Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer
File:                     6460F6675E35AF4E50A8915D0F531C431C6DA166.cer (raw, json)
Hash identifier:          aL2C/3CdSkX5/DACIGXZfhumtLgLIlvSb2D1+QYOvq4=
Subject key identifier:   64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7FA6418D3C01224A262F829A46D178D37B3A32BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Jun 2021 17:59:10 +0000
Certificate not after:    Wed 08 Jun 2022 18:04:10 +0000
Subordinate resources:    AS: 28260
                          IP: 177.130.0.0/20
                          IP: 186.193.240.0/20
                          IP: 187.16.240.0/20
                          IP: 187.95.32.0/20
                          IP: 2804:28e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a6:41:8d:3c:01:22:4a:26:2f:82:9a:46:d1:78:d3:7b:3a:32:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  9 17:59:10 2021 GMT
            Not After : Jun  8 18:04:10 2022 GMT
        Subject: CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:6e:33:9e:34:25:42:84:b4:65:f2:2c:10:
                    49:a8:ef:49:40:8f:9b:ac:ca:fe:6c:01:42:ea:7a:
                    a4:31:ee:2e:33:6a:2a:b9:5b:6a:68:21:12:7e:d6:
                    6f:7c:f9:64:0d:9e:b4:64:1e:0a:73:c8:54:cb:70:
                    71:21:59:9e:db:be:7a:72:de:d0:76:ec:0d:75:dd:
                    fd:eb:16:5e:3c:93:f0:57:cc:88:6c:05:d2:91:0c:
                    0d:b7:bd:c6:2e:b5:ff:b4:ca:ab:b8:e5:ed:f7:5f:
                    e7:1e:e8:9a:77:e8:bd:68:37:1a:df:9b:63:b2:4e:
                    1c:5a:22:2d:dc:93:e2:f0:b5:8a:0f:a0:5c:27:81:
                    cd:65:9e:c1:98:45:c0:3a:fc:3e:94:8b:d1:ee:c3:
                    44:f1:f4:d9:c3:9a:b2:1b:68:2f:4a:d1:75:53:37:
                    85:2b:9c:e8:46:c0:b3:31:0c:10:70:08:f2:b5:7f:
                    eb:aa:c8:3b:7d:aa:8c:37:4a:ab:cc:4f:e7:93:36:
                    2c:90:1d:79:29:7d:bb:9b:06:6b:10:26:24:c2:2c:
                    27:ab:bc:cc:e5:1d:f4:ec:21:58:d2:34:31:d1:60:
                    e6:e8:f7:f5:d0:cf:1f:d3:5c:aa:ef:b9:59:6c:76:
                    6f:53:01:8f:db:4a:e4:c0:c0:d4:02:a2:9b:c5:fe:
                    fa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.0.0/20
                  186.193.240.0/20
                  187.16.240.0/20
                  187.95.32.0/20
                IPv6:
                  2804:28e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28260

    Signature Algorithm: sha256WithRSAEncryption
         80:3f:b0:f3:07:32:d4:5c:b0:d6:97:0c:26:a8:43:ec:55:03:
         d2:4c:77:8e:40:9c:ad:9f:bb:71:bd:81:e4:78:63:b3:44:20:
         56:4e:69:c3:f7:85:3c:ae:74:cc:80:33:f0:a1:e4:dc:78:b6:
         fd:8a:19:df:9d:c1:5c:c9:72:eb:58:22:c1:72:92:f0:90:e3:
         72:d4:3c:bb:1b:9a:f0:a3:8f:90:04:03:c2:e8:49:42:f8:1c:
         f3:4a:22:73:5f:fc:df:d2:b5:b2:9b:58:96:c5:e1:b1:f9:5c:
         e7:45:2b:63:df:1f:64:eb:db:01:dd:62:f6:c0:e6:3a:5f:23:
         c9:74:15:36:52:46:09:ce:2d:fe:e7:5f:a4:22:4e:31:7b:a3:
         1d:83:6d:7c:2c:5b:23:d0:13:20:60:d3:70:ac:41:51:69:6b:
         65:07:ac:42:f0:08:8e:71:ee:5c:bd:cd:7e:50:11:55:6f:07:
         1f:c6:c6:96:7e:54:c1:61:e3:cb:51:d4:99:bc:fe:3d:85:30:
         bd:53:39:e5:ee:d1:c1:46:c0:bc:79:79:6f:2c:15:74:ed:9b:
         dc:4f:ec:29:93:d8:2b:94:af:d1:df:b5:62:41:b3:8f:4c:57:
         bc:a7:b6:e2:49:42:62:bc:3a:23:a4:d0:1f:65:f9:57:4c:0d:
         e8:e6:54:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org