Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/21FB6A57034F1683A5E36EACA971C4BAA3E2EDC6.cer
File:                     21FB6A57034F1683A5E36EACA971C4BAA3E2EDC6.cer (raw, json)
Hash identifier:          EMX9739h9fDYO2e9QZcIw3qYoXwyPkshL3H++RCoc0g=
Subject key identifier:   21:FB:6A:57:03:4F:16:83:A5:E3:6E:AC:A9:71:C4:BA:A3:E2:ED:C6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0B6F3903C631389472B65FE5873D53025B9C0D5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/1/21FB6A57034F1683A5E36EACA971C4BAA3E2EDC6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Apr 2024 21:47:56 +0000
Certificate not after:    Thu 10 Apr 2025 21:52:56 +0000
Subordinate resources:    AS: 269519
                          IP: 45.184.220.0/22
                          IP: 2804:65dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6f:39:03:c6:31:38:94:72:b6:5f:e5:87:3d:53:02:5b:9c:0d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 21:47:56 2024 GMT
            Not After : Apr 10 21:52:56 2025 GMT
        Subject: CN=21FB6A57034F1683A5E36EACA971C4BAA3E2EDC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:0a:43:3f:9d:2b:23:13:07:6a:f7:40:74:
                    4f:47:f9:17:6d:f3:26:e3:1f:dc:90:21:da:96:e5:
                    ed:b4:98:79:26:8c:eb:c9:5e:be:82:32:95:3c:c6:
                    89:97:3d:21:88:2f:4a:38:bb:6b:73:5d:db:0a:c8:
                    2b:7a:0c:b8:cd:4e:4c:db:10:5b:48:2e:90:a2:e1:
                    81:7a:01:e3:3f:48:8f:69:40:3c:bb:fd:de:47:93:
                    36:76:00:78:a2:01:0b:cc:a5:c8:e5:cc:3c:26:f1:
                    df:70:07:c9:f9:a7:a7:56:cf:f3:35:8a:c7:2c:a7:
                    79:64:1e:0f:a6:36:9e:9f:d6:85:fe:e9:2c:aa:23:
                    5e:75:58:1b:c5:72:9b:44:92:fe:9c:4d:37:81:ee:
                    59:d2:50:8a:89:7a:89:8d:13:eb:e6:4e:15:07:fc:
                    04:e4:f6:d5:4a:f1:20:85:1e:78:13:f5:ba:c6:97:
                    bf:73:df:66:59:41:32:6e:27:23:17:7b:21:76:c3:
                    9e:55:b1:49:5e:1a:f2:5e:97:eb:53:f2:67:2c:1c:
                    45:97:ba:82:5e:de:54:46:52:4b:a6:8e:45:21:80:
                    58:e2:d5:6e:a9:aa:9b:09:72:38:d8:d3:fe:c6:72:
                    75:49:00:c3:df:22:f0:30:a3:ce:5e:51:7c:b6:0d:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:FB:6A:57:03:4F:16:83:A5:E3:6E:AC:A9:71:C4:BA:A3:E2:ED:C6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/1/21FB6A57034F1683A5E36EACA971C4BAA3E2EDC6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.220.0/22
                IPv6:
                  2804:65dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269519

    Signature Algorithm: sha256WithRSAEncryption
         8b:9c:4d:28:34:ad:95:6d:6d:65:b6:0c:5f:36:fa:fb:51:1f:
         31:70:e1:3d:d8:cd:bb:52:c5:65:c6:9e:ea:5a:23:1e:cf:48:
         f9:a0:08:2e:f2:3a:95:16:3d:ec:fb:18:d1:e9:d2:90:f0:37:
         75:39:f0:da:8a:b1:3e:66:75:4b:8d:22:b3:38:2e:31:da:d3:
         d5:2c:b5:a6:51:7f:08:ea:1b:aa:05:f6:df:4b:ed:c6:66:52:
         be:ff:dd:66:d0:53:fa:c5:89:04:33:ed:6a:db:2b:7c:55:0f:
         28:c6:ac:19:6a:31:8a:f5:9b:fe:fb:5d:95:6a:44:3d:de:0f:
         2b:e9:15:6c:bb:fb:a9:08:c0:af:b3:9b:61:ea:5a:e9:2d:1a:
         10:01:af:85:e7:25:ef:58:b6:2a:fa:6a:3a:b4:ea:75:75:65:
         86:76:7c:2a:18:b7:5a:63:7b:a0:be:a2:9d:05:eb:0b:d3:b4:
         76:26:be:89:f9:bf:3f:13:36:9c:f9:97:92:27:59:a0:1d:c9:
         38:c9:41:cd:79:cf:04:19:a0:54:48:22:95:58:e1:d8:9d:55:
         83:ea:a0:e9:5e:e6:d6:d4:c6:ba:95:4b:52:90:13:3c:d1:c3:
         11:97:0f:4d:fa:cd:61:14:8c:e2:9c:a5:00:06:96:5a:60:67:
         c0:49:f0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org