Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6A821BD2D07816445594943322E9E101F037181F.cer
File:                     6A821BD2D07816445594943322E9E101F037181F.cer (raw, json)
Hash identifier:          bx8FTQOu7L10cmwit5JZX/SrqSqEQF6hyqwJ5TKkXhA=
Subject key identifier:   6A:82:1B:D2:D0:78:16:44:55:94:94:33:22:E9:E1:01:F0:37:18:1F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       63FCBC78C0FE2129D135BFEE2734C7CC4FF381AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/6A821BD2D07816445594943322E9E101F037181F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Dec 2022 18:51:54 +0000
Certificate not after:    Tue 05 Dec 2023 18:56:54 +0000
Subordinate resources:    AS: 270701
                          IP: 189.127.132.0/22
                          IP: 2804:7010::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fc:bc:78:c0:fe:21:29:d1:35:bf:ee:27:34:c7:cc:4f:f3:81:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 18:51:54 2022 GMT
            Not After : Dec  5 18:56:54 2023 GMT
        Subject: CN=6A821BD2D07816445594943322E9E101F037181F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:7b:30:d8:20:fe:a2:01:86:bc:74:43:a2:
                    31:52:51:df:57:38:c2:24:4d:4e:c9:2d:c4:d1:7f:
                    ff:57:5f:6d:23:d3:cd:e0:80:16:0c:7c:b8:5a:c5:
                    d7:9f:1f:03:34:82:b3:d5:f4:1f:60:cc:fa:6c:b6:
                    be:cb:87:6a:47:f6:7d:5d:51:c9:78:30:5e:8d:f8:
                    f6:c3:53:0e:ba:7b:45:60:0d:eb:77:55:d4:ac:33:
                    1b:0b:db:6c:cf:a6:f4:0d:e5:fd:ff:37:60:45:e9:
                    62:da:b6:43:19:04:9c:86:b0:53:11:5c:03:73:aa:
                    7f:5f:f3:14:23:e3:f1:61:f3:0e:34:9e:2b:00:d8:
                    64:cb:c7:45:15:d5:60:87:75:9a:26:63:9a:51:f8:
                    ef:ba:83:69:67:5f:e1:5b:57:51:31:cc:b5:31:2b:
                    72:5a:5a:73:34:7a:3f:71:3b:ff:58:dc:41:c2:d3:
                    16:11:d0:41:06:b3:87:96:33:5c:b6:dd:d8:8d:7d:
                    01:9c:9d:94:13:5c:a0:88:e4:69:1c:1f:93:22:03:
                    7b:52:06:79:54:b8:3e:99:f9:4f:fc:63:89:08:68:
                    0e:9b:5c:97:ae:47:16:34:28:d9:de:06:5a:3d:7f:
                    cf:d9:c6:b6:9f:ae:74:2b:0e:33:b4:10:71:31:c5:
                    7e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:82:1B:D2:D0:78:16:44:55:94:94:33:22:E9:E1:01:F0:37:18:1F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/6A821BD2D07816445594943322E9E101F037181F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.132.0/22
                IPv6:
                  2804:7010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270701

    Signature Algorithm: sha256WithRSAEncryption
         9f:4b:35:16:9a:50:6b:45:1e:4f:fe:a8:2f:61:57:1c:34:53:
         4c:bb:ae:18:c4:12:3e:7d:99:5c:a7:76:47:aa:6b:3b:a3:5e:
         f8:40:9f:64:5f:a1:af:95:d8:bb:6a:36:95:5a:c0:9a:2a:6c:
         c0:2e:0f:ae:47:f6:cd:78:08:ed:ca:93:31:ec:15:6e:15:fd:
         b6:b4:39:73:96:6d:bc:d1:cd:33:a6:66:3c:b3:97:c0:d3:ff:
         40:ec:72:20:69:ba:f9:28:5b:8c:07:e5:3c:22:ae:29:d1:50:
         8f:f9:e9:59:09:0d:d0:89:f3:66:6b:f4:fd:0e:15:54:2d:b1:
         da:b3:88:b7:49:5b:71:e9:c1:d8:92:5a:b0:0b:e8:f6:8d:67:
         74:10:7f:fa:e6:cf:53:11:67:bf:4a:ee:ef:0f:a7:cd:1a:47:
         70:1d:d6:87:c3:2e:41:ab:f7:91:a4:47:9c:58:57:88:65:2e:
         3b:61:75:09:7a:95:52:9b:57:e3:1a:7b:7a:66:9f:f5:06:c3:
         c3:93:80:33:44:80:db:24:68:f4:63:b0:c7:46:43:41:c8:71:
         cf:8c:b4:59:5e:24:d6:9e:60:b5:9d:5e:95:69:42:9a:f1:59:
         20:8d:68:bc:b3:af:a2:8d:da:e7:1a:d2:92:87:97:cb:1b:ba:
         d3:54:c6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org