Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6AAD43409F7A871B3C7BCE033232F1FA31358411.cer
File:                     6AAD43409F7A871B3C7BCE033232F1FA31358411.cer (raw, json)
Hash identifier:          mVdQctpyP/X2ilJ5wzv5qQ9D9dcOnT+1u0Ib8oYYh4c=
Subject key identifier:   6A:AD:43:40:9F:7A:87:1B:3C:7B:CE:03:32:32:F1:FA:31:35:84:11
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       190F87BA0C5832F811CBBE91FC9A0BCF9F8443BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/6AAD43409F7A871B3C7BCE033232F1FA31358411.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 19:20:15 +0000
Certificate not after:    Wed 18 Sep 2024 19:25:15 +0000
Subordinate resources:    AS: 262899
                          IP: 45.165.128.0/22
                          IP: 2804:554c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0f:87:ba:0c:58:32:f8:11:cb:be:91:fc:9a:0b:cf:9f:84:43:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 19:20:15 2023 GMT
            Not After : Sep 18 19:25:15 2024 GMT
        Subject: CN=6AAD43409F7A871B3C7BCE033232F1FA31358411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:c2:a3:e1:ff:ca:1f:f0:d7:1f:35:81:a2:
                    83:df:e5:44:bd:88:91:59:c7:4b:ab:1c:3f:f2:ec:
                    46:d3:21:37:bb:72:95:78:3b:47:31:96:46:9e:fc:
                    e2:1d:43:48:3b:23:ba:84:9d:d2:a7:65:e9:4d:aa:
                    f8:f4:ed:fb:10:b0:70:46:26:f4:b7:42:fb:50:9f:
                    9c:20:2a:75:4e:2c:71:2d:2f:46:ad:6e:a6:e6:7e:
                    4c:aa:aa:43:61:a0:39:d7:0b:4d:a7:aa:a9:2d:70:
                    f3:11:8f:4f:81:44:e0:fc:36:0b:0f:4a:0a:a2:40:
                    58:3c:a1:eb:6f:49:9b:28:23:4f:b7:3b:f7:7f:43:
                    bb:f4:cf:39:38:a8:49:dc:ab:7e:c2:00:e1:f4:ff:
                    9b:d5:2d:50:b7:93:6a:02:d1:51:62:17:57:47:0c:
                    d9:08:62:66:78:55:35:57:a5:05:c0:0f:c9:18:01:
                    38:9a:08:ef:b9:5e:3f:ba:47:40:8c:1e:72:44:d4:
                    77:62:e5:d9:80:31:0d:4f:a3:55:47:82:10:08:ad:
                    5a:69:92:dc:4e:ff:a5:3f:61:e3:9c:3c:d0:1c:31:
                    ec:86:ec:4d:75:2d:3d:a2:87:ad:46:ca:b8:1a:89:
                    8e:41:d5:7d:b2:51:82:95:8f:ac:60:54:6c:2c:a4:
                    66:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:AD:43:40:9F:7A:87:1B:3C:7B:CE:03:32:32:F1:FA:31:35:84:11
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/6AAD43409F7A871B3C7BCE033232F1FA31358411.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.128.0/22
                IPv6:
                  2804:554c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262899

    Signature Algorithm: sha256WithRSAEncryption
         92:65:46:99:00:82:be:c1:0b:66:6e:5a:4b:be:87:e0:c6:f7:
         77:2e:43:87:d9:10:ee:87:1d:07:76:44:c6:1f:3f:78:55:a8:
         d2:31:d9:37:5d:a3:d9:2e:65:78:47:35:19:0d:b1:83:34:3b:
         7b:57:a6:c7:dd:cb:77:b8:c2:82:26:96:72:db:b3:83:9b:c5:
         43:9c:6b:57:b7:9a:81:b1:7b:65:aa:d3:7b:7a:42:ae:01:b8:
         22:31:d1:77:c2:12:4d:15:51:74:7f:5c:f6:7b:ae:d6:97:a5:
         7a:f7:c5:76:a5:c1:fc:09:65:59:21:65:45:a9:d2:50:ac:ae:
         53:f7:9f:29:bc:ed:47:2d:31:9f:e8:80:04:f5:76:c7:70:cf:
         e9:05:08:30:c5:fb:4f:24:e5:ca:71:38:be:13:55:3d:4c:42:
         1d:a4:7b:e6:36:09:f0:e1:ff:93:68:75:3c:04:92:08:f0:92:
         c5:de:b9:2f:23:63:1d:2b:21:da:77:aa:06:63:f9:46:12:4c:
         b4:eb:7b:ea:c1:47:d5:e9:a9:64:44:88:7d:65:19:65:6a:34:
         6e:ac:df:e8:60:ec:0f:24:71:58:b6:4c:3f:d1:a9:3a:be:20:
         a3:29:bd:37:6d:9e:f9:d9:04:75:bf:1e:07:bf:25:d2:ab:b9:
         b8:e3:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org