Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6A64668FDE75978EE55DC6B74EC83A86047400A6.cer
File:                     6A64668FDE75978EE55DC6B74EC83A86047400A6.cer (raw, json)
Hash identifier:          mKk8q4ZZS9drUzt8443b69nvwqy59/n2+D7b22TIdCU=
Subject key identifier:   6A:64:66:8F:DE:75:97:8E:E5:5D:C6:B7:4E:C8:3A:86:04:74:00:A6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       73EEEA348FB39668E4F17E4DF1A75D27DF3555DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/6A64668FDE75978EE55DC6B74EC83A86047400A6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 13:00:58 +0000
Certificate not after:    Thu 06 Mar 2025 13:05:58 +0000
Subordinate resources:    AS: 272471
                          IP: 2804:81b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ee:ea:34:8f:b3:96:68:e4:f1:7e:4d:f1:a7:5d:27:df:35:55:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 13:00:58 2024 GMT
            Not After : Mar  6 13:05:58 2025 GMT
        Subject: CN=6A64668FDE75978EE55DC6B74EC83A86047400A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:90:ec:c2:f0:d6:46:e6:3f:a5:ce:ad:5e:ae:
                    be:ea:cd:2f:42:09:8a:35:12:90:95:ce:5c:d7:d6:
                    b3:94:29:e7:f4:98:47:50:c2:66:0d:8e:1d:9c:13:
                    80:d7:b9:83:cb:30:83:40:04:e0:b3:7c:ec:f1:63:
                    4d:84:44:d7:24:72:fe:5e:f0:3a:d5:a6:b9:c8:a6:
                    d5:d6:2b:81:05:81:7f:09:fd:a5:c7:fd:1a:27:63:
                    ea:6c:cb:38:1e:44:fa:1f:71:8d:64:77:ff:f0:2c:
                    47:1a:bb:7a:56:2e:8e:c5:09:af:cf:9c:9f:bc:71:
                    ce:f9:1d:c8:cd:70:6b:4b:c0:56:f8:25:3c:4d:db:
                    3e:91:f8:39:08:22:82:47:c4:e0:7a:4f:ba:b2:07:
                    48:e3:b0:4f:ad:01:4d:32:93:5f:58:83:90:9e:b4:
                    bb:af:b7:a0:51:e7:bf:88:51:e9:f8:43:34:39:87:
                    99:ad:26:8c:dc:24:f2:4d:72:4c:20:d0:ba:02:27:
                    b2:34:d7:c0:c7:f4:fc:3e:c4:7b:04:3d:db:aa:fd:
                    69:7b:96:d6:1c:06:4c:02:30:69:2d:d0:b2:a5:0d:
                    f5:e9:f7:ab:fc:97:38:b0:fa:50:de:d9:bb:0f:cd:
                    c9:9e:41:17:5a:ed:0d:00:2f:c0:7f:be:af:72:64:
                    69:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:64:66:8F:DE:75:97:8E:E5:5D:C6:B7:4E:C8:3A:86:04:74:00:A6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/6A64668FDE75978EE55DC6B74EC83A86047400A6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272471

    Signature Algorithm: sha256WithRSAEncryption
         95:d4:6f:d1:a9:eb:78:41:07:d1:cd:6f:4f:6a:55:bf:5b:77:
         b3:c1:9d:36:a5:5a:27:de:41:d5:4e:02:d8:b1:0a:38:e2:6e:
         5a:dc:f0:a8:d2:55:5d:6c:5a:26:f0:71:e8:e3:c6:18:81:36:
         24:a3:76:e2:d0:98:aa:57:70:c2:8c:95:3d:0d:ef:33:fb:4f:
         3b:a5:4b:b0:0f:40:e9:75:01:90:43:04:f2:57:d9:e5:7e:78:
         54:df:51:57:1a:d3:6e:23:1a:42:6c:47:83:d2:6c:33:7e:99:
         4d:ee:42:5d:5d:17:19:a8:2e:aa:38:57:08:4c:b4:fc:77:ea:
         71:60:76:81:37:41:83:b3:0c:08:d3:c4:03:ba:ec:4b:ae:cb:
         ae:4d:cd:b0:6d:90:23:46:c5:f2:00:ec:c3:cf:bd:7b:be:ee:
         80:07:8f:da:23:53:63:72:1e:cd:80:d6:08:04:14:11:80:7a:
         28:41:30:9d:fc:20:3d:48:26:17:7a:f1:92:ba:7f:48:64:11:
         06:2e:8d:3c:e0:9b:55:3d:4e:b1:6a:54:df:4f:4e:22:5e:53:
         ad:b0:fb:55:1e:6d:9d:0a:19:5a:35:8d:36:b7:9b:83:8a:1d:
         00:d1:87:e6:fa:95:53:dc:0e:82:0b:2f:b9:68:fb:63:8d:12:
         00:e0:b1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org