Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6573B1E0DDF388B6C28D5404F9423D243A3AAC2A.cer
File:                     6573B1E0DDF388B6C28D5404F9423D243A3AAC2A.cer (raw, json)
Hash identifier:          Bs0tOzWulFP3LQNy6pybOmDcEe0QrNYZhJxyDkQhcbo=
Subject key identifier:   65:73:B1:E0:DD:F3:88:B6:C2:8D:54:04:F9:42:3D:24:3A:3A:AC:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7DE410609664607DB1E900CA2F0770157E8D2B9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/6573B1E0DDF388B6C28D5404F9423D243A3AAC2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 14:59:09 +0000
Certificate not after:    Thu 13 Feb 2025 15:04:09 +0000
Subordinate resources:    AS: 266314
                          IP: 170.238.52.0/22
                          IP: 2804:35e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e4:10:60:96:64:60:7d:b1:e9:00:ca:2f:07:70:15:7e:8d:2b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 14:59:09 2024 GMT
            Not After : Feb 13 15:04:09 2025 GMT
        Subject: CN=6573B1E0DDF388B6C28D5404F9423D243A3AAC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:6d:b3:29:29:43:ab:f7:f2:1e:d2:24:ff:
                    fe:3f:3c:6b:dc:6c:1e:b9:e1:51:38:82:54:b7:8e:
                    16:da:a7:5d:b8:85:91:61:ed:da:47:a8:13:01:6c:
                    65:37:0a:4f:cd:1c:d0:c7:f3:d6:ad:e2:72:a0:20:
                    ff:b3:90:90:62:c1:8b:cc:8a:f8:f2:53:05:15:bb:
                    63:95:fe:cd:50:5f:55:28:e4:50:b4:85:12:bd:e8:
                    05:81:78:0e:06:d4:ec:47:3e:68:58:21:01:45:d3:
                    6d:02:96:0b:24:97:26:d8:e7:a0:45:f9:c3:ce:ec:
                    48:2c:06:bf:00:7a:db:bc:b5:0d:25:fa:24:11:52:
                    ad:98:3c:76:f4:6d:ec:31:23:3a:73:68:88:15:f4:
                    d7:df:99:41:d0:94:d6:a7:a5:fa:65:ad:15:21:c3:
                    23:e7:01:e6:3c:95:05:c2:60:d8:d3:35:26:fa:97:
                    29:54:07:de:4f:e3:cc:6f:1d:64:06:b7:4c:ce:23:
                    ff:61:1a:e5:58:df:0d:19:33:c5:8b:b7:99:38:32:
                    dd:64:b6:40:8d:d0:64:bf:bf:36:21:68:c1:d2:c3:
                    1b:00:e1:cc:5f:a7:53:83:76:f9:f6:75:0d:53:ed:
                    13:86:67:1c:a0:36:41:b5:48:50:dc:e3:f9:4f:87:
                    fa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:73:B1:E0:DD:F3:88:B6:C2:8D:54:04:F9:42:3D:24:3A:3A:AC:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/6573B1E0DDF388B6C28D5404F9423D243A3AAC2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.52.0/22
                IPv6:
                  2804:35e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266314

    Signature Algorithm: sha256WithRSAEncryption
         83:46:7c:9e:95:4b:fd:fb:6a:46:6f:4d:2d:76:fd:f5:f5:7b:
         61:7e:ac:a9:d5:c2:c6:af:df:04:83:9e:a2:e1:3f:4f:f1:36:
         b3:01:e8:3c:1d:95:cd:d5:23:6f:7d:22:e6:b8:53:24:53:4f:
         7b:90:a1:37:1c:0c:c9:dd:c8:f4:5c:65:67:e9:8d:21:0d:bb:
         35:39:3e:c8:2b:ce:42:d0:29:f6:dc:f1:3b:21:38:d2:6d:4f:
         a3:27:e5:be:55:92:19:53:94:ca:6d:be:12:59:11:5a:dd:09:
         09:6b:ea:df:37:4f:95:d3:f7:da:15:1f:65:10:f1:2e:8d:a4:
         a6:11:ba:51:8b:8d:7f:0d:38:6f:66:c4:60:aa:3e:fc:a9:0a:
         9e:20:60:4a:75:a1:9c:02:10:20:0b:34:9a:8b:ca:6b:fb:68:
         fe:3b:a9:24:6f:bc:c1:15:e4:9a:1a:46:a2:d2:23:c4:ca:96:
         cd:d4:21:34:cb:9d:02:a0:0f:69:a2:45:05:f2:4f:da:8b:33:
         ff:11:19:68:8d:90:6c:5e:35:26:21:0a:72:a9:fa:94:f9:ec:
         22:93:28:b0:80:b5:08:4c:a0:eb:81:31:fd:cf:50:66:41:ca:
         3c:cc:d5:6b:e3:8c:c7:1a:ed:78:cb:2c:00:86:fc:58:44:af:
         2a:29:df:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org