Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6DBE1B584D29CD46E0F5F1628AEF9D617A4DD8EC.cer
File:                     6DBE1B584D29CD46E0F5F1628AEF9D617A4DD8EC.cer (raw, json)
Hash identifier:          O/JCGASI7EoSNKvFOuiEiqxRN2xj+Kw4zEMLjmaoT2I=
Subject key identifier:   6D:BE:1B:58:4D:29:CD:46:E0:F5:F1:62:8A:EF:9D:61:7A:4D:D8:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       739FFD81052AF9261BC777F28D634C8BE6E61FB5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/6DBE1B584D29CD46E0F5F1628AEF9D617A4DD8EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Nov 2022 20:36:22 +0000
Certificate not after:    Thu 16 Nov 2023 20:41:22 +0000
Subordinate resources:    AS: 267451
                          IP: 192.141.12.0/22
                          IP: 2804:41b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9f:fd:81:05:2a:f9:26:1b:c7:77:f2:8d:63:4c:8b:e6:e6:1f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 17 20:36:22 2022 GMT
            Not After : Nov 16 20:41:22 2023 GMT
        Subject: CN=6DBE1B584D29CD46E0F5F1628AEF9D617A4DD8EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5c:c7:2e:d4:07:c0:cc:3a:bb:7f:61:07:6e:
                    9a:5f:52:c4:85:69:8e:c2:9d:7d:44:d2:93:cb:43:
                    7c:68:03:68:57:4d:15:78:1f:3c:a1:30:3d:3b:bc:
                    f0:d8:23:fa:7b:f0:97:28:27:7c:1b:6e:cb:fc:5d:
                    dd:59:16:ec:d0:e8:9c:5e:dd:8f:87:bf:11:d3:93:
                    26:27:b0:81:ff:c4:97:12:48:ac:40:33:87:39:26:
                    55:a6:ea:b9:2d:b8:19:38:9a:83:2a:0f:00:fa:67:
                    dc:cf:3b:82:b3:da:39:d4:a8:fc:b4:85:49:68:a6:
                    97:9e:ac:45:c2:7c:ac:24:b5:9c:59:77:86:d7:09:
                    c5:bf:bd:82:84:33:6d:5d:d0:29:7f:44:47:f5:71:
                    c1:0f:d9:8c:74:c5:c8:69:1b:f1:75:a2:29:bf:19:
                    87:0c:75:7e:e0:08:25:58:ed:5d:11:0b:0b:c3:1b:
                    c5:f9:5f:84:43:ff:77:43:43:08:1b:60:9c:ee:78:
                    0f:f5:c9:7d:ab:2f:6c:a3:bb:cd:cd:55:eb:e5:b8:
                    ce:3a:c9:ec:d7:35:b2:54:9f:87:15:21:4b:ce:16:
                    50:de:7c:cd:1a:9f:b3:5e:1b:79:84:ac:ee:44:8d:
                    58:fa:d7:49:f0:9c:28:68:6e:ca:cd:3a:d0:6e:e8:
                    f4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:BE:1B:58:4D:29:CD:46:E0:F5:F1:62:8A:EF:9D:61:7A:4D:D8:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/6DBE1B584D29CD46E0F5F1628AEF9D617A4DD8EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.12.0/22
                IPv6:
                  2804:41b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267451

    Signature Algorithm: sha256WithRSAEncryption
         32:83:14:68:5b:84:fe:2b:44:d4:b6:fc:8a:06:68:c6:34:c3:
         51:f4:3a:54:fd:0c:c2:98:84:83:66:10:b8:45:c0:37:66:8e:
         cb:51:8f:54:27:55:c9:97:02:de:de:48:1d:8d:ff:cf:72:4d:
         43:0e:2e:a9:4e:af:e2:64:ce:b2:5b:02:fc:e7:33:6a:32:3e:
         92:ae:f2:b6:fc:72:1e:65:36:85:73:00:b2:ef:4c:0a:27:ef:
         9a:62:0c:a2:b0:54:7f:cb:52:4f:6c:33:dc:ea:dd:e2:d7:86:
         15:3c:1d:35:be:6b:8c:17:ba:1d:65:b6:93:b1:ea:d5:01:be:
         b9:20:00:4f:43:9f:20:5d:01:fa:3f:d9:fe:c9:f2:4c:d6:c3:
         67:8c:8a:89:c1:43:f7:d5:8b:be:b4:fb:db:25:50:42:e7:59:
         69:d5:9e:c9:eb:00:28:0d:57:1b:21:f7:85:7a:d4:c7:83:74:
         57:45:8b:ea:16:27:52:0c:03:1d:05:c5:49:7e:e2:98:ff:02:
         2a:e7:b0:aa:38:25:b2:b0:7c:00:bc:f9:df:68:11:07:91:ca:
         62:4e:04:74:60:53:1b:e9:ec:82:6e:fb:53:80:fd:0a:41:90:
         86:2d:02:1d:d4:69:6b:b5:8c:83:2a:6e:1e:82:4c:ee:64:4f:
         e9:2f:10:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org