Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6571AA2C6E99BCCA4F9240FEE96E19C7E2BF1129.cer
File:                     6571AA2C6E99BCCA4F9240FEE96E19C7E2BF1129.cer (raw, json)
Hash identifier:          a+lfRX3e+rwi9Rtdd6oB4ir5PjtjRP/dpGT6P+fK7uE=
Subject key identifier:   65:71:AA:2C:6E:99:BC:CA:4F:92:40:FE:E9:6E:19:C7:E2:BF:11:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2713FC526EE2EDD6CB664EFD7E67F47816A7F2AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/6571AA2C6E99BCCA4F9240FEE96E19C7E2BF1129.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 May 2023 11:28:33 +0000
Certificate not after:    Fri 17 May 2024 11:33:33 +0000
Subordinate resources:    AS: 269258
                          IP: 45.183.28.0/22
                          IP: 45.239.140.0/22
                          IP: 2804:61d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:13:fc:52:6e:e2:ed:d6:cb:66:4e:fd:7e:67:f4:78:16:a7:f2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 19 11:28:33 2023 GMT
            Not After : May 17 11:33:33 2024 GMT
        Subject: CN=6571AA2C6E99BCCA4F9240FEE96E19C7E2BF1129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a0:db:40:01:38:e5:3b:39:ac:d5:bb:bb:4a:
                    e5:3c:ef:33:81:b3:8e:d6:e6:d7:97:22:f4:3c:ce:
                    55:25:b7:b1:14:58:b9:cc:cb:33:0a:af:83:83:b6:
                    69:7b:e1:62:4c:f1:1b:1c:77:46:07:0d:93:10:58:
                    ce:7d:47:da:aa:11:85:48:4a:64:0c:42:64:76:29:
                    00:fa:23:85:a9:97:54:55:d2:4e:a6:1c:19:60:e1:
                    23:73:0f:d7:09:51:7f:12:1f:d0:d7:30:a6:1b:40:
                    0a:74:55:1f:ca:c5:79:0b:c5:44:43:53:51:11:0d:
                    94:c1:9a:54:75:dd:b1:c5:a4:f1:d7:91:bb:bb:dd:
                    97:dc:0f:aa:dd:65:62:49:7f:82:92:f1:c7:b1:00:
                    37:dd:d5:e2:56:e2:55:0f:bc:10:a7:f9:5d:5f:75:
                    36:4d:a3:2a:3f:06:e1:1a:9d:d5:bd:59:55:b6:1d:
                    eb:ac:4a:a7:4b:b0:ea:b1:3d:fe:08:db:d1:fa:b6:
                    b8:0c:68:c9:75:04:91:0f:4e:8b:51:16:c8:09:85:
                    51:a4:dc:67:49:15:67:a5:4c:db:c0:24:a2:ba:97:
                    a6:48:cb:45:af:4e:57:b5:ad:d1:db:c9:25:45:8c:
                    66:77:ac:ff:e4:2e:54:d7:5d:d1:f5:32:1a:74:96:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:71:AA:2C:6E:99:BC:CA:4F:92:40:FE:E9:6E:19:C7:E2:BF:11:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/6571AA2C6E99BCCA4F9240FEE96E19C7E2BF1129.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.28.0/22
                  45.239.140.0/22
                IPv6:
                  2804:61d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269258

    Signature Algorithm: sha256WithRSAEncryption
         44:d8:4d:a9:61:19:00:50:8b:b7:5d:80:99:a2:97:70:2e:4a:
         40:17:a0:fe:7a:99:9e:40:3c:6e:d4:b5:f0:26:db:d2:ef:6e:
         1e:5f:d9:6f:3b:5f:57:49:d4:89:60:c2:15:36:ed:d0:8b:e4:
         55:c6:c2:12:31:31:53:b9:7e:f8:48:02:43:02:e0:43:9a:41:
         af:73:43:86:13:95:bb:8d:cd:37:e4:f8:38:39:ea:d2:4b:e2:
         01:15:5b:56:4c:64:4c:de:40:7f:1f:aa:be:ad:b3:61:12:73:
         76:b5:61:bc:75:5e:41:66:f3:91:5d:29:f4:77:17:90:5f:50:
         66:b5:0d:35:2f:9a:24:4b:4b:ac:a0:b9:31:87:38:dd:42:b7:
         6e:0c:3d:1d:d2:b8:b0:e8:e7:95:82:fe:4d:7e:fa:2b:14:e0:
         62:9a:8a:ca:d8:90:b3:18:77:a3:62:ac:b1:56:08:cc:ad:63:
         8b:5c:26:37:6b:2b:87:ff:4b:46:1a:90:ea:40:2e:fd:e5:7a:
         cc:d3:b8:bd:f4:19:5e:d9:40:fc:e1:31:b7:1f:f8:81:2b:93:
         78:12:9b:27:21:3a:4b:1e:cb:83:e1:c0:23:0d:2d:2d:6d:8e:
         00:65:6c:e7:30:a7:14:91:79:be:c3:d6:e8:11:c9:08:b8:cd:
         3d:36:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org