Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6A9ACE35D57659504CE2A4010FE0DB8CED51F514.cer
File:                     6A9ACE35D57659504CE2A4010FE0DB8CED51F514.cer (raw, json)
Hash identifier:          fOyL/THPbum3RkRYS4j9qEKFK41LrPXjROSGeW8PYE4=
Subject key identifier:   6A:9A:CE:35:D5:76:59:50:4C:E2:A4:01:0F:E0:DB:8C:ED:51:F5:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       459C06368EB59427F5412DAC8D967C540E5394B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/6A9ACE35D57659504CE2A4010FE0DB8CED51F514.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 15:00:23 +0000
Certificate not after:    Mon 17 Mar 2025 15:05:23 +0000
Subordinate resources:    AS: 269456
                          IP: 45.187.52.0/22
                          IP: 2804:64e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9c:06:36:8e:b5:94:27:f5:41:2d:ac:8d:96:7c:54:0e:53:94:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 15:00:23 2024 GMT
            Not After : Mar 17 15:05:23 2025 GMT
        Subject: CN=6A9ACE35D57659504CE2A4010FE0DB8CED51F514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:11:3b:e2:36:d6:54:2a:81:50:9e:0c:21:
                    af:c0:a1:15:e8:f0:3a:1e:c6:73:e6:96:c6:8a:8a:
                    ed:86:dc:e8:47:2d:6b:56:5e:af:71:8a:69:45:dd:
                    6c:84:a1:98:36:2d:60:9e:02:e9:b6:e9:59:f4:03:
                    03:a4:cb:a5:bb:81:99:0c:26:c4:2c:15:96:7d:dd:
                    eb:d9:f5:70:87:7a:56:76:88:eb:4f:22:0d:20:81:
                    76:5e:da:f4:3f:2c:39:e2:ca:de:b4:18:af:af:1a:
                    44:43:27:7c:88:e9:02:78:54:89:74:c4:da:2c:c1:
                    92:05:9e:57:7b:a0:0f:4c:b0:16:a6:67:7c:3d:c3:
                    20:05:47:45:2e:43:63:e6:9a:eb:f4:fd:9e:a6:33:
                    fb:4f:e9:d5:eb:55:9f:63:3b:d6:7e:3e:1c:23:1c:
                    d9:e4:22:a4:35:7f:e0:49:58:c1:5e:df:af:24:9d:
                    ab:09:ae:f9:86:ae:b2:93:4b:5c:2a:a8:71:9b:06:
                    50:dd:fa:08:f9:f6:05:83:7c:1d:d8:a6:73:99:84:
                    b0:8e:8f:e2:c8:23:da:4d:9a:3c:95:9f:63:66:75:
                    2b:58:e1:db:14:08:c6:d3:60:a0:6f:e3:70:e3:7c:
                    fa:7a:61:2f:9b:ff:05:66:83:88:2f:6b:0b:9d:33:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:9A:CE:35:D5:76:59:50:4C:E2:A4:01:0F:E0:DB:8C:ED:51:F5:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/6A9ACE35D57659504CE2A4010FE0DB8CED51F514.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.52.0/22
                IPv6:
                  2804:64e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269456

    Signature Algorithm: sha256WithRSAEncryption
         90:52:03:0f:6b:db:f4:51:be:e3:bc:c9:c6:dd:83:18:e7:78:
         7d:4e:e2:28:af:aa:3a:5d:16:aa:ac:48:ab:48:e6:58:69:54:
         9a:df:49:4b:a7:9a:cd:7c:6b:46:e9:87:02:b0:63:a3:44:e7:
         a6:6c:88:08:f7:99:30:c8:0a:70:55:eb:9a:e0:58:5d:41:13:
         13:f1:1a:36:b8:3d:2a:06:9b:6d:82:13:1b:9d:97:3f:60:6f:
         30:39:bb:90:7c:9c:83:04:25:9a:b1:67:53:d6:55:2a:44:93:
         ba:77:7e:75:75:eb:9e:c1:78:4a:bf:69:ff:de:a8:d3:b6:02:
         0d:b0:dd:bc:6d:4f:b1:a7:85:ad:85:8f:35:45:82:3d:7a:03:
         b1:e3:31:29:17:fb:67:56:01:3c:8c:67:bd:72:b1:2e:7b:ca:
         3e:84:12:72:dd:db:72:ab:e0:cf:2e:a1:6d:b6:2e:1c:50:d5:
         ee:2d:bf:fe:91:03:f8:60:8b:79:2c:c8:51:db:61:05:69:f5:
         f5:57:30:ad:fe:99:96:4f:8c:46:a1:ea:ff:95:44:2c:dd:46:
         4f:d5:07:6f:a7:46:cb:d3:a5:d1:01:ed:d1:9e:ee:92:d0:19:
         5c:1a:bf:a7:47:86:b6:46:2a:9a:c9:90:96:db:94:e4:a0:79:
         f3:97:62:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org