Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0F6ADBF52DCBA628C4D1786FC304E3BB07E2ABC9.cer
File:                     0F6ADBF52DCBA628C4D1786FC304E3BB07E2ABC9.cer (raw, json)
Hash identifier:          gZgj7NgCTSPzPA9kpWPbatw1IIcvgv7pcA7r5QjZ8GQ=
Subject key identifier:   0F:6A:DB:F5:2D:CB:A6:28:C4:D1:78:6F:C3:04:E3:BB:07:E2:AB:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21D8B72CB05121A9371AE20C4F7DB0CD099FBB2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/0F6ADBF52DCBA628C4D1786FC304E3BB07E2ABC9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Oct 2023 12:42:38 +0000
Certificate not after:    Tue 22 Oct 2024 12:47:38 +0000
Subordinate resources:    AS: 266970
                          IP: 45.226.156.0/22
                          IP: 2804:4620::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d8:b7:2c:b0:51:21:a9:37:1a:e2:0c:4f:7d:b0:cd:09:9f:bb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 24 12:42:38 2023 GMT
            Not After : Oct 22 12:47:38 2024 GMT
        Subject: CN=0F6ADBF52DCBA628C4D1786FC304E3BB07E2ABC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:68:48:71:0e:af:95:5f:12:47:7f:74:3f:ef:
                    96:aa:77:72:3b:94:43:09:8a:e9:4f:6a:e1:41:2c:
                    a0:b3:2b:5f:3e:18:36:b6:18:97:b8:d2:77:3d:c4:
                    72:65:ae:84:c6:6c:3f:96:14:55:5e:64:38:46:cd:
                    a1:e2:1e:8c:a9:8d:2f:1c:1e:0e:c1:52:b3:d9:c7:
                    db:11:10:f3:26:8b:cb:9d:98:3f:c0:fa:19:7b:6a:
                    7b:1f:cb:66:b7:44:3e:c7:a3:dc:d5:b4:c2:97:60:
                    ee:f4:20:2d:50:94:7e:bd:ea:86:c7:02:67:1a:d6:
                    51:d1:33:95:dd:e3:e8:02:e8:61:2b:22:84:38:6a:
                    93:a1:76:04:41:0a:b1:86:21:17:8c:f7:cb:15:45:
                    3f:86:e2:7e:1a:46:66:66:14:a6:93:a0:0f:69:ac:
                    5c:bf:9c:f6:e7:c4:17:ad:cc:d6:b7:e4:18:a3:f3:
                    f6:eb:ea:2b:b3:0c:a6:1b:24:70:57:80:44:a5:ab:
                    c0:c5:1b:2b:5e:15:c9:c5:2a:48:e8:92:14:cf:51:
                    31:86:d4:c0:0e:b9:7c:44:56:36:3f:4b:68:8d:43:
                    09:3d:96:4b:d3:bf:84:45:e3:1e:c2:73:50:f2:48:
                    4c:58:3f:05:bc:57:92:c8:c4:f8:cf:c1:50:8f:08:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:6A:DB:F5:2D:CB:A6:28:C4:D1:78:6F:C3:04:E3:BB:07:E2:AB:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/0F6ADBF52DCBA628C4D1786FC304E3BB07E2ABC9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.156.0/22
                IPv6:
                  2804:4620::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266970

    Signature Algorithm: sha256WithRSAEncryption
         90:e0:3a:3e:a0:1f:56:2c:13:db:2f:38:8b:f6:12:e4:0b:ba:
         6a:fb:45:09:35:41:d9:8e:b6:dd:54:2b:e5:af:d6:6c:97:bc:
         23:5d:2c:8f:8d:8c:f7:d6:df:10:de:b0:65:c0:c3:1a:b1:f0:
         55:66:7a:06:18:f1:dc:e3:6a:6f:37:7e:46:d4:51:ec:c3:43:
         cf:e4:c7:ef:2f:a2:91:8d:f8:49:5b:4e:ff:fd:47:59:31:3d:
         49:82:65:dc:54:07:f0:0f:74:e4:e4:50:6a:3b:90:f7:6e:a0:
         0b:a4:39:aa:11:7f:d9:e0:57:a3:3b:0d:6d:2e:28:0a:0b:b7:
         1a:a0:52:f8:21:4a:ae:2c:88:9e:c5:1d:27:ae:18:71:4a:87:
         72:d2:77:92:74:2b:fa:5b:2b:95:85:a3:65:bc:18:01:30:26:
         a1:52:9a:c4:27:24:e0:30:63:7e:04:3b:f4:00:60:b5:dd:a6:
         c3:44:41:80:54:88:c2:5e:6f:46:81:23:42:2f:7a:7b:a9:bc:
         9c:8c:d4:c6:20:e0:2d:6d:2f:fc:dd:b4:64:64:76:bb:0f:e0:
         08:be:18:1a:f0:ef:74:f2:d0:0e:59:32:60:de:12:c6:5f:4a:
         72:4e:5b:5b:68:69:93:c4:2f:3f:9e:19:87:87:3c:9c:e2:dc:
         61:ec:04:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org