Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6D3B2E18E39A6DF4ED9D221786904ABD9B918766.cer
File:                     6D3B2E18E39A6DF4ED9D221786904ABD9B918766.cer (raw, json)
Hash identifier:          19nl4oZMQslhW4r8+cbAaJ7ZXxdiZkomajf3HpvZcbY=
Subject key identifier:   6D:3B:2E:18:E3:9A:6D:F4:ED:9D:22:17:86:90:4A:BD:9B:91:87:66
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CF790FDAE4CED26B35D58CF91CEC269E03F8253
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/6D3B2E18E39A6DF4ED9D221786904ABD9B918766.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 14:53:05 +0000
Certificate not after:    Wed 23 Oct 2024 14:58:05 +0000
Subordinate resources:    AS: 268088
                          IP: 45.168.100.0/22
                          IP: 2804:57d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f7:90:fd:ae:4c:ed:26:b3:5d:58:cf:91:ce:c2:69:e0:3f:82:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 14:53:05 2023 GMT
            Not After : Oct 23 14:58:05 2024 GMT
        Subject: CN=6D3B2E18E39A6DF4ED9D221786904ABD9B918766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6e:1a:17:10:4e:88:51:02:a5:5d:e5:47:f1:
                    f5:fa:6e:ad:24:6c:65:7b:a0:82:05:0a:12:15:ce:
                    d8:d1:f5:1f:f1:53:1b:72:47:b3:bd:ad:a2:d7:1a:
                    b5:1c:41:a1:2c:4a:ba:56:11:6f:c3:12:0f:98:10:
                    7f:05:31:d6:80:c1:c7:e7:f7:53:88:0e:c4:e4:dd:
                    dc:3e:50:07:e5:48:ba:87:e0:79:c7:cf:ff:6f:b3:
                    ec:bd:24:3d:b5:10:85:a1:80:c1:14:9a:c9:d7:13:
                    b4:bd:6c:3d:13:2f:f5:fe:e9:4b:69:61:0c:6c:e7:
                    93:25:c6:bd:ff:d4:05:8b:34:b0:73:65:c3:08:b6:
                    1e:8f:10:35:42:7f:60:24:79:4f:7b:71:09:9f:28:
                    60:58:e0:c3:54:e5:18:a3:b0:e6:b7:eb:e7:d6:6a:
                    c0:d8:0f:d0:4c:6d:a2:0c:e2:49:81:e0:44:1a:f2:
                    b9:b5:82:0e:90:88:69:bc:dc:ec:a8:33:ac:93:f8:
                    57:b1:c5:d7:fb:a1:8a:72:6b:60:90:04:e0:7c:70:
                    ab:ed:dc:25:00:96:ae:01:97:9f:4f:d1:e1:f2:cd:
                    82:10:00:53:60:37:2e:04:5e:79:12:f0:72:c1:b3:
                    cb:a2:87:c3:51:a5:06:2b:11:eb:c5:ef:ed:d0:67:
                    6d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:3B:2E:18:E3:9A:6D:F4:ED:9D:22:17:86:90:4A:BD:9B:91:87:66
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/6D3B2E18E39A6DF4ED9D221786904ABD9B918766.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.100.0/22
                IPv6:
                  2804:57d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268088

    Signature Algorithm: sha256WithRSAEncryption
         03:14:c1:63:51:2b:bb:a4:14:75:e4:52:f7:6b:79:0f:29:2d:
         60:a8:6c:a8:e6:45:ca:36:51:51:5b:e5:31:ad:4e:68:00:d4:
         5f:62:79:1d:f4:7d:27:d9:81:8f:4b:57:20:d9:a6:0a:65:f7:
         6b:bc:1c:01:e9:86:ac:da:ee:c1:26:10:52:f5:cf:c9:33:81:
         3a:88:a9:a2:53:c5:69:ab:71:45:d7:74:22:0c:27:55:27:84:
         ac:89:1a:44:cb:06:5e:b4:a4:db:10:c6:4f:2c:d1:b1:e9:9b:
         09:bc:d2:06:82:de:59:c1:6c:42:f3:d6:3c:36:43:f0:d3:8b:
         e0:c4:80:f3:0a:0d:14:a5:cb:d0:ab:cc:a1:c7:e8:21:39:7f:
         42:da:94:73:08:10:55:50:4a:36:6a:6a:0c:65:11:ec:d1:81:
         93:2c:2d:4d:57:10:49:1d:24:90:62:8f:68:12:61:e1:2c:77:
         35:45:4a:c0:13:66:86:1e:50:a9:15:39:5b:54:55:bc:71:63:
         67:6c:05:c1:6e:65:09:6d:92:a5:a9:c0:5f:5c:fb:30:f4:77:
         a9:c0:52:e0:3d:93:0e:8f:99:dd:67:84:eb:82:66:4f:59:df:
         ba:5e:b3:8e:9a:2e:b8:9c:ac:3d:98:77:ea:9c:8c:d5:37:61:
         03:9e:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org