Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6D39D67A83A16AE04D596E892D1E2AD89E3EB566.cer
File:                     6D39D67A83A16AE04D596E892D1E2AD89E3EB566.cer (raw, json)
Hash identifier:          dNSyi9W2jlXZ5Xa/DHskwFwGjiT/khoXG0utER9iZAI=
Subject key identifier:   6D:39:D6:7A:83:A1:6A:E0:4D:59:6E:89:2D:1E:2A:D8:9E:3E:B5:66
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A18D9FF5F6291CEFDD7B738A973585BF8CA61F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/6D39D67A83A16AE04D596E892D1E2AD89E3EB566.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 03 Dec 2023 16:05:49 +0000
Certificate not after:    Sun 01 Dec 2024 16:10:49 +0000
Subordinate resources:    AS: 270870
                          IP: 138.59.152.0/22
                          IP: 2804:72b4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:18:d9:ff:5f:62:91:ce:fd:d7:b7:38:a9:73:58:5b:f8:ca:61:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  3 16:05:49 2023 GMT
            Not After : Dec  1 16:10:49 2024 GMT
        Subject: CN=6D39D67A83A16AE04D596E892D1E2AD89E3EB566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:34:dd:cf:6b:11:06:67:5d:46:95:2b:81:
                    f6:f3:58:21:1f:09:b8:8f:c3:8a:02:28:0d:bc:03:
                    d6:1b:51:cb:09:90:ca:d0:8e:fc:bb:a3:ef:c2:fb:
                    47:98:4e:39:12:2e:22:64:58:2d:d6:ce:f4:72:34:
                    15:e8:a4:48:51:2d:e5:23:62:18:c2:36:65:46:89:
                    db:92:82:e3:39:a9:08:7d:27:b0:9f:a1:4c:b7:0c:
                    85:bc:7b:cc:65:1d:f7:17:a2:e2:33:d8:45:1e:a9:
                    4d:6c:5c:72:c1:aa:ee:26:15:0f:17:97:10:d3:a7:
                    4b:9c:57:c6:64:99:bf:b3:8b:01:fa:a7:a9:8d:b8:
                    30:06:dc:92:6f:f3:6a:84:b5:f1:37:af:ea:eb:75:
                    ef:b1:48:9d:69:70:86:9f:a9:86:a1:26:aa:2f:3f:
                    ac:c9:71:56:c9:e7:29:2e:39:07:4f:6c:ef:60:01:
                    7d:08:79:d0:11:af:ad:7f:ab:85:2b:36:a2:0b:9f:
                    bf:0e:7d:4c:68:26:ce:5b:be:3c:6a:3f:51:dd:7f:
                    78:c5:77:ea:54:38:c4:2a:6e:8d:4a:f4:40:f2:9f:
                    28:02:75:40:65:45:1f:3e:c9:9a:18:9a:ed:c3:85:
                    c6:13:c3:d1:43:3a:69:8f:e3:8c:11:4a:ee:3d:05:
                    61:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:39:D6:7A:83:A1:6A:E0:4D:59:6E:89:2D:1E:2A:D8:9E:3E:B5:66
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/6D39D67A83A16AE04D596E892D1E2AD89E3EB566.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.152.0/22
                IPv6:
                  2804:72b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270870

    Signature Algorithm: sha256WithRSAEncryption
         2c:dd:90:15:46:87:45:6f:10:f1:c8:96:5d:eb:be:0d:0e:a2:
         ee:a7:e0:bf:f3:c1:0c:a7:ac:5e:58:46:ff:f8:ea:a9:dc:de:
         8d:2d:31:d1:c6:6c:75:dd:3b:2f:aa:31:70:ad:59:b9:d9:7f:
         ce:d7:d5:c1:b2:f8:09:30:d3:16:ce:a5:f6:15:50:d2:35:34:
         7a:a3:37:b1:1e:4c:44:4a:88:a5:81:33:b1:c1:6c:70:23:05:
         ae:cf:38:4f:d9:5b:3d:06:0f:b4:a1:b8:da:ff:e3:ec:da:9b:
         e6:10:a6:9b:74:a8:e6:8b:13:59:9e:67:32:fc:f4:db:34:a7:
         40:a4:2e:09:c0:6f:87:14:a4:8b:b4:0c:16:04:44:b1:d1:70:
         3a:91:a8:42:b5:0d:a0:03:f9:e9:54:cc:c7:78:ce:cb:1f:0d:
         e3:a6:b4:0d:e9:2b:be:51:84:fe:f9:a8:b8:27:27:ed:61:96:
         5b:7a:b5:0e:69:6a:78:3c:25:24:9d:29:b1:cd:35:1a:2c:85:
         f7:6b:5b:a1:87:36:c4:12:e8:f4:84:a7:94:37:dd:f0:c4:5e:
         fc:9a:e4:48:77:b2:3d:28:e8:fc:7b:81:a0:ef:1a:6c:23:20:
         31:4e:4a:e4:46:6a:ba:8a:0d:54:49:ba:f2:0f:c6:b5:c0:0f:
         99:cf:45:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:09 2025 by rpki-client