Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6C93F8FAB97889E4B88F4BA5EC6E4E27B913D966.cer
File:                     6C93F8FAB97889E4B88F4BA5EC6E4E27B913D966.cer (raw, json)
Hash identifier:          kjVwbppZH8ZyJ6L6EAiKgmAW1mW8UPqTAFgkl2Q9GxQ=
Subject key identifier:   6C:93:F8:FA:B9:78:89:E4:B8:8F:4B:A5:EC:6E:4E:27:B9:13:D9:66
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11CAA8217A8D951DA73932B8A4B71D4C69A04FB2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/6C93F8FAB97889E4B88F4BA5EC6E4E27B913D966.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 15:20:52 +0000
Certificate not after:    Wed 18 Dec 2024 15:25:52 +0000
Subordinate resources:    AS: 53195
                          IP: 187.121.144.0/21
                          IP: 201.87.240.0/20
                          IP: 2804:3a8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ca:a8:21:7a:8d:95:1d:a7:39:32:b8:a4:b7:1d:4c:69:a0:4f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 15:20:52 2023 GMT
            Not After : Dec 18 15:25:52 2024 GMT
        Subject: CN=6C93F8FAB97889E4B88F4BA5EC6E4E27B913D966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:a9:5f:39:5d:72:ef:70:f7:2d:d9:9a:92:
                    8c:94:a0:4b:d2:b6:60:b9:a3:2e:ac:41:fc:a3:9c:
                    86:9d:f7:e3:0f:e7:65:24:de:52:03:28:5b:1d:2b:
                    3d:ad:3b:66:eb:4b:ce:82:a6:2d:62:05:1a:bf:a3:
                    de:26:73:40:8e:7c:27:6d:3f:cc:ed:5a:19:a8:58:
                    b0:a1:0f:7b:4a:75:86:28:a5:82:5a:fc:7d:73:44:
                    19:5f:58:03:53:00:7c:08:ad:45:6b:cd:88:fb:99:
                    53:70:34:7c:61:a1:24:87:09:68:b2:87:53:45:19:
                    24:3f:de:3c:5b:18:33:9b:6f:a9:f3:3d:41:d3:9d:
                    13:76:c9:31:0c:8b:ff:c1:e8:70:bd:72:12:90:46:
                    bc:1b:e7:ad:b6:96:38:a3:e0:34:4f:7e:10:d4:76:
                    d2:9b:85:6a:3b:09:c3:0b:62:78:2e:b3:c7:1c:3d:
                    08:90:3e:b9:29:34:d5:a7:e1:9e:f4:ef:6a:e6:bc:
                    f2:20:a3:b3:ed:1e:e8:43:50:12:cc:78:0f:86:f7:
                    23:3f:a6:0c:08:b5:5c:96:a3:dc:be:30:e5:cd:7e:
                    a9:f7:ed:ce:e6:3d:e2:72:b1:54:27:e6:3c:b8:d3:
                    02:db:71:c7:8d:7d:8e:d2:0b:a4:4f:e2:99:d6:76:
                    36:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:93:F8:FA:B9:78:89:E4:B8:8F:4B:A5:EC:6E:4E:27:B9:13:D9:66
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/6C93F8FAB97889E4B88F4BA5EC6E4E27B913D966.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.144.0/21
                  201.87.240.0/20
                IPv6:
                  2804:3a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53195

    Signature Algorithm: sha256WithRSAEncryption
         14:31:20:29:d5:7d:55:7c:b9:8a:05:de:b0:f0:cf:cc:63:34:
         e4:be:a6:8c:a4:05:ee:e1:38:01:8d:d8:56:cc:97:2a:db:3a:
         2b:96:0f:9c:61:7e:01:dd:26:bd:50:48:f4:85:b5:8e:5d:9c:
         3b:44:de:db:96:6d:e1:02:be:10:6e:b2:0b:b0:7c:a4:7b:5c:
         ab:99:0c:16:65:d3:25:c1:f8:c8:45:cd:47:6f:4d:53:c4:6f:
         06:5c:9d:a0:6d:c7:4b:d2:c5:94:cc:79:6d:b7:a0:80:b2:20:
         c4:01:46:c3:56:ab:72:b1:13:97:d0:e9:7b:17:90:9a:c7:d7:
         67:4e:c9:54:65:8b:d8:b2:de:1f:3c:b0:aa:55:04:57:96:d5:
         38:8c:03:f5:a8:74:b9:63:d9:45:86:33:a4:b2:3f:d9:f7:d7:
         25:6d:04:5d:1c:16:e3:29:2d:91:46:98:26:a7:b9:79:64:12:
         5e:21:cf:ad:da:f6:b8:18:a9:b0:42:59:ca:5a:24:0d:c0:a8:
         90:51:a0:d0:cf:90:9b:d8:fd:8e:59:74:19:17:1d:9f:02:35:
         e0:15:28:66:67:f2:f3:76:b4:01:15:1a:3a:c1:94:a9:29:08:
         cf:1b:87:9d:76:ba:88:70:fd:54:39:3f:af:4f:e9:69:c9:e8:
         6e:8d:7f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:58 2025 by rpki-client