Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6A61B3657792FDEA3119856DE8476D55D643BE12.cer
File:                     6A61B3657792FDEA3119856DE8476D55D643BE12.cer (raw, json)
Hash identifier:          xjoOYSXUlRKHtO15s3N/lwLJFfMAT0ziWlz7rxROsLQ=
Subject key identifier:   6A:61:B3:65:77:92:FD:EA:31:19:85:6D:E8:47:6D:55:D6:43:BE:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E59B1F242FCF94E4EDFC118552E19CA916D8B15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/6A61B3657792FDEA3119856DE8476D55D643BE12.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 19:24:56 +0000
Certificate not after:    Tue 21 May 2024 19:29:56 +0000
Subordinate resources:    AS: 263441
                          IP: 138.255.120.0/22
                          IP: 170.233.168.0/22
                          IP: 177.91.128.0/22
                          IP: 200.225.108.0/22
                          IP: 2804:11d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:59:b1:f2:42:fc:f9:4e:4e:df:c1:18:55:2e:19:ca:91:6d:8b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 19:24:56 2023 GMT
            Not After : May 21 19:29:56 2024 GMT
        Subject: CN=6A61B3657792FDEA3119856DE8476D55D643BE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:84:e0:85:a4:28:b4:a8:bb:c6:38:d0:32:
                    43:60:93:75:ed:a6:cf:f5:f7:46:0e:a1:94:c3:94:
                    48:bd:2b:78:e5:2f:24:78:7d:3b:2c:7c:15:79:bf:
                    b5:e8:d4:4d:81:34:0b:75:9e:fd:a8:c4:72:a9:d4:
                    15:41:d8:53:04:e9:47:41:be:60:8b:39:53:64:48:
                    81:13:1a:e4:9a:07:fa:27:31:1f:39:36:33:f1:93:
                    a0:12:01:5f:1b:74:fc:9e:9f:43:7b:89:d6:76:f9:
                    c2:ab:be:ba:17:e3:2d:56:d4:4c:e4:c9:5e:a4:d7:
                    11:a8:89:9e:da:04:71:81:91:1d:46:8e:ad:30:a9:
                    5f:61:8f:4f:9f:23:aa:90:8a:18:53:c0:62:0d:19:
                    23:d7:74:14:14:10:17:a7:b4:1f:a4:ca:a6:d4:dd:
                    4f:0e:7b:5b:07:21:81:5b:a4:ae:83:93:c0:08:71:
                    ad:02:38:ef:e5:d5:2c:b6:12:47:5f:15:94:c1:9f:
                    ee:5d:99:34:96:c0:84:f0:dc:f8:89:86:4b:12:a5:
                    91:ae:38:f6:a7:4d:99:1a:da:15:cb:57:35:c3:b3:
                    84:5f:bf:74:2b:ed:87:b8:3e:38:e6:00:23:4c:15:
                    69:7f:41:9d:dc:6d:c5:1e:2c:69:b9:c2:3c:b4:33:
                    a3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:61:B3:65:77:92:FD:EA:31:19:85:6D:E8:47:6D:55:D6:43:BE:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/6A61B3657792FDEA3119856DE8476D55D643BE12.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.120.0/22
                  170.233.168.0/22
                  177.91.128.0/22
                  200.225.108.0/22
                IPv6:
                  2804:11d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263441

    Signature Algorithm: sha256WithRSAEncryption
         7d:4d:7c:aa:9e:63:c8:3a:83:ab:82:69:76:33:15:5b:43:cc:
         44:09:da:16:ce:0b:11:1e:7a:16:1b:0d:57:cb:c8:da:c7:42:
         e1:72:f9:e6:15:2b:6b:68:52:2c:37:07:45:cd:68:07:e4:f7:
         c4:21:be:c5:ce:b9:30:b5:ad:30:3f:05:bd:27:e8:d1:f3:4c:
         e6:eb:16:9f:2f:2f:9e:26:d8:31:a6:2d:98:d3:ec:93:6e:1c:
         ed:0c:0c:ce:09:5b:39:06:d9:64:0b:9d:d0:e0:f6:33:83:0b:
         5c:e1:79:24:aa:f2:3b:e8:57:09:cf:e2:85:03:d7:1d:67:7c:
         17:65:1c:cb:22:32:51:52:63:cd:9e:58:75:d2:cf:d1:99:bc:
         3e:29:2e:4f:88:31:22:08:37:ee:4a:3e:6b:c9:43:6d:7b:56:
         cb:66:32:88:88:3b:10:a2:29:64:73:fe:b5:b6:e9:2c:a1:bb:
         6a:95:14:09:4e:7d:b4:02:90:c4:ce:0d:85:29:50:7b:bf:d8:
         28:ce:d8:b3:59:38:82:e4:93:42:a6:c0:01:e2:06:71:6b:ec:
         bb:f9:31:4c:0e:5d:64:e3:92:ad:b4:a8:c5:0e:ed:39:50:9e:
         fd:c0:0b:94:a5:66:03:6c:f1:2d:e0:41:49:bb:3c:43:4c:87:
         c6:04:87:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org