Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6647B24D7AE4237039168CAB7D658AFBAEBD2F36.cer
File:                     6647B24D7AE4237039168CAB7D658AFBAEBD2F36.cer (raw, json)
Hash identifier:          7jICZ4J+YSsn6uia4FdxY7pxMDd9tTJagsOiEdH/NIA=
Subject key identifier:   66:47:B2:4D:7A:E4:23:70:39:16:8C:AB:7D:65:8A:FB:AE:BD:2F:36
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6F2E9081845CFC12C1AC50C45ABE3DF05DB769A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/6647B24D7AE4237039168CAB7D658AFBAEBD2F36.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 12:02:16 +0000
Certificate not after:    Tue 03 Sep 2024 12:07:16 +0000
Subordinate resources:    AS: 262949
                          IP: 177.154.80.0/21
                          IP: 2804:e48::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2e:90:81:84:5c:fc:12:c1:ac:50:c4:5a:be:3d:f0:5d:b7:69:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 12:02:16 2023 GMT
            Not After : Sep  3 12:07:16 2024 GMT
        Subject: CN=6647B24D7AE4237039168CAB7D658AFBAEBD2F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ae:8f:a5:cb:bf:be:ff:f5:e4:5b:3c:2c:c0:
                    36:3d:60:9e:2f:3d:91:41:b0:64:76:a9:68:22:18:
                    3a:9f:91:cd:2f:1d:a2:c0:6e:e0:7e:4e:bf:de:10:
                    9d:1c:47:f7:1f:b3:ab:ba:04:73:0d:98:b8:e2:ce:
                    e8:e0:e7:87:17:31:29:86:8a:0e:90:e9:2c:d6:a2:
                    fb:60:31:e5:7e:94:cb:c9:5f:27:7e:eb:f4:9e:2c:
                    20:c3:1a:95:17:27:48:6a:5f:0a:96:96:b3:85:3d:
                    ef:01:a1:2c:e8:5f:cd:66:da:0a:91:ab:68:8c:63:
                    40:02:03:5c:c4:c0:63:28:58:b1:e1:5e:36:5f:95:
                    34:1d:0f:65:90:c8:24:ba:cb:17:03:88:d3:14:f3:
                    ef:07:c0:00:a7:64:53:60:92:8f:c1:15:20:e8:c0:
                    6f:fc:4d:46:a1:9d:25:5a:ca:f1:c4:00:8d:cc:e5:
                    c9:7f:70:99:f6:6f:95:2b:cf:27:ef:58:81:0e:35:
                    03:82:75:ff:29:e0:93:81:76:5a:a5:e9:0f:2d:1e:
                    7b:0e:b1:8e:a3:68:52:d5:46:04:7f:5d:ec:a3:b3:
                    b8:16:7c:70:b3:bf:8e:26:ac:e8:7d:64:2e:0b:9f:
                    9a:19:c2:d6:1d:f9:bb:e0:26:35:66:52:b3:b9:ef:
                    14:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:47:B2:4D:7A:E4:23:70:39:16:8C:AB:7D:65:8A:FB:AE:BD:2F:36
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/6647B24D7AE4237039168CAB7D658AFBAEBD2F36.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.80.0/21
                IPv6:
                  2804:e48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262949

    Signature Algorithm: sha256WithRSAEncryption
         06:d8:af:4d:25:06:12:c1:23:6f:7f:8f:76:6e:3c:32:ef:a9:
         e6:9e:e0:6a:f7:c2:fb:ef:6f:9d:03:f0:3b:08:03:43:36:ba:
         b4:eb:76:ab:22:9e:31:40:66:97:63:c5:fc:47:10:b3:b6:06:
         a8:dc:19:d5:14:61:7c:09:c5:8d:b6:7d:a3:43:b4:ad:3e:c5:
         12:88:63:83:af:97:bf:49:f4:17:eb:40:d8:f1:ea:2f:42:3b:
         77:73:4c:31:3f:fe:b4:c6:ff:b6:1f:e0:6a:85:83:1d:22:07:
         c9:05:3d:f3:ee:f7:fd:a1:d4:7e:66:b9:3d:44:41:52:af:54:
         1b:ae:5a:55:8b:f5:15:b8:e4:d1:97:09:31:30:e2:fb:2d:5c:
         66:f9:d4:36:09:06:07:b3:ee:fd:2e:89:b7:05:ed:03:85:74:
         37:ed:11:4f:4c:63:8d:f2:4e:5e:ee:18:8e:9d:31:a7:3d:89:
         1b:99:9b:75:2b:97:71:27:96:9b:f3:97:bf:24:9f:2c:2b:bc:
         31:f8:6c:fe:cb:e2:fa:c2:05:2e:89:bc:b7:0e:72:e8:b2:a1:
         07:09:1d:ce:53:0e:ab:70:70:1d:6f:d6:ac:e8:0f:31:e3:10:
         49:65:d4:9d:f6:95:e4:9e:df:07:14:f5:99:c0:1d:4e:1c:eb:
         c7:c0:3d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org