Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6F0A880CA7D572A87F872A9CD6CEBB505528DC89.cer
File:                     6F0A880CA7D572A87F872A9CD6CEBB505528DC89.cer (raw, json)
Hash identifier:          IPbBSlBnAMR1BabBtPyx/39S7VS7JfsxXpQbK8HLGN8=
Subject key identifier:   6F:0A:88:0C:A7:D5:72:A8:7F:87:2A:9C:D6:CE:BB:50:55:28:DC:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16EB4E6BBBF83250145225BFDD7FB8BE18577286
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/6F0A880CA7D572A87F872A9CD6CEBB505528DC89.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 18:46:50 +0000
Certificate not after:    Wed 15 Jan 2025 18:51:50 +0000
Subordinate resources:    AS: 262530
                          IP: 45.174.164.0/22
                          IP: 168.196.148.0/22
                          IP: 170.231.196.0/22
                          IP: 170.247.148.0/22
                          IP: 177.67.72.0/21
                          IP: 177.93.188.0/22
                          IP: 179.127.144.0/22
                          IP: 200.33.88.0/21
                          IP: 2804:9f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:eb:4e:6b:bb:f8:32:50:14:52:25:bf:dd:7f:b8:be:18:57:72:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 18:46:50 2024 GMT
            Not After : Jan 15 18:51:50 2025 GMT
        Subject: CN=6F0A880CA7D572A87F872A9CD6CEBB505528DC89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:9b:b9:c9:17:e1:9d:fe:62:3a:dd:28:06:
                    fe:26:aa:a3:9b:9e:1c:6d:a9:f2:f5:b3:ff:fa:ea:
                    09:c9:e5:46:92:ca:86:8d:7d:56:89:1a:af:8d:4c:
                    ce:4f:3f:21:da:1d:45:d7:dd:b0:c5:0a:bf:60:f5:
                    80:4b:14:b2:ef:9f:df:c4:79:71:3c:4f:3d:93:40:
                    d6:74:b1:52:15:89:a9:b5:2c:b4:fb:38:17:39:36:
                    c4:6d:71:9f:2e:14:28:fa:75:b8:07:89:fd:9c:bf:
                    71:86:47:ca:cb:af:12:18:eb:d8:1c:dc:c0:12:81:
                    94:01:29:d9:5f:b1:fd:7f:9a:ba:6f:b8:93:d2:bc:
                    6e:f9:f8:ad:21:cd:ba:94:d5:35:27:a4:c1:87:f4:
                    67:9f:07:61:c8:6a:41:26:86:cc:3a:b5:59:03:44:
                    8a:fe:c0:33:67:f3:44:1f:2c:f0:ed:20:8a:2f:aa:
                    32:1b:d4:74:07:9e:d6:1a:91:22:3b:85:1b:86:6b:
                    28:c0:c5:2e:47:9e:b8:84:ee:60:2e:a8:e7:76:13:
                    b2:1d:21:47:ec:e2:40:2f:1d:09:72:b1:d0:31:91:
                    0a:2d:d7:f4:eb:95:13:7c:79:bf:7d:04:3a:6c:55:
                    78:11:3f:80:0f:5f:1e:86:9a:7a:fd:39:93:04:cc:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:0A:88:0C:A7:D5:72:A8:7F:87:2A:9C:D6:CE:BB:50:55:28:DC:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/6F0A880CA7D572A87F872A9CD6CEBB505528DC89.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.164.0/22
                  168.196.148.0/22
                  170.231.196.0/22
                  170.247.148.0/22
                  177.67.72.0/21
                  177.93.188.0/22
                  179.127.144.0/22
                  200.33.88.0/21
                IPv6:
                  2804:9f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262530

    Signature Algorithm: sha256WithRSAEncryption
         5b:5e:95:fc:1c:30:0a:fa:f8:e8:20:82:ff:c9:39:ed:15:be:
         a6:e7:40:be:a7:8f:ed:3c:94:0e:b7:cb:28:3a:36:5e:31:1f:
         7f:88:18:b8:c8:09:81:9a:4b:a8:33:79:5d:40:f4:f0:a5:53:
         da:98:fb:f6:45:6d:dc:5e:f8:73:08:c4:06:35:9d:00:40:ce:
         c1:5c:58:b7:ce:15:df:08:62:4f:38:93:96:88:c0:1a:52:f7:
         e4:08:e6:95:e5:52:cd:52:10:10:f7:ce:fb:9d:9b:86:5f:92:
         5b:b9:12:b8:16:a1:32:0a:98:9b:64:72:c1:94:97:18:ef:5a:
         41:7b:a0:a5:4a:30:5c:f0:13:93:bf:c6:a0:5d:bd:a9:f0:6a:
         e2:3d:ec:e8:ab:35:a3:e9:49:fe:e6:1d:65:8e:9c:3b:38:19:
         30:4d:67:4c:e8:b1:25:82:d3:b1:3b:26:33:ec:e9:c2:2d:d7:
         3c:04:e1:a1:70:0e:34:9a:22:4a:0f:93:42:b2:8b:78:47:2c:
         c1:e8:de:de:43:41:dc:ed:57:3c:fc:64:17:6c:1e:c3:f0:80:
         ce:9a:34:e3:41:99:74:b4:09:37:48:98:5d:0a:c8:30:d5:52:
         0a:e3:58:a4:89:b7:94:f7:59:c5:15:52:ab:b2:da:bd:15:60:
         ac:09:58:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org