Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6C55FE03EA950F41E4A83AF5B273E3D290FD33D7.cer
File:                     6C55FE03EA950F41E4A83AF5B273E3D290FD33D7.cer (raw, json)
Hash identifier:          d+JlVQ84AB8rOKL9r5S13AvBu0ikgY92q8arw6BkoTM=
Subject key identifier:   6C:55:FE:03:EA:95:0F:41:E4:A8:3A:F5:B2:73:E3:D2:90:FD:33:D7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C2856BB9F632835A0323A4E84C85158BE4C7ADE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/6C55FE03EA950F41E4A83AF5B273E3D290FD33D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Jul 2023 20:16:27 +0000
Certificate not after:    Wed 24 Jul 2024 20:21:27 +0000
Subordinate resources:    AS: 266484
                          IP: 170.83.168.0/22
                          IP: 2804:3888::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:28:56:bb:9f:63:28:35:a0:32:3a:4e:84:c8:51:58:be:4c:7a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 26 20:16:27 2023 GMT
            Not After : Jul 24 20:21:27 2024 GMT
        Subject: CN=6C55FE03EA950F41E4A83AF5B273E3D290FD33D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:2e:46:fc:66:f3:77:f6:04:6d:7b:16:07:
                    b9:74:37:35:8f:6e:89:f8:b3:c2:ae:36:3d:b2:0d:
                    19:14:0f:f2:ba:2c:5f:42:65:90:e1:9b:f5:15:8a:
                    bb:47:d0:af:47:a0:53:1d:35:3b:a5:c9:71:d1:a6:
                    37:ad:6c:ac:91:a4:e3:90:e0:57:71:e3:b4:61:42:
                    b9:4c:c4:3d:6d:71:14:8c:5e:88:09:e7:84:c9:51:
                    55:0b:37:43:df:dd:f3:e9:b9:da:88:22:4d:11:d4:
                    63:04:d4:ec:0f:31:8c:a2:fd:a9:2c:65:ae:76:26:
                    d9:a9:6e:65:00:1e:47:33:0d:6f:cf:ab:1c:b8:4f:
                    7c:c8:03:e3:3b:47:85:f4:65:f4:1f:2b:89:6e:6b:
                    3b:d9:a0:2c:19:f8:58:5b:91:88:bc:9f:bd:9d:1f:
                    1a:79:08:27:42:3d:62:e3:e4:b4:d1:ee:8a:f5:20:
                    b7:b4:4b:6b:77:d1:0b:97:53:09:8a:e9:66:11:0c:
                    99:b2:ae:5d:c3:59:cd:17:b9:b4:27:3c:c9:09:99:
                    48:c3:1b:d5:e2:40:f1:b8:e0:59:df:b3:c6:fa:19:
                    4c:04:5e:1b:32:c6:33:02:29:4f:eb:37:db:19:6e:
                    ac:d5:0c:1a:48:80:31:13:4a:93:78:cc:53:63:68:
                    8e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:55:FE:03:EA:95:0F:41:E4:A8:3A:F5:B2:73:E3:D2:90:FD:33:D7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/6C55FE03EA950F41E4A83AF5B273E3D290FD33D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.168.0/22
                IPv6:
                  2804:3888::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266484

    Signature Algorithm: sha256WithRSAEncryption
         aa:53:79:1a:63:08:8a:c6:ac:22:5a:6a:85:15:a3:70:3a:e9:
         01:dd:4e:f2:bd:f4:f7:00:8a:57:da:9b:d3:a5:fe:5a:79:64:
         bb:6a:08:2f:f9:fd:e7:26:37:a7:75:ed:49:52:48:fd:d4:50:
         c8:8a:de:63:78:2e:66:b5:1b:de:b5:c7:2e:c0:57:9b:9d:72:
         a6:43:58:fe:35:33:9f:0f:51:ba:9f:d4:bf:17:b6:5e:7d:b2:
         6e:d8:40:28:e6:00:6b:8e:64:07:7f:f3:d7:4b:c2:6e:34:0b:
         89:4f:d8:0a:eb:14:4a:b6:73:9e:58:09:38:c1:15:ed:cb:ba:
         83:8d:b6:9f:29:1e:6f:ac:81:dc:5f:fd:e0:8f:88:07:53:bf:
         d9:fe:c6:6f:bd:29:b7:09:67:35:f9:53:73:a5:59:4f:0b:83:
         54:e2:4a:f3:51:8c:60:92:c6:94:5e:54:47:25:9f:df:3a:65:
         0b:8d:d8:18:c5:09:97:d1:db:ae:1b:b0:99:b5:74:5a:e9:d5:
         ca:ba:08:12:83:43:8f:59:84:a3:58:e8:c8:3f:38:75:71:31:
         3d:50:4b:f9:b1:c2:7b:63:9a:d0:3a:45:65:3e:e8:97:1b:b2:
         25:35:70:c6:6f:40:fb:9f:59:14:90:47:8a:a8:0e:4a:5f:21:
         80:6c:e8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:08 2025 by rpki-client