Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6C85C8A639DBE761775D88F6F11E7F3E3E4CAA9F.cer
File:                     6C85C8A639DBE761775D88F6F11E7F3E3E4CAA9F.cer (raw, json)
Hash identifier:          wTxdZ5EB4WxjykKGX2wCCEICu8M6ix25w8ANTEGhMJQ=
Subject key identifier:   6C:85:C8:A6:39:DB:E7:61:77:5D:88:F6:F1:1E:7F:3E:3E:4C:AA:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       760B1F49AAE572BD712EB5C72386B03E4576CE9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JDNyQ9Zd66tLsVVyrM1y4TjVv67MkFmHjafmcsNBC4QE/0/6C85C8A639DBE761775D88F6F11E7F3E3E4CAA9F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JDNyQ9Zd66tLsVVyrM1y4TjVv67MkFmHjafmcsNBC4QE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 11 Feb 2023 12:46:56 +0000
Certificate not after:    Sat 10 Feb 2024 12:51:56 +0000
Subordinate resources:    AS: 273623
                          IP: 2804:89bc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0b:1f:49:aa:e5:72:bd:71:2e:b5:c7:23:86:b0:3e:45:76:ce:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 11 12:46:56 2023 GMT
            Not After : Feb 10 12:51:56 2024 GMT
        Subject: CN=6C85C8A639DBE761775D88F6F11E7F3E3E4CAA9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:21:d7:f2:95:9a:6b:e3:42:e1:40:c7:3b:
                    84:d1:fc:b4:ac:56:5e:be:31:85:f0:35:1c:4f:55:
                    be:03:bd:59:c4:ea:d4:db:7a:5a:19:2d:06:e3:42:
                    3e:8a:47:31:47:ca:ce:b9:8f:c1:73:81:72:71:d3:
                    ef:3d:f2:c4:98:29:ee:1f:9d:d7:8a:ad:bc:4a:0e:
                    7b:2e:c8:6b:28:5a:ab:2e:64:dd:d5:01:be:88:a0:
                    6c:5e:85:fa:03:d1:f1:b1:a1:1e:21:25:b0:85:8a:
                    f3:12:ca:5a:0e:6b:68:aa:cf:8b:02:08:fc:70:26:
                    05:99:39:b3:98:c2:ca:ec:dc:a7:f2:1e:f2:84:5a:
                    fb:6e:6f:a6:fb:af:1b:4a:da:09:d3:93:b3:e5:f1:
                    b7:f9:2e:47:d1:8f:28:e3:87:54:be:0c:16:81:7a:
                    4f:e2:f1:95:8b:19:36:f5:d1:bc:7e:2b:f0:4c:32:
                    ef:88:2f:ac:22:8c:98:57:eb:6d:4e:de:12:1b:46:
                    cd:42:84:d7:ea:37:e6:c1:3b:7e:78:af:db:70:a1:
                    f0:fd:7d:5c:cc:72:f1:93:10:87:2d:f2:72:14:93:
                    9e:9b:0c:72:4d:1d:72:d1:80:67:94:40:60:c7:51:
                    10:b4:c0:21:3a:43:dd:94:d0:87:01:39:77:03:3a:
                    1e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:85:C8:A6:39:DB:E7:61:77:5D:88:F6:F1:1E:7F:3E:3E:4C:AA:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JDNyQ9Zd66tLsVVyrM1y4TjVv67MkFmHjafmcsNBC4QE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JDNyQ9Zd66tLsVVyrM1y4TjVv67MkFmHjafmcsNBC4QE/0/6C85C8A639DBE761775D88F6F11E7F3E3E4CAA9F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:89bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273623

    Signature Algorithm: sha256WithRSAEncryption
         7d:e3:93:ed:90:81:43:e5:c5:5a:5b:db:e2:87:a2:f1:c1:d4:
         cb:5a:36:6b:a8:77:99:71:8f:8c:ab:7f:2a:95:1b:51:5e:de:
         fa:4c:04:70:e8:8b:cd:a4:53:b3:5a:9b:a9:fd:e2:c3:e6:fb:
         5a:b6:20:41:72:02:a8:5b:3d:48:d3:bb:a0:6c:9b:b6:ad:c1:
         c5:09:99:7d:d9:52:8e:21:66:89:b3:a1:7c:22:93:73:ca:7a:
         13:5a:87:b1:1d:c2:4e:41:c2:27:4e:c3:cc:35:0f:97:c1:5f:
         0b:1c:20:56:94:fb:6d:8f:33:7e:bb:2c:f1:5d:48:07:87:0c:
         ff:de:46:31:89:c1:68:ba:19:d3:ca:ca:af:1a:f2:03:ae:1e:
         f6:5a:73:45:d0:f4:eb:62:e7:6f:5c:a0:bf:57:d4:d7:3c:69:
         e9:29:ce:4d:c7:35:85:c9:5b:6b:9e:73:76:c8:92:93:0c:bf:
         41:e7:50:b2:03:dd:55:c3:3b:d3:7f:da:61:c5:8d:ef:53:df:
         2e:92:e8:7e:b4:0c:34:ad:da:c8:da:bb:7e:a1:88:ae:87:40:
         21:33:cb:d3:8e:20:6d:99:85:5a:a0:6e:99:0b:a6:7b:66:25:
         55:cb:c1:23:f4:9a:20:d9:d6:15:9f:cb:07:99:ed:28:25:f4:
         fa:20:49:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:52:54 2025 by rpki-client