Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6AA653327DB763726AB6E1EA9F8796C258231F94.cer
File:                     6AA653327DB763726AB6E1EA9F8796C258231F94.cer (raw, json)
Hash identifier:          NML6b5szBPJ5k/8JPdaG8PZBX9fQmedTdixJV92DQqc=
Subject key identifier:   6A:A6:53:32:7D:B7:63:72:6A:B6:E1:EA:9F:87:96:C2:58:23:1F:94
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42ADC6E94BF890FDA8383A3B544E53B5078357D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/0/6AA653327DB763726AB6E1EA9F8796C258231F94.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Aug 2023 15:52:42 +0000
Certificate not after:    Tue 06 Aug 2024 15:57:42 +0000
Subordinate resources:    AS: 268526
                          IP: 45.162.28.0/22
                          IP: 2804:5290::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ad:c6:e9:4b:f8:90:fd:a8:38:3a:3b:54:4e:53:b5:07:83:57:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  8 15:52:42 2023 GMT
            Not After : Aug  6 15:57:42 2024 GMT
        Subject: CN=6AA653327DB763726AB6E1EA9F8796C258231F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:30:be:b6:51:4d:86:35:3d:b5:aa:b9:62:41:
                    4d:13:64:66:ef:4a:0d:55:b3:9b:6c:76:c7:ce:50:
                    72:38:23:6a:01:fc:57:93:b3:11:25:1f:54:3f:df:
                    24:78:20:27:3b:f0:f7:c6:13:16:1b:19:9c:02:65:
                    79:e3:a7:ae:5d:a9:a8:df:45:68:93:9d:b3:ed:2e:
                    8d:60:e3:fb:d1:b3:22:8f:bd:39:56:3b:9d:91:e1:
                    65:cf:09:b4:a4:61:ad:8e:31:fd:18:54:b6:1f:89:
                    bc:b7:d3:7b:68:f6:9d:91:c1:54:b9:3c:61:69:89:
                    fb:22:bd:f3:8f:1f:f6:be:cb:0d:6f:7f:e7:3b:a1:
                    68:98:67:1c:11:c0:01:f8:6d:97:e4:02:be:a1:8b:
                    eb:44:69:0a:88:7e:70:2d:0e:b7:16:4f:4e:82:99:
                    7c:3b:c4:47:a6:e1:4f:b8:21:6f:a1:7b:93:23:a0:
                    4e:6c:a2:41:4f:bb:4c:69:38:e4:4a:fc:5f:96:75:
                    4f:c9:ef:0c:a7:3e:a5:86:a5:b5:57:7e:5a:68:b6:
                    e8:6b:c5:5a:63:e6:49:5d:38:22:69:71:59:a1:4b:
                    90:cc:d9:d1:81:de:a9:6c:38:ff:b5:23:4a:6b:97:
                    fc:0e:10:23:c7:98:85:ca:72:43:0b:8c:0f:0a:8f:
                    b5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:A6:53:32:7D:B7:63:72:6A:B6:E1:EA:9F:87:96:C2:58:23:1F:94
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/0/6AA653327DB763726AB6E1EA9F8796C258231F94.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.28.0/22
                IPv6:
                  2804:5290::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268526

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:3c:59:19:85:ba:dc:16:70:13:26:4c:1d:73:48:88:f5:
         f7:b8:21:65:fe:07:a7:ae:d0:ac:ac:ae:ae:e7:86:be:66:d6:
         2d:db:83:7b:2a:c2:61:6f:44:ce:25:91:f6:11:d8:0d:8b:6b:
         12:63:83:72:c6:dd:01:b3:d8:9a:c1:a8:f1:4d:cf:9a:e2:39:
         e6:f7:69:aa:50:a0:77:b6:08:42:df:e1:c6:75:9d:78:5d:e9:
         61:63:15:7b:42:36:fc:1f:82:c9:a4:1b:81:09:e8:c5:cb:15:
         2c:fa:79:ba:27:d4:80:a9:17:b0:11:b9:9b:eb:88:77:9e:35:
         bb:a3:60:f6:b0:f6:42:d1:18:2c:77:06:5a:ff:ee:80:cd:2a:
         5f:70:48:77:1e:da:75:3a:d7:b6:80:99:49:0f:ac:42:e3:85:
         d5:17:97:45:bf:bb:73:e8:22:9e:af:0b:2b:76:00:3e:2d:70:
         45:6b:8f:ec:94:9f:96:f0:22:0c:17:e9:48:8f:c9:ca:47:99:
         d5:d2:6b:f2:ac:9d:7a:73:90:78:22:88:81:a1:21:ba:6e:49:
         43:ba:a9:16:28:b6:b1:81:0e:c0:81:ff:a0:14:7f:53:e7:a8:
         82:25:0c:cc:64:c4:1d:69:f2:24:70:43:53:51:44:90:3c:fa:
         5b:77:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org