Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.cer
File:                     6C09F94E9C74C1F19763139DE321D52AD02F1DB8.cer (raw, json)
Hash identifier:          9H0si/DSw5eZZ7KWkYwEKE2p8iyy+3vkLgyhWv9iPR4=
Subject key identifier:   6C:09:F9:4E:9C:74:C1:F1:97:63:13:9D:E3:21:D5:2A:D0:2F:1D:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       14844E749BEB30A09ADEFF6337F320DAD9619826
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 20:39:11 +0000
Certificate not after:    Thu 12 Sep 2024 20:44:11 +0000
Subordinate resources:    AS: 266418
                          IP: 170.81.164.0/22
                          IP: 2804:377c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:84:4e:74:9b:eb:30:a0:9a:de:ff:63:37:f3:20:da:d9:61:98:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 20:39:11 2023 GMT
            Not After : Sep 12 20:44:11 2024 GMT
        Subject: CN=6C09F94E9C74C1F19763139DE321D52AD02F1DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:5f:53:c5:09:70:4f:11:81:eb:5a:80:d0:
                    24:4f:6b:fb:03:a6:48:05:f0:92:ad:08:f2:1d:89:
                    00:d2:af:e5:98:ca:98:81:26:a1:ae:16:9f:41:a9:
                    c5:4b:b6:aa:4f:c3:69:91:b1:5f:5e:4c:53:4e:93:
                    09:c1:82:7d:a2:38:e5:34:81:33:d8:d4:82:72:37:
                    1b:77:e7:1a:bc:f2:8e:38:30:b9:c0:31:90:ed:03:
                    4b:96:2e:40:bd:96:da:b9:d9:5f:27:ff:21:74:83:
                    77:88:f9:78:8f:4b:50:7d:04:67:77:1a:77:8c:07:
                    e0:fc:8d:20:ee:6f:59:84:52:e2:de:ba:01:dd:3f:
                    a1:87:7c:4a:bf:c9:21:d0:5c:16:db:89:82:e6:6f:
                    70:8c:26:ad:59:41:fd:4e:a7:9c:5e:a3:05:3b:d7:
                    64:68:63:82:4b:68:09:e7:7b:06:38:66:df:53:12:
                    48:ef:98:4a:f9:5e:71:ef:b5:d3:8e:07:b7:99:a2:
                    c3:7f:f8:7e:a7:c0:64:dc:3a:98:c2:a1:d8:9d:19:
                    a9:5c:8f:fc:81:04:0a:a7:d4:be:b7:1e:01:de:cd:
                    4a:d3:f3:e7:ba:78:28:7c:6c:13:65:7c:31:02:64:
                    bc:6c:b3:a9:e8:59:b7:96:fd:50:e2:52:17:e9:c1:
                    50:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:09:F9:4E:9C:74:C1:F1:97:63:13:9D:E3:21:D5:2A:D0:2F:1D:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.164.0/22
                IPv6:
                  2804:377c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266418

    Signature Algorithm: sha256WithRSAEncryption
         53:f7:9e:c4:be:1b:a3:77:71:79:d9:2f:bb:61:1c:d6:6b:70:
         2a:01:e3:ce:92:22:0f:dc:cd:10:6b:e3:b3:d4:8a:a2:05:f8:
         c6:f1:51:9f:61:1e:02:66:79:f4:79:29:40:d6:ea:ba:99:27:
         fb:32:49:4f:46:ab:47:bc:a5:83:fd:9c:03:8b:5a:f0:ac:eb:
         7b:8b:3e:df:01:14:49:3a:b8:2f:7e:0c:09:0a:4f:bf:d2:a0:
         46:82:4e:ab:56:cb:7e:a7:0f:21:e3:b9:1d:4b:88:9f:82:35:
         17:30:81:5a:0b:dc:ed:88:fc:bb:ce:2a:44:b0:3d:e2:76:a2:
         b8:ed:50:e1:8c:c3:7e:eb:6a:d2:01:b3:ae:2b:17:e3:bb:23:
         ab:18:7c:54:3b:ee:a7:7a:fd:2a:58:1d:47:85:c5:64:1b:f2:
         ef:d1:c3:8f:66:23:8d:98:db:ea:66:1e:89:21:1f:93:e2:0e:
         97:d9:4f:c4:1c:33:98:ca:06:9f:9a:0b:b3:1d:6c:32:93:cd:
         41:f4:55:6a:2f:90:b1:26:28:da:15:3d:1c:8d:5f:f0:cf:a8:
         88:6b:0d:38:6b:33:b6:0c:fe:29:08:dd:9b:44:26:00:89:f7:
         49:71:f5:93:ba:83:73:46:5d:28:27:54:21:7a:a5:60:5a:9d:
         b3:25:24:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org