Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6587274A8C66D7DB61B47BBACB6479ECE8EB0009.cer
File:                     6587274A8C66D7DB61B47BBACB6479ECE8EB0009.cer (raw, json)
Hash identifier:          G0p6K/BDxI+j3yODk0StQJNknYLfKXCktObE+x8+ZMI=
Subject key identifier:   65:87:27:4A:8C:66:D7:DB:61:B4:7B:BA:CB:64:79:EC:E8:EB:00:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       737D6151981E6CB3185125F9BC3C35E03471DDCC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7oppaaCMH37cQZUxmxUHN1VmoZHphF6oosepCgbA7zPC/0/6587274A8C66D7DB61B47BBACB6479ECE8EB0009.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7oppaaCMH37cQZUxmxUHN1VmoZHphF6oosepCgbA7zPC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 14:04:55 +0000
Certificate not after:    Mon 27 Jan 2025 14:09:55 +0000
Subordinate resources:    AS: 270685
                          IP: 177.200.232.0/23
                          IP: 2804:6fcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7d:61:51:98:1e:6c:b3:18:51:25:f9:bc:3c:35:e0:34:71:dd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 29 14:04:55 2024 GMT
            Not After : Jan 27 14:09:55 2025 GMT
        Subject: CN=6587274A8C66D7DB61B47BBACB6479ECE8EB0009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1e:a2:14:d1:f5:bb:ca:2a:c9:4e:aa:0a:65:
                    27:ad:fc:09:d3:17:fa:66:b3:c6:8d:16:55:03:64:
                    b2:f3:98:fa:f7:c5:d8:44:24:2d:4a:33:4c:7d:ea:
                    06:22:6f:c2:0d:7e:0c:a9:3a:6f:3f:eb:fe:0e:98:
                    e2:cb:93:a4:80:36:ab:3f:12:40:3d:40:50:25:a0:
                    fe:6a:2c:ba:fb:26:ce:68:2a:9e:a7:3a:47:f1:60:
                    95:f3:dd:f1:cb:ff:cc:60:90:22:fb:58:a0:cc:73:
                    16:72:ab:5b:6d:c3:0a:d6:8b:d9:00:42:34:18:b2:
                    a5:78:0f:27:9b:11:ef:09:4e:40:11:34:82:7f:78:
                    eb:3a:e5:ff:a9:ee:b5:bf:41:4e:dd:08:8b:6c:bd:
                    b7:6d:74:4a:da:09:55:42:89:65:04:0e:f8:35:72:
                    5a:d8:11:c7:d2:2e:e2:a7:f9:26:f5:18:00:0a:20:
                    a8:da:32:cc:81:ce:6b:0e:1f:4f:c1:b6:ab:8a:c2:
                    2d:5c:2e:e5:96:c9:2d:42:e0:0c:39:29:c9:78:a2:
                    3e:93:a4:d4:87:c4:99:55:84:aa:e6:c2:c7:52:93:
                    9b:fe:d3:cb:3c:93:01:66:0b:3a:9b:45:b8:14:89:
                    44:f9:b8:8e:e0:17:e2:49:b7:9d:99:1d:96:9d:eb:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:87:27:4A:8C:66:D7:DB:61:B4:7B:BA:CB:64:79:EC:E8:EB:00:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7oppaaCMH37cQZUxmxUHN1VmoZHphF6oosepCgbA7zPC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7oppaaCMH37cQZUxmxUHN1VmoZHphF6oosepCgbA7zPC/0/6587274A8C66D7DB61B47BBACB6479ECE8EB0009.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.232.0/23
                IPv6:
                  2804:6fcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270685

    Signature Algorithm: sha256WithRSAEncryption
         0b:14:19:0b:d5:1b:2b:2b:4b:7d:41:9f:e3:a6:d7:01:94:27:
         7f:0b:79:23:0e:32:6c:7a:07:86:fb:e1:71:37:78:ab:84:41:
         f1:2f:ea:15:7c:eb:c6:24:d6:bb:a5:7b:73:52:cc:60:6c:d6:
         11:10:0e:ff:55:06:19:34:ea:74:14:de:5e:7d:02:24:53:96:
         0a:06:31:24:f8:f0:c1:67:e4:6b:e4:19:24:27:79:d0:81:0f:
         93:46:f1:aa:68:f8:03:74:32:9f:a4:62:87:73:92:47:93:c0:
         5f:46:1c:c9:c2:36:10:ff:78:c7:6e:cc:0c:8f:b8:c1:53:cd:
         82:4e:cf:0c:65:c5:10:dd:cf:49:3a:72:6e:c7:5a:1b:13:e0:
         a2:3e:be:46:c2:5f:7e:70:ad:4a:19:19:64:f7:d2:1a:39:78:
         38:e2:13:de:f2:4f:68:5a:be:5c:70:c6:09:86:e7:50:cd:f3:
         00:38:74:5c:2d:6b:b9:12:83:5b:fd:43:1c:22:b6:09:d4:20:
         3d:57:fd:6e:71:5b:33:0d:c3:04:19:52:56:43:ec:64:83:c3:
         c2:a5:dd:a5:bf:bf:77:2d:ee:47:d1:ee:23:09:d6:ba:a9:3e:
         59:79:36:f1:90:8e:69:40:e6:e8:6f:6a:35:bd:71:0d:5a:59:
         ef:b8:5c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org