Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6C1E9A9DB020B10AEEF67012284C4AB2C38C661B.cer
File:                     6C1E9A9DB020B10AEEF67012284C4AB2C38C661B.cer (raw, json)
Hash identifier:          IUggluG5WDXHzobSLGDrFYO+NtZ2KaMpMRJezhkhqQE=
Subject key identifier:   6C:1E:9A:9D:B0:20:B1:0A:EE:F6:70:12:28:4C:4A:B2:C3:8C:66:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0839F151436B33F2CE24588EB4C4502502BB67AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/6C1E9A9DB020B10AEEF67012284C4AB2C38C661B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 19:06:20 +0000
Certificate not after:    Mon 31 Mar 2025 19:11:20 +0000
Subordinate resources:    AS: 273485
                          IP: 2804:8f58::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:39:f1:51:43:6b:33:f2:ce:24:58:8e:b4:c4:50:25:02:bb:67:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 19:06:20 2024 GMT
            Not After : Mar 31 19:11:20 2025 GMT
        Subject: CN=6C1E9A9DB020B10AEEF67012284C4AB2C38C661B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:94:7d:ad:d3:ab:c1:3d:c0:03:e8:c3:fc:ee:
                    b0:3b:f8:b9:ff:bb:3a:89:5e:e5:a8:fa:8c:af:15:
                    6e:d4:1b:5b:8a:e4:d5:8a:6f:e5:b8:04:03:b8:21:
                    a9:22:62:c5:98:1b:6c:0c:a5:17:b9:b0:b6:20:4e:
                    a0:2e:b7:ba:1b:35:13:68:35:37:48:c8:6b:77:6a:
                    f6:77:b1:b7:11:86:7b:ef:11:63:4b:5b:7f:e7:df:
                    49:d8:1a:d7:0a:b4:e7:fd:ca:a8:55:c7:62:1f:ae:
                    7c:e2:74:1e:91:db:e0:99:fc:60:91:13:a5:44:36:
                    da:a3:a4:53:36:b0:9e:a6:df:54:0e:ad:ae:a9:64:
                    1c:49:28:0b:7d:ab:87:b3:ae:e5:d8:b6:c9:4a:e1:
                    51:87:8a:2c:31:65:46:7a:86:98:19:99:20:aa:6d:
                    40:56:6e:d1:3f:de:98:3b:fe:80:db:5b:b5:15:03:
                    c0:4a:d6:d3:57:aa:1f:7d:53:e0:ff:9a:0d:d6:48:
                    c3:ee:6b:be:c3:35:1a:bd:1e:3f:da:bb:ad:1a:d6:
                    3c:42:ac:05:69:23:9c:1a:85:90:1a:19:86:8d:7c:
                    30:d3:a9:b9:90:7d:49:bb:b4:25:df:8c:e4:81:99:
                    2c:f2:8b:27:81:8a:e8:3c:5f:e1:85:d4:a5:23:88:
                    21:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:1E:9A:9D:B0:20:B1:0A:EE:F6:70:12:28:4C:4A:B2:C3:8C:66:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/6C1E9A9DB020B10AEEF67012284C4AB2C38C661B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273485

    Signature Algorithm: sha256WithRSAEncryption
         87:2f:d7:80:5a:1d:bc:dd:4b:46:d5:af:28:92:7d:05:da:47:
         fa:f3:6c:ee:3f:dc:4d:ce:33:fa:a0:f3:95:d9:fb:9a:90:9c:
         b6:ea:86:3f:06:dd:be:44:f3:0f:ac:c3:3c:12:83:c9:cd:fd:
         27:99:ea:ed:55:41:aa:10:51:dc:78:76:c0:cc:ad:59:b2:ab:
         32:b0:4e:0e:1b:23:23:7c:f6:79:05:85:ea:21:b4:81:2c:a9:
         3b:1f:11:6d:bb:df:e6:dc:f8:bb:ec:f1:40:81:67:ae:18:b8:
         74:44:e9:da:f2:6a:07:09:1f:34:dc:9a:60:af:c7:58:83:ad:
         ff:2e:e4:77:a6:4b:94:d6:b8:b5:89:dc:11:0a:91:03:fb:f5:
         a2:ca:e7:0b:aa:34:16:93:13:77:74:fe:af:3b:58:b1:e9:1f:
         de:12:5e:0c:4e:7f:28:f1:bd:fc:51:1a:90:80:f6:b6:33:d0:
         16:3f:ad:bc:23:6b:7d:7d:95:73:79:0f:5d:9f:ce:a5:d1:0f:
         60:d7:57:1e:d8:fa:3b:37:d2:5f:da:89:6d:bb:29:c2:47:31:
         c9:24:70:d9:a2:f1:a2:09:92:bf:43:62:c3:a0:59:d1:cc:68:
         aa:1f:e7:e3:2d:c3:0b:bb:73:1f:e6:83:eb:a9:6d:3b:5d:52:
         99:8e:08:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org