Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6CD173FF9D505DB98451806A0F566316FA5AF573.cer
File:                     6CD173FF9D505DB98451806A0F566316FA5AF573.cer (raw, json)
Hash identifier:          bs66NwAkczIO6Ui3O1UsvY1LTWmIT2lzQrCgj9blJO4=
Subject key identifier:   6C:D1:73:FF:9D:50:5D:B9:84:51:80:6A:0F:56:63:16:FA:5A:F5:73
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5699ACA0F5FBA25789BDE639DC8469DA4E02C632
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/6CD173FF9D505DB98451806A0F566316FA5AF573.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 15 Jul 2023 11:40:35 +0000
Certificate not after:    Sat 13 Jul 2024 11:45:35 +0000
Subordinate resources:    AS: 28636
                          IP: 170.150.68.0/22
                          IP: 179.97.112.0/20
                          IP: 2804:dc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:99:ac:a0:f5:fb:a2:57:89:bd:e6:39:dc:84:69:da:4e:02:c6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 15 11:40:35 2023 GMT
            Not After : Jul 13 11:45:35 2024 GMT
        Subject: CN=6CD173FF9D505DB98451806A0F566316FA5AF573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e1:c9:c6:40:bb:18:38:f5:4a:c5:b4:7e:e6:
                    10:2e:8c:5b:ec:97:76:ac:df:54:72:df:8f:2c:6f:
                    af:76:ae:2d:32:98:e2:0a:01:35:f1:75:d2:c9:a7:
                    e6:79:17:0e:0c:5c:e4:0d:21:3e:03:4a:7d:83:ba:
                    6d:c3:61:de:1c:7e:f1:02:4b:5c:bc:4a:8e:aa:5e:
                    af:83:b6:5b:50:83:02:fb:06:f2:5f:5e:b7:c0:cc:
                    ac:a0:c5:5b:58:3a:88:1d:41:b1:21:cd:4e:bb:e1:
                    e2:f3:e6:b4:08:33:db:bd:c5:cb:5a:bf:9d:ff:d7:
                    80:39:95:25:ec:e1:7d:a5:6c:c6:89:87:7c:07:ca:
                    f1:06:79:ff:94:c1:78:30:ba:f9:38:3e:d2:da:cb:
                    44:c1:80:f1:72:e2:a5:1d:e4:0b:79:99:eb:c2:24:
                    6c:43:bc:55:02:4e:51:57:f5:cb:22:bc:32:45:e1:
                    1f:1f:6f:c1:8e:3f:64:0b:50:c1:29:2c:6f:2c:19:
                    bf:24:98:b4:02:9c:ab:07:6c:81:e3:3a:46:10:22:
                    40:c8:d1:63:d8:ae:73:a6:e6:32:a4:d2:4c:1c:eb:
                    58:cf:d2:05:6d:4d:1d:c7:26:68:6d:02:a2:b8:83:
                    f0:0e:3b:2a:94:45:ed:7a:ae:71:f0:85:07:b4:c9:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:D1:73:FF:9D:50:5D:B9:84:51:80:6A:0F:56:63:16:FA:5A:F5:73
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/6CD173FF9D505DB98451806A0F566316FA5AF573.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.68.0/22
                  179.97.112.0/20
                IPv6:
                  2804:dc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28636

    Signature Algorithm: sha256WithRSAEncryption
         42:b6:5b:82:fc:a2:f9:fb:d4:f0:2b:1c:f8:03:d3:76:0e:95:
         39:aa:9b:b8:68:80:bd:7e:7b:32:db:50:e7:b4:e2:cc:b4:37:
         70:5b:fa:7e:5a:be:41:c3:9f:e5:72:9c:7d:0c:94:b8:ce:4c:
         bb:7d:8c:77:cc:62:ea:38:13:96:7a:a3:2e:3a:f1:4c:5b:31:
         2c:b6:9c:56:b1:68:e8:5d:2b:36:33:17:6c:78:ac:f4:7a:06:
         99:99:f1:11:29:16:ef:de:5c:35:cd:5e:f1:16:68:93:c2:63:
         31:48:7c:b0:b9:04:90:e4:e6:b1:a0:e4:47:1e:fe:01:77:94:
         49:29:32:61:2d:bf:d0:5f:cb:2d:3b:bc:4e:44:ab:73:92:0c:
         5d:62:d4:a9:b6:fa:d8:90:b8:15:9d:97:e7:8a:77:16:cc:f9:
         ec:66:04:c1:49:40:69:30:b4:fc:50:10:4b:3c:08:0b:4c:16:
         c6:0f:73:35:9b:43:72:d4:8f:68:a7:85:15:bb:a4:70:40:65:
         e7:81:59:12:aa:b8:aa:23:94:8e:4f:5c:90:21:f1:d4:d8:4c:
         5a:d8:86:da:0f:4a:66:42:b9:e0:63:62:9a:bf:38:fd:6c:c9:
         8c:7c:54:f4:4c:61:db:cf:9e:04:c6:17:8f:f4:ba:cd:e9:c3:
         b4:4a:5f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org