Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
File:                     6BB28979534152D56CDB8941822004B21C044476.cer (raw, json)
Hash identifier:          nvlLVPS/ExWPBt5crwfQ1/OruhcsNaLmgWgDXYPAmQo=
Subject key identifier:   6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       73204ED817819A88B05950B9D084214F7C7A476D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Mar 2023 14:44:33 +0000
Certificate not after:    Thu 14 Mar 2024 14:49:33 +0000
Subordinate resources:    AS: 28656
                          AS: 262514
                          AS: 264228
                          AS: 269629
                          AS: 271443
                          IP: 45.190.116.0/22
                          IP: 168.195.100.0/22
                          IP: 170.80.64.0/22
                          IP: 177.55.176.0/20
                          IP: 177.55.224.0/20
                          IP: 179.0.72.0/22
                          IP: 190.52.72.0/22
                          IP: 190.109.64.0/22
                          IP: 201.77.160.0/20
                          IP: 2804:568::/32
                          IP: 2804:2488::/32
                          IP: 2804:33cc::/32
                          IP: 2804:6774::/32
                          IP: 2804:7944::/32
                          IP: 2804:7ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:20:4e:d8:17:81:9a:88:b0:59:50:b9:d0:84:21:4f:7c:7a:47:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 14:44:33 2023 GMT
            Not After : Mar 14 14:49:33 2024 GMT
        Subject: CN=6BB28979534152D56CDB8941822004B21C044476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:36:d5:6d:96:40:44:ae:9c:f3:c6:85:3c:
                    c2:51:d7:13:1d:70:9b:df:ec:45:b2:7f:71:a5:01:
                    bf:3e:42:33:48:ac:c1:ca:e9:9d:0a:e2:1c:87:06:
                    bd:b3:31:cc:fb:68:7d:a2:82:2d:9e:92:8c:34:d9:
                    fb:e6:15:f7:b9:2b:4a:01:c1:be:20:a8:37:85:78:
                    ff:89:77:53:1c:fe:aa:b9:c5:22:c5:c7:ef:28:0b:
                    d2:26:50:68:22:5a:4a:f3:84:8f:e4:92:b4:f7:83:
                    41:fb:74:7a:ec:78:82:09:11:57:71:68:c1:2e:69:
                    06:58:fb:85:75:17:7a:e4:fb:7a:af:8c:67:f9:77:
                    a6:88:ac:84:8d:f6:85:0a:f5:58:d4:32:4f:9e:a0:
                    55:7f:7f:71:d1:be:00:6c:68:44:b5:e5:6e:da:e8:
                    dd:1b:3b:c3:a2:e1:77:9e:8a:81:dc:7f:f1:d1:a3:
                    f7:94:73:4a:a0:08:67:7b:54:a2:46:dc:4a:6c:b4:
                    fa:2e:eb:bc:40:6f:d6:46:9b:e5:a1:22:b7:60:8a:
                    91:f8:c6:3f:9c:81:e0:df:6e:6b:35:7c:4d:6b:7a:
                    01:b6:1d:03:c1:17:a1:e4:4e:00:ce:20:4d:44:ef:
                    ad:d5:5f:aa:ae:67:36:96:97:36:e9:5e:c1:47:8e:
                    4c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.116.0/22
                  168.195.100.0/22
                  170.80.64.0/22
                  177.55.176.0/20
                  177.55.224.0/20
                  179.0.72.0/22
                  190.52.72.0/22
                  190.109.64.0/22
                  201.77.160.0/20
                IPv6:
                  2804:568::/32
                  2804:2488::/32
                  2804:33cc::/32
                  2804:6774::/32
                  2804:7944::/32
                  2804:7ba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28656
                  262514
                  264228
                  269629
                  271443

    Signature Algorithm: sha256WithRSAEncryption
         8f:1f:24:b6:5d:4a:8e:d9:c0:0a:ad:16:aa:f4:1a:16:39:2a:
         cf:be:1f:eb:81:b0:28:ad:1f:9c:a7:df:5a:4f:5c:d2:9a:1c:
         bd:af:53:4d:c9:7c:2d:8b:81:98:31:5f:89:29:1b:2b:b9:db:
         47:05:23:0a:d3:82:f7:ec:a1:0e:55:8f:02:56:96:00:d4:c5:
         41:dd:9d:2c:bb:2e:4c:cc:fa:fa:90:5f:f0:47:bc:cf:1c:ec:
         51:c6:73:57:3a:8a:be:66:b7:8d:ec:f0:f5:66:f4:0e:fb:47:
         c7:f9:af:b6:26:ac:19:4f:1f:ae:b1:75:2f:ca:57:1b:ae:34:
         96:c0:2f:1f:01:88:77:44:c5:85:32:5a:2a:e4:84:92:a1:b6:
         09:49:08:27:8a:81:5b:87:59:d1:5f:d6:a4:0d:44:2b:62:44:
         dc:52:7c:98:ba:4a:f5:4b:32:99:52:d8:f5:27:93:2b:c8:8a:
         b4:f3:37:cf:cd:98:85:80:14:7f:34:9c:41:ae:52:37:aa:22:
         cc:ff:27:26:77:55:8f:95:d8:97:68:6e:87:8e:40:a9:27:ca:
         8e:f1:fe:72:36:d8:0f:1a:4d:ba:cb:ce:b5:85:bf:71:67:a2:
         6c:dd:a4:91:4d:17:ff:0b:35:09:26:84:5b:2b:ad:68:a5:11:
         28:22:98:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org