Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.cer
File:                     6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.cer (raw, json)
Hash identifier:          Y4qG8Hh/he26fT4OMKOkO8LZaQJ89mKfFqZdCpPsOpM=
Subject key identifier:   6E:99:97:71:E1:C5:D8:3D:71:C5:E0:A3:FF:05:BD:7A:0B:F9:31:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6468F4ED6AC95A9EF9DE719EA579043D8B957515
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:54:12 +0000
Certificate not after:    Sat 10 Aug 2024 02:59:12 +0000
Subordinate resources:    AS: 267390
                          IP: 45.235.0.0/22
                          IP: 2804:4cc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:68:f4:ed:6a:c9:5a:9e:f9:de:71:9e:a5:79:04:3d:8b:95:75:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:54:12 2023 GMT
            Not After : Aug 10 02:59:12 2024 GMT
        Subject: CN=6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:31:c3:69:73:e8:af:4d:c5:b4:3d:b0:c7:
                    3b:42:85:47:89:99:6e:55:43:6e:a5:57:90:39:b4:
                    88:ab:4f:9b:16:30:3b:9b:0b:00:93:c4:1b:3d:84:
                    bc:c0:21:e2:f1:a6:09:f4:b2:47:9e:98:10:bf:40:
                    91:89:80:cb:f8:11:dd:fa:83:c0:52:4a:93:c2:fa:
                    cd:e8:d7:ca:21:4e:5c:8d:33:75:e0:11:cd:5e:f0:
                    b9:66:7b:21:83:60:54:8b:9d:d4:0b:08:a8:25:03:
                    cd:5f:12:cb:db:fe:81:a4:c2:5d:f5:e9:8d:d8:88:
                    eb:ff:5f:0c:fd:3a:e2:7a:0c:3c:d6:38:d3:c6:97:
                    df:3c:2a:a1:94:c9:0b:85:f3:64:08:67:00:27:5d:
                    ad:88:6d:4b:3e:8a:25:26:bb:8a:75:9f:53:08:60:
                    bb:ea:3a:79:0d:a6:b4:61:d8:c5:0b:29:49:a7:19:
                    a6:e3:6a:e7:d1:63:14:15:68:bb:91:e9:41:d2:a3:
                    71:9d:b4:72:d4:f0:8c:e5:e4:ce:8e:c3:91:91:fc:
                    25:e5:70:6d:fb:bc:a6:a1:1b:76:11:2b:63:e8:87:
                    73:1b:82:59:ea:b7:d2:8c:c2:ce:7b:3f:e6:bb:cf:
                    20:da:3d:1f:fe:0c:55:65:db:f7:a4:2f:3d:ff:e5:
                    c1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:99:97:71:E1:C5:D8:3D:71:C5:E0:A3:FF:05:BD:7A:0B:F9:31:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.0.0/22
                IPv6:
                  2804:4cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267390

    Signature Algorithm: sha256WithRSAEncryption
         a2:0e:32:6e:71:e1:6a:c7:dd:b0:5a:6b:52:25:07:68:fb:5e:
         7a:c2:13:55:91:cd:10:b5:70:83:40:f4:4d:f3:24:55:97:2e:
         60:f8:88:44:32:d4:b6:be:b4:46:9a:48:87:bc:f4:c5:12:1b:
         a6:78:78:ab:91:55:59:97:73:e5:12:b5:a0:e7:40:67:6c:30:
         ff:a5:6a:08:f6:97:79:5e:44:d3:7a:55:42:2a:76:84:6c:40:
         0f:23:02:bd:cd:47:16:6f:c0:4e:86:1c:d8:67:17:2f:db:e8:
         7a:94:ac:57:98:14:cf:dd:3c:2a:d1:39:ef:3f:d8:7b:3c:a8:
         5a:14:10:3b:a9:75:f5:53:f4:93:76:74:65:6b:fa:1b:16:ff:
         f5:2d:97:08:22:47:0b:b7:39:02:76:a1:c4:0c:af:04:2b:4c:
         a7:b1:12:0b:e4:d0:e7:c8:ac:a5:5e:54:71:36:24:5d:cf:e3:
         4c:ab:06:74:81:15:d3:73:eb:d8:ac:b2:bd:03:24:44:42:60:
         91:58:77:e5:54:be:2f:54:84:56:56:1e:cc:ff:ad:03:0d:02:
         d9:b8:33:61:9c:a8:93:1f:4a:4a:c1:d7:6b:67:94:9c:e7:fa:
         4e:62:1b:75:e6:d0:51:fa:de:9a:e8:c3:4c:05:db:10:f7:20:
         3e:04:d8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org