Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6024F3B3D5A07EF3933818E373628ED7AD099271.cer
File:                     6024F3B3D5A07EF3933818E373628ED7AD099271.cer (raw, json)
Hash identifier:          nJi8w1h78w02s20Q4QjFWyas5glw4GYATYwpurfBsak=
Subject key identifier:   60:24:F3:B3:D5:A0:7E:F3:93:38:18:E3:73:62:8E:D7:AD:09:92:71
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       273CB23986BB9BD26435F270B9E6C2D70000911B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/6024F3B3D5A07EF3933818E373628ED7AD099271.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Oct 2022 19:05:13 +0000
Certificate not after:    Wed 18 Oct 2023 19:10:13 +0000
Subordinate resources:    AS: 266245
                          IP: 45.6.200.0/22
                          IP: 2804:3cf8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3c:b2:39:86:bb:9b:d2:64:35:f2:70:b9:e6:c2:d7:00:00:91:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 19 19:05:13 2022 GMT
            Not After : Oct 18 19:10:13 2023 GMT
        Subject: CN=6024F3B3D5A07EF3933818E373628ED7AD099271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ce:e7:ec:25:d3:7f:03:c6:2b:13:2a:11:0e:
                    b5:0a:54:ec:18:4a:a5:5b:fb:e8:80:f5:e2:c2:b2:
                    e7:a5:e4:01:68:b8:ed:53:0f:34:c3:a4:9d:03:61:
                    40:84:8d:39:52:bd:e2:dc:c8:33:e1:31:6b:f5:b6:
                    ba:c2:b5:4d:d4:12:0c:c7:0e:a3:61:71:2e:5b:ae:
                    c0:d9:d1:59:8c:a4:5d:0d:fa:88:27:b2:5f:53:14:
                    71:33:45:45:6a:db:96:c5:82:82:f6:7d:a9:a7:36:
                    49:37:78:af:98:db:bc:3e:e2:92:f7:16:65:ca:bc:
                    be:a2:6e:72:2a:18:39:d6:dd:8c:ba:ad:cb:a0:e5:
                    62:4b:2f:ff:2c:2d:63:2b:33:48:73:c3:85:38:2b:
                    9c:61:77:6f:6d:33:83:b4:4b:a8:47:4d:4c:e2:b6:
                    58:3c:c4:e2:09:6f:6a:4b:68:e8:ff:40:ae:9f:12:
                    03:9c:91:d2:24:da:93:97:bf:58:9d:d5:9d:f1:00:
                    4e:d9:ec:a0:e7:6f:0f:53:d2:d7:45:f9:b9:2d:9c:
                    e1:2d:3e:8e:bd:6f:0f:ed:68:9e:79:ba:3e:0b:60:
                    d8:f1:8a:cc:2f:bd:b8:07:ce:9b:0e:87:c6:13:74:
                    2b:a9:6e:47:81:fb:c6:b7:f3:be:88:3f:03:d1:f5:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:24:F3:B3:D5:A0:7E:F3:93:38:18:E3:73:62:8E:D7:AD:09:92:71
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/6024F3B3D5A07EF3933818E373628ED7AD099271.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.200.0/22
                IPv6:
                  2804:3cf8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266245

    Signature Algorithm: sha256WithRSAEncryption
         48:bf:f4:cc:1b:43:ef:8b:0f:91:64:83:18:01:b9:d7:77:29:
         38:55:99:f2:0a:21:a2:b2:59:43:3c:f9:95:c0:39:df:70:ec:
         4c:b5:43:c8:b2:93:35:b1:b2:f5:82:6d:22:ca:d3:e6:89:f9:
         06:77:97:8f:2d:cd:fd:bc:b9:2f:5d:10:dc:30:66:ae:8d:2b:
         b7:c3:c0:ae:69:94:7d:3d:0d:4b:33:0d:9b:6d:5e:bc:99:4e:
         3e:8c:06:15:b6:43:3f:c6:db:77:82:7d:a2:41:ed:d9:ad:5c:
         0e:7d:4c:1e:32:38:9f:7b:3c:77:a0:6c:0a:46:c8:93:e8:61:
         d6:9f:c7:a2:e0:b2:ec:93:42:95:74:61:da:1d:aa:88:d4:5a:
         9e:cd:4f:dc:e0:92:35:c8:26:2f:e0:f3:fa:51:c3:46:ee:40:
         6a:b1:10:d0:b9:a9:fb:c9:ac:a9:0b:12:8b:32:2d:8b:cf:50:
         06:0b:eb:28:ae:ab:09:3f:15:0b:54:64:fd:35:4f:b2:59:ff:
         ae:00:6a:3e:5e:20:fb:1c:b7:d2:85:15:c2:6d:bf:e0:28:98:
         78:c5:66:1c:46:cc:ca:43:3a:db:0b:a3:ba:f3:95:77:6a:07:
         ed:1f:d3:57:5b:2c:7e:6d:ed:e5:1e:61:9c:24:6b:91:69:58:
         7b:39:28:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org