Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6574347835ECBC6966BFCA5A81C6163C9DA6910D.cer
File:                     6574347835ECBC6966BFCA5A81C6163C9DA6910D.cer (raw, json)
Hash identifier:          8DvP5eQgX6sqDtr0HC8oMktD8w9UReLM+HZ7zpfjbj8=
Subject key identifier:   65:74:34:78:35:EC:BC:69:66:BF:CA:5A:81:C6:16:3C:9D:A6:91:0D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27827C78DF8C1223A7B8B9942195EF1764DEFCBF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/6574347835ECBC6966BFCA5A81C6163C9DA6910D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 19:19:20 +0000
Certificate not after:    Wed 05 Feb 2025 19:24:20 +0000
Subordinate resources:    AS: 266343
                          IP: 170.239.4.0/22
                          IP: 2804:365c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:82:7c:78:df:8c:12:23:a7:b8:b9:94:21:95:ef:17:64:de:fc:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 19:19:20 2024 GMT
            Not After : Feb  5 19:24:20 2025 GMT
        Subject: CN=6574347835ECBC6966BFCA5A81C6163C9DA6910D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3f:5e:91:16:14:45:dc:69:0f:66:c8:07:c7:
                    99:44:5e:52:93:3a:14:90:b8:23:5d:a9:a3:b2:74:
                    13:be:18:48:7a:47:f2:da:11:85:b0:fd:ac:dd:82:
                    4a:98:61:10:fd:02:40:43:03:4a:14:f6:2d:54:b5:
                    a9:33:0a:ca:91:91:55:86:51:47:1c:2b:e8:ea:62:
                    39:c9:ff:3e:c1:e3:ac:cf:e9:40:90:42:c0:c2:43:
                    8c:d4:e8:88:72:83:ec:57:70:9f:d7:3b:2c:b0:e3:
                    1c:af:27:a0:68:25:a2:fd:1a:d5:db:22:26:8c:cd:
                    bf:66:fc:7e:66:4c:78:2e:3a:fe:35:b8:77:3f:d8:
                    08:cf:2c:8f:10:6e:bb:ae:8c:76:b4:8a:e8:f7:9c:
                    9f:89:38:ad:67:d6:9c:b1:11:0c:f6:f5:ad:4a:11:
                    bc:0b:31:a6:42:07:d8:b4:8b:e5:45:80:67:8b:db:
                    5d:08:e2:28:43:06:b2:5f:f3:6b:fc:e2:0c:3c:e1:
                    f5:3a:d9:bf:2f:1b:83:ce:22:a3:7d:2b:72:9c:2e:
                    13:9b:7d:db:80:5e:b5:9c:4a:8c:0c:ae:a3:cb:be:
                    71:b3:8f:91:a6:46:b7:43:90:5e:16:48:d5:5d:c9:
                    93:72:f7:a4:52:67:74:7f:ac:0e:a4:8e:8d:d1:5b:
                    1d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:74:34:78:35:EC:BC:69:66:BF:CA:5A:81:C6:16:3C:9D:A6:91:0D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/6574347835ECBC6966BFCA5A81C6163C9DA6910D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.4.0/22
                IPv6:
                  2804:365c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266343

    Signature Algorithm: sha256WithRSAEncryption
         6d:06:1e:27:de:b4:5a:a6:45:51:af:f7:10:ff:2f:70:8d:bd:
         f5:45:ea:be:18:bc:d6:9e:a0:ad:bb:94:15:78:a0:11:34:14:
         45:40:f4:5a:c0:5b:2e:3f:71:94:30:11:dc:3a:5d:a6:ff:ea:
         6c:94:f2:b3:6a:50:dd:97:2b:77:85:6f:7f:b5:0e:2d:c2:6a:
         d3:ef:55:71:4a:9d:48:ac:d3:e9:0a:f2:7f:3a:14:37:70:9a:
         4b:79:a1:50:d8:e1:0e:ec:ea:d5:60:89:24:12:2a:43:9b:17:
         b4:ac:64:b2:f7:d8:7d:1c:97:18:8f:02:69:fc:6c:96:f7:9b:
         57:a8:80:3b:20:5a:29:06:80:61:ec:c3:7c:6e:aa:49:92:9b:
         47:5f:fd:37:9a:f5:fb:7a:d2:b2:40:ac:81:05:5a:8c:94:a9:
         16:b8:b4:6f:c3:af:e5:a1:9e:24:cb:08:40:01:d9:89:8f:8d:
         87:00:f0:ef:70:5c:b5:f8:c2:1f:95:e8:70:15:2b:0d:25:07:
         a8:e6:fd:c5:a0:f3:bb:77:b3:8e:3e:ba:78:c6:fa:d9:13:ce:
         f0:6b:7b:54:b6:a8:88:c5:b7:b0:fd:5d:7a:68:be:5d:dd:2f:
         21:32:f1:2d:b5:82:07:22:b6:39:d5:52:6c:c0:de:b8:22:aa:
         d1:f4:1f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org