Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833.cer
File:                     6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833.cer (raw, json)
Hash identifier:          kP9xG34IfT36Bi/PMC/6vFtS+Gz0CezvftvaIm4JxFk=
Subject key identifier:   6A:9C:DB:21:CB:C7:29:20:35:9F:90:CB:77:FF:7E:CA:FD:AB:08:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       31943199A3A779147FD0E38FCA6BD3A48917609A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Aug 2023 20:51:39 +0000
Certificate not after:    Wed 07 Aug 2024 20:56:39 +0000
Subordinate resources:    AS: 271220
                          IP: 179.49.244.0/22
                          IP: 2804:7818::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:94:31:99:a3:a7:79:14:7f:d0:e3:8f:ca:6b:d3:a4:89:17:60:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  9 20:51:39 2023 GMT
            Not After : Aug  7 20:56:39 2024 GMT
        Subject: CN=6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:95:6c:d4:22:4c:8b:34:f9:90:95:da:08:
                    87:86:51:22:34:c6:0d:c4:fd:4b:2d:0f:56:e0:73:
                    8b:e1:10:0d:3d:a6:5e:65:0a:26:0d:e8:5c:5f:a7:
                    56:79:81:a6:be:72:8d:cb:54:7a:28:9d:41:e4:05:
                    7f:5f:f5:61:c8:b7:6b:6b:f9:c4:33:67:fc:07:7c:
                    2e:de:34:3f:c3:d7:35:fa:e8:7f:07:d0:58:40:20:
                    90:17:d1:7c:79:26:cd:d7:f4:5f:36:b6:cb:bc:12:
                    e6:40:b4:c2:80:70:16:eb:cc:66:99:26:56:45:e4:
                    ba:f6:08:05:2b:0a:25:62:94:31:9a:6c:80:c0:10:
                    95:07:ea:bc:f2:9b:55:fc:bb:a5:71:1c:3c:bf:b1:
                    77:3f:9f:bd:4a:6d:8f:6b:84:70:5b:06:73:8e:2a:
                    f1:31:6e:c0:ac:49:e6:6b:6e:1e:84:05:e7:b0:46:
                    3e:1b:81:18:05:03:75:2d:ce:eb:c0:4e:52:d5:f5:
                    31:fa:0b:7b:33:50:c3:6a:57:75:14:b2:25:66:5e:
                    a1:9a:f9:60:a7:fa:02:5b:5d:01:2c:16:5d:14:78:
                    15:72:bf:f0:0d:1d:01:0c:5e:3d:a0:cd:9f:38:77:
                    45:75:68:f3:bc:07:f2:67:42:3a:bf:7f:42:4d:4f:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:9C:DB:21:CB:C7:29:20:35:9F:90:CB:77:FF:7E:CA:FD:AB:08:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.244.0/22
                IPv6:
                  2804:7818::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271220

    Signature Algorithm: sha256WithRSAEncryption
         87:4c:05:6d:27:6b:a2:ae:17:f6:3d:df:42:11:c0:73:56:50:
         fb:99:57:7d:9e:ab:87:20:d8:7d:b7:47:69:a6:53:56:4e:bc:
         10:1e:28:04:53:73:ee:df:11:6d:35:e6:3a:10:ce:c6:62:96:
         2b:4b:6a:f2:cd:91:2a:18:e7:ce:83:4a:6e:d9:6e:a7:f0:e4:
         f0:fa:c4:0f:e9:01:aa:fa:1b:6f:7e:af:f9:bb:bc:e8:ee:8f:
         89:04:3b:ba:0b:92:0c:af:af:a5:b7:98:a6:fa:76:4f:e0:49:
         fd:17:7b:bc:68:b3:ff:3d:83:51:db:6f:d4:bc:d0:b8:6e:b2:
         f7:94:b5:20:f7:6e:e9:d7:c4:1e:d1:95:70:53:c4:44:d9:03:
         f8:f5:f2:31:dd:95:58:d9:b9:98:80:4e:74:ab:59:9c:5d:16:
         5a:87:da:6c:c9:0d:b7:e4:7d:3a:4e:c8:d2:d2:59:4b:14:73:
         1c:43:56:ef:5e:6d:18:49:7a:cd:14:ed:56:09:ae:14:91:5d:
         ea:3d:17:d7:fe:8f:a4:3e:a7:d1:7c:f2:72:59:28:6d:db:fe:
         12:1c:3a:40:2b:2f:a1:cd:6b:09:74:83:13:30:55:f4:ec:e9:
         40:78:d4:3f:3c:bc:21:5c:cc:39:42:69:eb:02:a6:af:f1:b1:
         20:c9:84:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org