Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6270B78061268B34D99296D06428750D9E859B68.cer
File:                     6270B78061268B34D99296D06428750D9E859B68.cer (raw, json)
Hash identifier:          P2qgoYLqarzSX51tBASOrj3/42YJWZTnH3wnb0tawL4=
Subject key identifier:   62:70:B7:80:61:26:8B:34:D9:92:96:D0:64:28:75:0D:9E:85:9B:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       053A596D3FA5F5B181F8A131145EA6E0BC285EE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/rMj13AEB6DrFg8at48UrUiPBZyPzQnrHGVqByke412g/0/6270B78061268B34D99296D06428750D9E859B68.mft
caRepository:             rsync://rpki-repo.registro.br/repo/rMj13AEB6DrFg8at48UrUiPBZyPzQnrHGVqByke412g/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Mar 2023 18:26:32 +0000
Certificate not after:    Tue 12 Mar 2024 18:31:32 +0000
Subordinate resources:    AS: 268128
                          IP: 45.169.48.0/22
                          IP: 2804:586c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3a:59:6d:3f:a5:f5:b1:81:f8:a1:31:14:5e:a6:e0:bc:28:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 18:26:32 2023 GMT
            Not After : Mar 12 18:31:32 2024 GMT
        Subject: CN=6270B78061268B34D99296D06428750D9E859B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6a:d7:1d:9c:77:a1:84:09:6a:b8:98:c0:cb:
                    1b:cd:be:ce:f5:4b:0a:3d:bb:94:57:10:9a:cd:28:
                    ed:af:f3:cb:1f:66:cb:46:ca:8b:9f:e1:97:8c:7b:
                    59:8e:fa:a7:bf:1d:40:17:8a:21:1f:e8:f5:3b:b0:
                    8e:d6:b6:46:0e:11:69:94:41:32:72:29:6e:9f:f3:
                    53:22:6b:a0:c1:d0:d0:c3:c5:ea:53:0f:8a:8b:a5:
                    70:8e:0e:ec:23:54:2a:ae:4b:87:44:9b:d1:47:df:
                    3a:79:c3:87:4c:c4:e8:68:02:fd:3e:8f:bb:b3:4f:
                    45:6a:4e:0d:94:0b:0f:dc:51:56:e2:39:e0:1c:a9:
                    15:04:a5:37:84:af:4d:7f:3d:0e:e3:1e:42:c1:d0:
                    e2:18:59:be:36:66:7b:9e:11:70:4c:91:07:e1:2e:
                    aa:11:2e:3b:b0:03:ab:44:9e:51:e7:a7:d1:0c:bc:
                    55:c8:68:f6:70:cd:c6:de:fb:3a:ea:9b:d4:f2:f0:
                    7c:dc:e7:4b:e9:34:4f:5c:26:95:30:28:65:8d:85:
                    f1:34:ba:e6:ab:4a:e1:df:95:f9:11:0f:23:67:94:
                    32:9c:4f:5c:b4:f3:05:5c:e9:7a:4e:58:75:f1:55:
                    1d:8e:4a:8d:b1:87:8a:a4:3a:0e:8b:b3:44:3a:69:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:70:B7:80:61:26:8B:34:D9:92:96:D0:64:28:75:0D:9E:85:9B:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/rMj13AEB6DrFg8at48UrUiPBZyPzQnrHGVqByke412g/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/rMj13AEB6DrFg8at48UrUiPBZyPzQnrHGVqByke412g/0/6270B78061268B34D99296D06428750D9E859B68.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.48.0/22
                IPv6:
                  2804:586c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268128

    Signature Algorithm: sha256WithRSAEncryption
         3f:96:2a:1d:9c:7e:9c:f5:a8:7e:d1:d2:34:7b:00:8c:07:9a:
         a6:19:bb:af:d0:3a:2b:6d:71:5a:96:22:7b:ca:19:74:18:71:
         16:56:f2:cb:46:f5:28:69:0f:af:69:a9:fe:17:59:6a:af:78:
         6d:0d:03:73:2d:65:f9:c5:6e:9a:fb:fb:cc:ee:c9:8c:71:92:
         ca:30:6d:75:57:52:43:fa:98:f2:f3:bf:94:cb:92:6e:a9:4d:
         1f:32:d6:7e:2e:ce:be:fe:78:59:45:f0:39:8d:2a:59:5e:4a:
         34:02:4d:63:c5:cd:39:fe:0d:7e:1b:46:f1:82:ac:4e:7a:3b:
         43:94:7b:83:39:88:43:79:d6:08:dc:3f:82:7f:a3:f1:ab:42:
         ae:71:89:06:e7:f6:18:ae:c5:bd:97:3d:26:e4:f2:c9:1f:c2:
         97:d8:55:6e:6f:70:2b:06:8f:f8:be:63:0e:fe:80:04:ab:03:
         13:76:64:d3:23:1e:32:2c:a2:39:48:ea:ee:c5:62:b9:4d:4d:
         48:61:0e:ef:be:80:44:30:59:fc:df:6f:b1:3a:64:28:48:a9:
         04:8b:92:37:9b:91:01:1b:4f:9b:d9:f6:93:25:04:7b:55:79:
         b5:67:07:65:48:fa:17:1d:d1:fe:22:e1:3e:c0:be:3d:4b:50:
         e9:38:92:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org