Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/600A870A2E7681E4BADA881DED55BA5CEDD02570.cer
File:                     600A870A2E7681E4BADA881DED55BA5CEDD02570.cer (raw, json)
Hash identifier:          ufQdUMDV6GsWWmpyk1L264KpXz5d3oI6nlB4Oy+SiAw=
Subject key identifier:   60:0A:87:0A:2E:76:81:E4:BA:DA:88:1D:ED:55:BA:5C:ED:D0:25:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3332098836E767FF5A7E8D61DE7901D472A9BE01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/600A870A2E7681E4BADA881DED55BA5CEDD02570.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Nov 2021 20:35:49 +0000
Certificate not after:    Thu 17 Nov 2022 20:40:49 +0000
Subordinate resources:    AS: 11432
                          IP: 200.155.128.0/18
                          IP: 200.170.192.0/18
                          IP: 200.194.248.0/21
                          IP: 200.201.128.0/19
                          IP: 2804:138::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:32:09:88:36:e7:67:ff:5a:7e:8d:61:de:79:01:d4:72:a9:be:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 20:35:49 2021 GMT
            Not After : Nov 17 20:40:49 2022 GMT
        Subject: CN=600A870A2E7681E4BADA881DED55BA5CEDD02570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:a6:c7:11:2e:4b:03:bd:f2:46:c8:ea:31:
                    af:b1:f3:07:d5:de:41:fb:ae:e8:09:4a:3e:bf:04:
                    0a:8b:c8:7f:83:55:fe:7c:6f:f4:20:fd:8c:62:9e:
                    63:df:82:ba:81:4d:15:0e:50:90:de:1e:05:ab:65:
                    21:fe:0d:fd:d3:7c:58:7f:57:60:04:e2:51:02:49:
                    98:fe:49:10:e7:ed:4e:ec:14:98:92:d6:09:ab:01:
                    96:89:44:96:2f:0d:e5:91:84:b4:76:42:a5:95:9a:
                    1a:f8:b5:07:65:ef:69:77:0e:f9:22:af:90:21:d6:
                    ac:2b:4b:ec:0b:de:bb:81:ad:0b:01:8d:28:25:86:
                    7e:32:40:b4:07:51:74:42:4f:1c:55:51:a8:9f:98:
                    a6:75:30:86:b8:d0:04:06:27:13:51:2f:61:60:f2:
                    d0:33:25:64:82:a0:14:f1:55:cc:5f:b2:bf:80:70:
                    df:36:2e:16:7c:a5:85:60:2e:52:ee:be:47:a5:68:
                    44:97:73:1e:9e:47:92:76:88:98:6a:fc:74:ae:6f:
                    a7:86:70:cc:88:91:d2:ae:48:10:d9:67:3f:6a:78:
                    bd:a8:f6:88:07:81:39:9b:dc:bd:3c:6a:52:f7:b1:
                    4c:64:9a:a3:f9:5b:37:59:64:3d:3a:08:67:e3:0b:
                    95:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:0A:87:0A:2E:76:81:E4:BA:DA:88:1D:ED:55:BA:5C:ED:D0:25:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/600A870A2E7681E4BADA881DED55BA5CEDD02570.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.128.0/18
                  200.170.192.0/18
                  200.194.248.0/21
                  200.201.128.0/19
                IPv6:
                  2804:138::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11432

    Signature Algorithm: sha256WithRSAEncryption
         2e:bb:1b:38:48:ec:a5:ad:88:44:ef:ef:3b:d5:b5:d6:d5:da:
         70:5f:13:90:06:d0:bb:33:1c:51:af:9e:f8:5c:d3:4a:a4:6b:
         3f:82:79:c3:80:03:94:3d:f3:86:ed:fd:02:16:ae:66:a2:ba:
         dd:85:cf:ed:c3:b0:83:8f:70:96:c6:43:ea:3c:64:5b:ac:23:
         b6:44:6c:4b:41:a5:dd:f1:a9:34:12:73:39:d8:01:76:84:e1:
         d7:34:32:25:f0:07:68:62:5b:b1:b1:51:b8:da:07:c7:c8:80:
         f0:59:ab:3e:f3:80:ab:19:4e:f9:c7:5f:93:42:c1:70:e6:ad:
         fa:47:ac:94:a7:49:c4:d3:c4:ad:29:47:97:61:3d:9b:b0:52:
         e9:68:09:1e:ab:21:7b:dd:f5:f6:d4:a5:3e:74:64:45:3c:87:
         56:34:2c:93:a1:a6:4e:59:eb:28:fc:75:9f:da:d1:77:c0:27:
         1f:3e:62:d3:b9:69:4b:8e:87:fc:67:df:c5:cc:37:72:9b:0a:
         aa:34:04:cd:a9:47:d5:39:26:a5:91:a2:7d:bd:6f:ad:4d:66:
         f4:12:a1:7f:d3:96:e7:df:89:97:7a:eb:ed:ec:f9:e1:7e:49:
         4c:51:0b:68:e4:28:78:64:3b:d3:9b:b8:ef:28:ed:f9:48:75:
         4e:e4:33:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org