Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer
File:                     6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer (raw, json)
Hash identifier:          zNrlyoL5OS4z4ReT1WFvreeqhrUZgS9PEjO/PcxNTVg=
Subject key identifier:   6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2EF9CA92E29224FCA45C16123EDA33E08AF29B36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Oct 2023 17:59:10 +0000
Certificate not after:    Tue 15 Oct 2024 18:04:10 +0000
Subordinate resources:    AS: 52564
                          IP: 131.161.36.0/22
                          IP: 138.219.144.0/22
                          IP: 177.85.156.0/22
                          IP: 187.62.72.0/22
                          IP: 2804:1eb8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f9:ca:92:e2:92:24:fc:a4:5c:16:12:3e:da:33:e0:8a:f2:9b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 17 17:59:10 2023 GMT
            Not After : Oct 15 18:04:10 2024 GMT
        Subject: CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:24:5d:0c:37:66:77:d9:3d:67:bb:7b:b5:
                    3a:fb:37:39:15:6a:25:07:e4:6b:dc:e5:5d:de:e7:
                    c1:dc:cb:13:fb:e8:46:10:fe:77:9d:c8:ee:f9:d2:
                    52:fc:d5:1f:6e:31:aa:eb:be:f8:5d:3c:de:eb:23:
                    3e:4a:4e:d1:71:6a:0d:be:1d:61:38:e4:a8:d0:e0:
                    be:d9:27:76:98:ed:8a:84:bb:9c:5c:fa:7d:d2:44:
                    0b:b3:f9:bd:c0:9a:97:da:bd:b1:c9:59:fc:c1:44:
                    49:2c:94:3d:06:45:38:bc:2b:48:2e:a2:ca:60:b7:
                    ee:15:eb:bc:33:05:60:4b:97:88:5b:7c:ed:ed:8a:
                    48:f5:c9:25:d4:ee:85:4c:ed:09:4e:3e:db:b9:55:
                    8b:2e:50:b6:76:b9:de:0c:f3:b4:9d:f5:fd:79:de:
                    ae:96:e2:6f:0a:cf:6e:32:33:86:45:7b:fb:56:2d:
                    ff:b9:35:67:5c:c3:b1:89:60:7b:40:55:fa:43:ce:
                    5d:8f:ae:f8:63:c5:12:e8:bc:05:c8:86:6b:00:56:
                    f9:0e:b8:65:09:02:4c:f6:35:f4:93:4b:cf:34:2c:
                    d6:96:5b:00:92:2b:8c:a9:0b:ff:64:50:a6:d9:74:
                    a8:f5:62:a0:ed:76:43:cf:ee:5c:20:16:76:4f:ac:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.36.0/22
                  138.219.144.0/22
                  177.85.156.0/22
                  187.62.72.0/22
                IPv6:
                  2804:1eb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52564

    Signature Algorithm: sha256WithRSAEncryption
         9c:0a:45:76:9f:68:9d:dc:21:80:e6:ee:7f:74:5c:26:c0:09:
         fa:59:48:e4:db:7a:b7:57:ea:ba:36:c5:ef:55:b6:88:b2:00:
         86:f4:5e:2f:90:c3:38:d6:61:13:0a:40:59:38:d5:2f:68:df:
         83:ff:59:48:64:13:7f:63:26:4d:94:52:0c:29:5a:94:9c:28:
         3f:70:2d:3c:76:84:5c:e1:c1:87:e3:d8:9e:58:ff:dd:e6:3c:
         76:70:9e:e0:66:74:e4:ac:12:78:8e:07:54:9f:f1:62:e3:01:
         31:6b:6f:44:77:7c:4b:c7:fd:a6:84:23:f0:6f:07:eb:82:3a:
         37:b2:e9:67:b0:e9:0b:e8:49:cb:69:28:d5:91:41:37:dd:7c:
         b1:95:95:78:f6:91:f5:c1:47:73:52:a5:69:f7:42:06:6f:2d:
         58:0e:ae:cd:a2:0e:92:39:61:17:74:1b:d4:9e:69:51:6b:48:
         6e:73:de:6b:9b:0a:ff:e3:4a:8a:d7:69:4b:ca:11:34:b3:50:
         2d:db:c2:c3:20:9a:d2:4c:e3:5b:93:67:d0:a0:39:16:7e:d3:
         36:e1:04:0f:18:ba:14:a1:40:de:48:28:d0:64:a1:cb:da:0e:
         a1:df:fb:d5:c0:52:79:90:45:ea:9a:35:3e:55:5f:8d:d3:e7:
         c8:ea:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org