Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6AFB9CAFC258AC507785B65A7E4451E1FFAAEA39.cer
File:                     6AFB9CAFC258AC507785B65A7E4451E1FFAAEA39.cer (raw, json)
Hash identifier:          Wd0p+zH01pOLA8ZUlVslC530BqLD+5iRaP+fLgGa+w0=
Subject key identifier:   6A:FB:9C:AF:C2:58:AC:50:77:85:B6:5A:7E:44:51:E1:FF:AA:EA:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       460EDF74927A732635B50899CC92E675791E83FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/1/6AFB9CAFC258AC507785B65A7E4451E1FFAAEA39.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Aug 2022 13:11:49 +0000
Certificate not after:    Tue 29 Aug 2023 13:16:49 +0000
Subordinate resources:    AS: 28128
                          IP: 168.195.32.0/22
                          IP: 187.19.48.0/20
                          IP: 2804:3458::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0e:df:74:92:7a:73:26:35:b5:08:99:cc:92:e6:75:79:1e:83:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 30 13:11:49 2022 GMT
            Not After : Aug 29 13:16:49 2023 GMT
        Subject: CN=6AFB9CAFC258AC507785B65A7E4451E1FFAAEA39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:59:99:05:d6:97:80:c3:d5:11:6c:a5:d7:ca:
                    89:04:ae:80:fc:71:24:2e:b9:7a:1e:3c:6e:72:60:
                    3e:98:81:14:74:a2:04:d4:18:81:db:7c:2b:43:43:
                    33:4b:54:bd:37:2d:4b:6c:2f:87:47:27:ec:ef:ca:
                    d0:c5:a6:49:0b:26:1d:8b:6b:4c:ca:6e:ca:ad:c2:
                    f0:d0:0c:9a:8c:14:dc:34:35:ba:23:82:56:bd:07:
                    54:f0:62:58:ca:0f:eb:07:97:c1:ac:80:f9:f9:f8:
                    8f:07:d0:e7:71:4a:8f:f5:32:ae:f2:5f:82:15:db:
                    db:57:16:08:34:de:4c:ec:ad:13:61:85:aa:d7:00:
                    82:ab:8b:27:99:89:ec:db:bd:1b:8c:af:70:90:a9:
                    39:b8:41:23:62:45:38:68:03:bd:e4:42:62:19:4f:
                    a4:8e:f0:ea:ed:69:1a:61:ad:72:f0:32:66:7d:5a:
                    09:21:a0:91:92:cb:69:03:df:7f:51:19:5a:12:e0:
                    c5:55:c8:50:a7:5c:2c:ed:4b:07:f3:79:c0:a3:5d:
                    f4:c8:e9:6f:82:af:d2:27:96:d7:68:bd:a7:37:1c:
                    b1:e1:e5:86:24:a1:8c:0d:4d:c8:96:66:b3:10:9d:
                    65:ce:22:ea:51:3d:e7:89:08:b6:c4:7e:0c:3f:bf:
                    c5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:FB:9C:AF:C2:58:AC:50:77:85:B6:5A:7E:44:51:E1:FF:AA:EA:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/1/6AFB9CAFC258AC507785B65A7E4451E1FFAAEA39.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.32.0/22
                  187.19.48.0/20
                IPv6:
                  2804:3458::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28128

    Signature Algorithm: sha256WithRSAEncryption
         4a:8f:94:50:5e:72:e9:07:37:a8:02:eb:11:34:6a:71:5f:ee:
         be:8b:0b:44:52:50:02:77:d4:62:30:a2:dd:8c:df:18:5b:6a:
         aa:1d:0a:fd:50:b4:e3:38:78:bf:4b:74:8a:3a:2a:83:92:3f:
         0c:c9:0f:69:9d:cd:4e:6e:2d:00:82:cf:57:21:4e:f8:b5:01:
         d0:04:36:0f:12:e7:8c:01:b9:6c:0a:33:42:d8:a9:bb:9f:ad:
         12:6d:e5:46:a6:59:26:8c:de:74:6c:38:45:9a:84:7e:68:b4:
         e5:7d:36:13:5e:61:4e:d1:54:ed:26:56:e5:aa:59:2b:d3:bd:
         2d:a0:36:b1:e8:7e:7e:9d:08:28:fb:cb:45:13:86:90:36:e0:
         d1:4c:0c:25:23:60:f3:46:46:54:2b:77:5f:ab:43:cd:a6:65:
         f6:b8:a6:e8:21:7e:bb:63:50:b0:d3:c5:7b:53:ac:8b:b5:b6:
         2b:69:5b:34:85:f6:df:ba:ae:66:b8:85:60:08:bf:87:28:fa:
         bc:4e:c6:c6:df:d2:5f:84:20:b4:49:da:4b:16:ad:42:36:89:
         21:1a:9e:12:d2:36:f1:c9:a5:ed:36:1c:68:f2:6e:fb:30:90:
         1c:2d:f1:72:41:93:d9:7b:e9:7c:f6:2c:b3:7e:cf:27:06:78:
         f6:a3:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org