Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C.cer
File:                     6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C.cer (raw, json)
Hash identifier:          La0WKJdDiBQTvVlPGqV7pF4Yjn9bQ6P2XUR7WFgv2hM=
Subject key identifier:   6F:07:DA:04:12:45:CE:BD:5F:00:CB:D4:AD:DA:5C:DC:A7:EE:DE:5C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       729957E3543E61EFB0EBC33530AEBBD825D2880C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Aug 2023 14:51:53 +0000
Certificate not after:    Thu 22 Aug 2024 14:56:53 +0000
Subordinate resources:    AS: 53130
                          IP: 187.120.240.0/20
                          IP: 191.7.72.0/21
                          IP: 2804:141c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:99:57:e3:54:3e:61:ef:b0:eb:c3:35:30:ae:bb:d8:25:d2:88:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 24 14:51:53 2023 GMT
            Not After : Aug 22 14:56:53 2024 GMT
        Subject: CN=6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:40:d5:ec:83:86:d7:36:8a:41:ca:c2:b7:
                    a6:03:8f:65:23:e9:ad:18:01:f5:50:d1:d5:18:3d:
                    1c:e7:59:29:27:88:cd:1e:b7:9a:e6:32:28:9f:73:
                    0a:3a:6e:e1:98:3b:92:2a:75:15:ec:f2:8a:f5:b1:
                    c5:a6:aa:b4:9c:a9:58:d9:fc:b7:03:de:99:31:48:
                    b9:9f:39:3e:de:4e:d2:6a:79:0c:7b:06:9b:c1:e3:
                    10:21:20:6b:17:da:c8:33:e4:f2:1c:ac:87:b6:a3:
                    fc:f0:13:f1:66:5f:3e:b0:56:dc:35:ec:50:6f:8e:
                    e0:f3:41:7a:ee:81:87:4a:79:30:95:7c:62:41:b1:
                    4f:e3:7e:07:97:6f:27:9b:59:97:e0:fb:a9:f0:b3:
                    e8:08:7c:3d:16:ac:5a:00:59:05:5a:d6:16:b8:79:
                    eb:a4:5c:b1:5a:97:51:c2:06:2b:5c:96:71:80:26:
                    79:98:cb:b8:2d:e3:f6:25:c8:fb:2e:3d:b5:80:8b:
                    15:83:cf:6f:0f:a8:09:75:de:22:fc:24:04:fc:77:
                    99:98:d9:eb:61:50:00:22:59:52:fa:04:13:9f:d5:
                    88:8f:99:b3:a8:89:f7:bb:a9:13:2f:ed:27:d2:4d:
                    88:6b:06:25:43:0f:0c:58:1f:be:d6:ff:5f:41:4f:
                    4a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:07:DA:04:12:45:CE:BD:5F:00:CB:D4:AD:DA:5C:DC:A7:EE:DE:5C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.240.0/20
                  191.7.72.0/21
                IPv6:
                  2804:141c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53130

    Signature Algorithm: sha256WithRSAEncryption
         5f:77:3c:27:c9:d5:7e:71:2f:c5:49:6e:c8:1f:6d:67:56:81:
         10:a8:4c:9d:8b:80:5e:dc:a7:73:1a:d0:45:b7:cc:c0:79:a0:
         19:bf:35:70:aa:11:16:b9:57:11:5b:12:05:cf:63:c1:f9:ef:
         2e:9b:e9:97:50:03:4c:d3:e2:09:2f:44:6d:7e:dc:2d:f8:73:
         a7:cc:fa:69:56:91:c5:84:a9:e9:01:68:f2:b8:61:79:69:81:
         26:8e:66:b8:eb:55:d1:9d:b1:f6:9f:c4:f2:4f:8a:6e:11:58:
         c8:50:f0:d8:bf:0e:20:74:73:5c:5e:41:68:8f:80:d5:3a:6b:
         70:ae:83:48:e3:c2:0e:2d:f3:d6:c1:1f:a1:12:ba:80:c4:21:
         75:12:fe:74:6e:25:9b:3b:9b:63:ce:10:38:07:f6:e1:ac:6f:
         41:d7:2d:fa:50:cd:9a:e5:86:62:01:da:fe:72:c1:c5:0b:df:
         01:80:3c:aa:8e:c4:e1:bd:2d:8b:bb:3e:e3:5c:9e:0d:03:77:
         2b:69:ef:97:44:46:05:1d:77:8c:69:5f:0b:49:99:de:1c:c4:
         ed:95:5b:19:ec:8b:be:d6:b1:11:f2:08:26:c5:e8:a4:72:1c:
         5f:43:55:2e:94:a3:19:1d:f8:05:8c:07:4a:cf:57:5d:4e:70:
         b9:63:0c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org