:db:05:0a:87:c1:0a:ce:
         25:37:b4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org