Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6E1445AA0189887B340B440C514D8045AAAD400F.cer
File:                     6E1445AA0189887B340B440C514D8045AAAD400F.cer (raw, json)
Hash identifier:          jGkuf4CVIk4PFliwq37dttHsYTqLYPMLdTi9HmAuApc=
Subject key identifier:   6E:14:45:AA:01:89:88:7B:34:0B:44:0C:51:4D:80:45:AA:AD:40:0F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       447FC05AF994C3C7094B71DE55F9EA5A8DE06BE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/6E1445AA0189887B340B440C514D8045AAAD400F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Dec 2023 14:35:08 +0000
Certificate not after:    Fri 29 Nov 2024 14:40:08 +0000
Subordinate resources:    AS: 268137
                          IP: 45.169.200.0/22
                          IP: 2804:5894::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7f:c0:5a:f9:94:c3:c7:09:4b:71:de:55:f9:ea:5a:8d:e0:6b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  1 14:35:08 2023 GMT
            Not After : Nov 29 14:40:08 2024 GMT
        Subject: CN=6E1445AA0189887B340B440C514D8045AAAD400F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:df:80:61:a1:f0:2c:4f:8a:a3:3d:a8:e6:
                    07:8d:88:8c:a6:7d:55:fc:60:90:9a:1a:95:be:85:
                    dd:a5:23:da:43:ae:24:fb:a1:50:ab:1d:74:bd:bf:
                    30:89:85:b3:2d:92:59:9f:1f:15:e2:b6:f5:47:35:
                    12:59:c5:28:82:fe:67:e4:ef:d8:1b:78:98:55:b6:
                    91:06:72:17:c2:0e:4e:50:86:b9:29:bf:e4:ac:74:
                    5d:a2:63:c0:37:44:4c:f4:55:d8:1e:ea:03:12:3b:
                    67:25:43:33:ce:59:65:db:82:ba:62:2f:ff:fc:34:
                    1c:1d:ca:c9:fd:18:26:10:59:b4:15:d4:ba:58:b1:
                    bb:44:0f:7c:c6:ee:69:1a:5e:12:21:a5:4e:5e:fa:
                    2a:a6:c4:f6:f5:58:ff:d8:3a:8f:85:3a:90:83:c6:
                    4e:ef:32:e4:14:c0:2c:20:4f:03:99:4e:e2:6e:a5:
                    4e:85:25:a5:23:eb:fe:91:c9:14:52:ae:f0:83:a0:
                    fa:b5:f2:95:4c:af:51:52:36:c8:95:68:5a:9c:10:
                    cb:d6:9e:c2:bf:97:29:ca:bd:f7:fd:af:4d:37:20:
                    63:a7:b1:14:52:9c:8f:52:fb:cf:72:25:f3:3d:a7:
                    bc:e3:1d:99:79:d7:d8:07:8d:3f:7c:51:6b:40:4d:
                    5b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:14:45:AA:01:89:88:7B:34:0B:44:0C:51:4D:80:45:AA:AD:40:0F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/6E1445AA0189887B340B440C514D8045AAAD400F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.200.0/22
                IPv6:
                  2804:5894::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268137

    Signature Algorithm: sha256WithRSAEncryption
         74:82:a0:67:92:35:68:16:a2:39:f8:7c:c2:32:e7:6a:01:b6:
         b8:10:e6:b9:d5:e9:a8:79:23:da:09:03:d8:74:07:23:de:a4:
         9f:58:1c:d8:fb:af:af:2f:6b:71:0d:c1:90:36:cc:77:91:cc:
         0b:a9:ec:6a:bc:c6:79:79:da:db:1b:84:08:bf:69:34:a3:1e:
         1f:39:4e:f4:c8:1a:bd:96:69:a9:c2:80:e6:c6:9a:61:ce:57:
         28:0c:56:bb:66:91:87:c8:41:eb:5c:ad:4c:9b:ff:a1:4b:35:
         49:a1:42:5f:20:e1:4d:a1:d3:2e:25:cc:fc:29:c4:b2:9a:b4:
         7f:ba:6e:c0:59:06:a9:75:db:ac:11:ee:24:e1:a0:e7:b3:a9:
         c3:26:61:78:44:31:37:fb:2a:a4:a9:7e:18:64:9f:63:f9:53:
         8d:3d:53:a4:e4:22:65:ad:4c:6b:42:94:fe:82:44:9d:15:2a:
         76:ac:50:f3:bf:47:23:0b:a8:c9:8c:75:33:45:d2:02:8b:35:
         ab:f7:63:7b:b7:94:0a:f3:8f:2c:cd:b3:cd:16:3f:74:bc:05:
         4a:99:6d:a3:c1:3b:7b:35:b6:32:68:d0:be:ea:29:0a:a0:b1:
         84:9a:36:f7:53:35:ff:25:99:01:10:5a:04:86:15:0d:1c:c1:
         7c:46:c7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org