Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6E8DD15412A85B994E7184904BDE13422E18859B.cer
File:                     6E8DD15412A85B994E7184904BDE13422E18859B.cer (raw, json)
Hash identifier:          euD2duYzDGHNvmMS1njdvmnTeXaA407h5q0fy130DAM=
Subject key identifier:   6E:8D:D1:54:12:A8:5B:99:4E:71:84:90:4B:DE:13:42:2E:18:85:9B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23A5061A5350402CC800BAC692261033871FD608
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/6E8DD15412A85B994E7184904BDE13422E18859B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Dec 2022 18:44:18 +0000
Certificate not after:    Wed 27 Dec 2023 18:49:18 +0000
Subordinate resources:    AS: 269417
                          IP: 45.186.88.0/22
                          IP: 2804:6444::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a5:06:1a:53:50:40:2c:c8:00:ba:c6:92:26:10:33:87:1f:d6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 28 18:44:18 2022 GMT
            Not After : Dec 27 18:49:18 2023 GMT
        Subject: CN=6E8DD15412A85B994E7184904BDE13422E18859B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:51:48:91:8a:b7:37:4b:fb:28:65:b9:8c:
                    50:bf:fa:cf:78:41:85:02:fd:dd:5e:54:41:d7:e1:
                    dd:ac:b6:41:5c:65:5d:42:dd:c4:15:74:22:3f:32:
                    ca:4a:ed:a2:d8:82:0d:6a:3b:91:c1:ec:39:9f:88:
                    a5:5c:85:55:7d:7b:7b:a3:7e:3e:12:8e:6e:88:22:
                    5e:aa:fb:89:62:cf:5b:e2:b2:5d:47:bb:6d:33:75:
                    57:f6:d9:15:87:ce:78:fc:97:b1:48:8c:a7:10:bd:
                    df:f6:12:06:f6:26:2f:c5:18:17:50:f3:c8:cf:f8:
                    6e:f5:46:e7:42:ba:c8:58:13:a3:ea:15:b8:d9:2d:
                    8e:d7:d1:9e:fb:93:ac:53:7b:c7:96:03:72:73:cb:
                    7a:6a:ed:80:a5:0d:7a:ff:c3:ef:31:13:d2:5f:c2:
                    43:79:d3:d1:be:50:b9:33:73:91:b9:e6:97:4f:95:
                    81:50:d3:a7:ee:76:0b:8e:d6:94:d9:5b:cf:5a:35:
                    d8:0f:a8:1c:72:d4:27:41:40:4f:4e:9f:e3:83:1b:
                    e3:f7:ec:62:85:ad:d1:9f:bf:c7:b4:cc:51:e3:25:
                    73:58:69:ed:64:21:ab:c3:5d:99:de:77:b5:12:6d:
                    a7:5c:59:1a:5e:bd:a0:6a:12:21:cc:2b:df:96:d3:
                    c6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:8D:D1:54:12:A8:5B:99:4E:71:84:90:4B:DE:13:42:2E:18:85:9B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/6E8DD15412A85B994E7184904BDE13422E18859B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.88.0/22
                IPv6:
                  2804:6444::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269417

    Signature Algorithm: sha256WithRSAEncryption
         ac:a8:ed:02:82:b4:c8:c0:8d:66:fd:a5:f1:50:fd:a3:58:2d:
         07:03:3c:3d:96:2a:ca:95:c9:ee:11:b0:ec:9c:92:a3:3e:7a:
         7a:a8:58:ce:29:23:2c:4a:e5:a9:16:dd:89:bb:c2:f6:1d:a2:
         68:32:58:de:4a:98:6f:38:88:2e:60:d6:3d:4b:34:d8:84:42:
         b0:d7:48:17:ec:4e:a9:08:19:c7:97:33:12:53:0a:83:cf:e0:
         a8:6a:b2:ae:c3:16:53:89:7b:3a:c7:a7:29:2d:6b:2d:5a:43:
         89:28:19:e8:cf:7a:53:43:06:21:56:8c:ac:9e:60:ba:74:aa:
         d0:c4:3e:97:a2:d6:08:b6:be:de:f4:08:35:c0:c8:c9:36:b5:
         2b:75:60:c4:eb:7f:45:0f:40:d0:3e:c6:04:f2:50:87:af:b0:
         4d:f8:db:2b:69:d9:76:b0:cc:3e:89:a1:72:1d:fc:dd:9d:ed:
         89:44:af:2d:ff:e6:18:f9:cd:61:7f:e4:b4:cf:62:5f:96:31:
         1e:d3:15:74:8a:4a:4e:4e:04:e9:69:25:7c:eb:b4:7e:6c:15:
         3d:eb:39:86:ed:8e:ae:06:e9:f2:4b:66:13:22:c9:82:d9:2c:
         ee:14:b5:11:93:fd:25:f3:ac:a7:7e:f3:eb:9d:18:d8:9c:ee:
         e2:7f:7f:99
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUI6UGGlNQQCzIALrGkiYQM4cf1ggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEyMjgxODQ0MThaFw0yMzEyMjcxODQ5MThaMDMxMTAvBgNV
BAMTKDZFOEREMTU0MTJBODVCOTk0RTcxODQ5MDRCREUxMzQyMkUxODg1OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEu1FIkYq3N0v7KGW5jFC/+s94
QYUC/d1eVEHX4d2stkFcZV1C3cQVdCI/MspK7aLYgg1qO5HB7DmfiKVchVV9e3uj
fj4Sjm6IIl6q+4liz1visl1Hu20zdVf22RWHznj8l7FIjKcQvd/2Egb2Ji/FGBdQ
88jP+G71RudCushYE6PqFbjZLY7X0Z77k6xTe8eWA3Jzy3pq7YClDXr/w+8xE9Jf
wkN509G+ULkzc5G55pdPlYFQ06fudguO1pTZW89aNdgPqBxy1CdBQE9On+ODG+P3
7GKFrdGfv8e0zFHjJXNYae1kIavDXZned7USbadcWRpevaBqEiHMK9+W08brAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRujdFUEqhbmU5x
hJBL3hNCLhiFmzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85clA1R1dHSlM1aEZRSzdmNXZRU0hWZFFaYk5haUo0V2tX
cEF4bWJiZXE1RC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85clA1R1dHSlM1aEZRSzdmNXZRU0hWZFFaYk5haUo0V2tX
cEF4bWJiZXE1RC8wLzZFOEREMTU0MTJBODVCOTk0RTcxODQ5MDRCREUxMzQyMkUx
ODg1OUIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi26WDANBAIAAjAHAwUA
KARkRDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHGkwDQYJKoZIhvcNAQELBQAD
ggEBAKyo7QKCtMjAjWb9pfFQ/aNYLQcDPD2WKsqVye4RsOyckqM+enqoWM4pIyxK
5akW3Ym7wvYdomgyWN5KmG84iC5g1j1LNNiEQrDXSBfsTqkIGceXMxJTCoPP4Khq
sq7DFlOJezrHpyktay1aQ4koGejPelNDBiFWjKyeYLp0qtDEPpei1gi2vt70CDXA
yMk2tSt1YMTrf0UPQNA+xgTyUIevsE342ytp2XawzD6JoXId/N2d7YlEry3/5hj5
zWF/5LTPYl+WMR7TFXSKSk5OBOlpJXzrtH5sFT3rOYbtjq4G6fJLZhMiyYLZLO4U
tRGT/SXzrKd+8+udGNic7uJ/f5k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org