Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.cer
File:                     690A88BE654AD67BF30499F617A3C9BFC23AA33B.cer (raw, json)
Hash identifier:          3Xl8ji0WZZ81X6tLwLGimrlHkvCs/IR1MyO2aU3Zu7E=
Subject key identifier:   69:0A:88:BE:65:4A:D6:7B:F3:04:99:F6:17:A3:C9:BF:C2:3A:A3:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4097F7B33578D5825360C34E5B4311D83C82EFBA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Nov 2022 16:58:29 +0000
Certificate not after:    Fri 24 Nov 2023 17:03:29 +0000
Subordinate resources:    AS: 266611
                          IP: 128.201.28.0/22
                          IP: 2804:3ea4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:97:f7:b3:35:78:d5:82:53:60:c3:4e:5b:43:11:d8:3c:82:ef:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 25 16:58:29 2022 GMT
            Not After : Nov 24 17:03:29 2023 GMT
        Subject: CN=690A88BE654AD67BF30499F617A3C9BFC23AA33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2a:69:be:7d:e6:7c:44:75:da:32:7c:18:14:
                    2a:14:d3:bb:71:7d:24:ce:72:d0:8b:17:b4:24:d4:
                    ff:8c:a0:4d:26:b5:98:15:f6:a3:d0:54:95:b8:c0:
                    19:45:a0:42:73:9a:38:b8:f9:21:db:79:e8:ce:76:
                    5b:60:e4:01:67:21:a7:f4:27:08:f4:c7:53:df:1a:
                    8e:ba:f5:98:cc:ea:32:ef:12:62:84:83:b5:f6:7c:
                    08:26:76:08:b7:58:b8:9b:60:9a:b6:c7:09:64:ab:
                    3f:6b:20:04:0a:81:b4:f8:b3:21:da:aa:36:e0:30:
                    48:a6:75:fd:bb:c2:0a:d9:69:9b:92:e6:f5:5e:71:
                    84:f3:a7:be:15:2c:32:7a:b4:3b:9b:b0:7a:52:59:
                    5e:f5:44:12:3d:c9:e1:5f:19:0e:19:f5:25:6f:f2:
                    d7:d9:16:9b:bf:61:9a:1e:39:e9:9d:a1:af:83:3a:
                    02:26:f0:a2:5b:19:46:64:a7:6c:2f:a9:36:d6:c2:
                    fb:27:54:03:7c:cd:9c:06:11:f8:11:fd:cd:25:c7:
                    c3:9d:2e:a7:da:5a:b1:c8:c2:fa:ae:8a:9e:17:39:
                    02:a4:f9:64:84:c2:98:82:ff:97:31:bc:41:cb:06:
                    e4:ee:aa:cc:43:30:7f:99:42:d3:06:65:40:0a:7e:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:0A:88:BE:65:4A:D6:7B:F3:04:99:F6:17:A3:C9:BF:C2:3A:A3:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.28.0/22
                IPv6:
                  2804:3ea4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266611

    Signature Algorithm: sha256WithRSAEncryption
         90:0d:62:eb:a5:82:3f:6d:ce:df:20:75:eb:b3:f1:72:2a:d2:
         dd:31:4f:70:2e:ed:38:d2:19:72:50:dc:9d:24:6c:5a:0e:93:
         88:47:24:2b:d9:42:3d:d5:d4:80:20:04:0d:24:50:f9:5d:34:
         3f:22:f9:2e:06:d7:33:67:47:76:48:4c:ff:40:9a:24:f8:fa:
         6f:44:10:30:d6:95:aa:ff:39:fe:82:90:fa:23:fa:a3:3a:bc:
         1a:32:e2:8b:07:a4:8d:5c:e8:23:0e:85:8c:07:dd:70:74:6e:
         8d:59:f3:96:53:2d:41:21:62:2c:d7:0b:87:75:2c:9a:4b:26:
         59:78:0f:b4:b1:69:29:ae:55:c2:db:41:c6:f2:db:a0:b1:df:
         43:67:91:b3:a5:67:be:b4:e4:5c:4c:dc:64:2d:5b:dc:11:c6:
         a0:77:ca:01:ea:c0:8e:4d:f7:03:39:58:a2:c7:68:f6:54:d2:
         6b:9e:5c:ae:b0:e2:f9:b0:1d:b4:f0:37:de:2d:c5:78:03:2f:
         79:6b:28:7d:5c:36:a4:86:6f:ec:ff:83:1a:e1:56:54:13:59:
         3d:4f:15:20:b1:0c:ae:cc:16:1a:bd:e2:d4:8c:61:73:b4:3f:
         cb:57:2e:5b:e8:35:1d:e7:ac:65:d8:31:f9:22:ce:f6:95:b5:
         86:47:3c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org