Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6AFADF67C15329A0A3A3656DFFDF6CF4FA5185D9.cer
File:                     6AFADF67C15329A0A3A3656DFFDF6CF4FA5185D9.cer (raw, json)
Hash identifier:          Iqw0mcaYvH39Wf6G9K+/R2g4JhKtBVSdIlbVGKNhrjI=
Subject key identifier:   6A:FA:DF:67:C1:53:29:A0:A3:A3:65:6D:FF:DF:6C:F4:FA:51:85:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7471980A993F65FB86304EFBA5AB3D2ADEC6DC1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/0/6AFADF67C15329A0A3A3656DFFDF6CF4FA5185D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:29 +0000
Certificate not after:    Tue 21 May 2024 09:25:29 +0000
Subordinate resources:    AS: 268819
                          IP: 45.173.88.0/22
                          IP: 2804:5b1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:71:98:0a:99:3f:65:fb:86:30:4e:fb:a5:ab:3d:2a:de:c6:dc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:29 2023 GMT
            Not After : May 21 09:25:29 2024 GMT
        Subject: CN=6AFADF67C15329A0A3A3656DFFDF6CF4FA5185D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:eb:9e:70:ad:1e:9e:f5:63:a7:3f:60:a9:
                    4b:a1:5b:43:69:e0:dd:bf:6c:55:85:2d:b3:2a:74:
                    7e:d6:f7:d1:e6:10:8e:68:93:4e:14:02:3c:97:a8:
                    4a:72:f0:95:f2:42:07:06:50:55:35:8b:3b:89:ad:
                    07:5d:02:f7:dc:e9:30:0e:02:a6:df:66:91:fe:55:
                    6d:93:0a:81:82:0a:21:7d:a5:7d:07:da:96:55:6c:
                    fb:b2:c0:6f:59:58:1c:ec:c7:48:82:be:b2:63:18:
                    cc:c1:91:c1:24:71:2a:51:4c:e3:f7:85:a9:4e:d9:
                    56:2c:63:ae:68:76:4b:32:c1:67:c7:3d:28:d9:45:
                    03:ee:7f:fe:e1:19:99:6a:aa:bb:d1:59:dd:c6:cf:
                    91:3e:44:61:3b:81:6b:9f:1e:af:3b:08:4d:14:63:
                    c2:5c:89:e6:b9:fb:84:12:58:82:80:82:42:dc:94:
                    17:66:22:2c:e3:24:9c:21:78:41:7a:3e:ae:74:c5:
                    c2:d3:69:fb:3a:c1:27:ad:63:0f:5b:8b:7e:60:50:
                    c9:87:ab:91:12:2f:5d:89:4c:a7:80:d4:23:04:42:
                    df:7d:54:c7:bb:3e:39:78:74:b7:93:17:21:11:b6:
                    7d:22:d2:7f:4e:ef:a1:66:15:8d:ea:38:6a:4a:4f:
                    5a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:FA:DF:67:C1:53:29:A0:A3:A3:65:6D:FF:DF:6C:F4:FA:51:85:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/0/6AFADF67C15329A0A3A3656DFFDF6CF4FA5185D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.88.0/22
                IPv6:
                  2804:5b1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268819

    Signature Algorithm: sha256WithRSAEncryption
         21:4c:03:6b:d2:50:ec:38:68:3c:0b:63:53:2b:37:0a:42:42:
         cb:94:1b:bf:d9:e6:b7:0d:ed:1f:26:bc:2b:a7:76:db:2b:5a:
         1e:9c:ad:39:1e:39:5f:0e:d2:86:ee:58:c8:91:da:4f:b3:2d:
         6d:91:6d:33:a6:24:cc:f3:44:f1:fb:63:96:ec:3c:a9:0b:e7:
         79:c8:b7:43:4f:29:da:38:28:b1:6d:75:15:4a:8c:e3:63:42:
         82:42:e0:fc:39:79:4a:4b:08:e0:e2:0d:5f:16:e2:45:4f:75:
         c5:0f:a1:3d:19:9c:c2:c0:b2:68:8a:37:c0:8b:75:50:33:4d:
         d8:05:2f:95:09:6f:c3:2b:a7:10:c2:da:89:71:36:90:b4:c9:
         ed:51:ef:4b:b0:89:e1:9b:4c:32:a7:35:4d:1d:17:da:7a:01:
         e1:e9:58:67:14:6e:42:49:4f:76:e9:36:ec:81:77:2e:64:c2:
         c8:5a:ab:df:76:9b:dd:7b:60:8c:61:b1:79:4f:f7:f2:74:ed:
         69:57:fa:b8:08:eb:15:2f:77:53:30:35:89:6f:b5:3a:d1:08:
         77:fc:62:8e:47:47:a1:3b:41:60:06:2e:24:1d:7c:c1:11:e5:
         8c:60:47:f5:3e:92:ee:85:c6:3d:4c:22:70:bb:0d:3a:2e:e0:
         18:fc:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org