Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6F5235A07BE2112EF77598049545376B4D51493A.cer
File:                     6F5235A07BE2112EF77598049545376B4D51493A.cer (raw, json)
Hash identifier:          Wu5TUCRkw3jmBzDJZ5sbT5N4IyfrfkMokvsR+3+CuNI=
Subject key identifier:   6F:52:35:A0:7B:E2:11:2E:F7:75:98:04:95:45:37:6B:4D:51:49:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F470BA7608FC1987F950E7BC541D5B24A90B372
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/0/6F5235A07BE2112EF77598049545376B4D51493A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 19:27:37 +0000
Certificate not after:    Thu 01 Aug 2024 19:32:37 +0000
Subordinate resources:    AS: 266101
                          IP: 45.5.212.0/22
                          IP: 2804:3aa4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:47:0b:a7:60:8f:c1:98:7f:95:0e:7b:c5:41:d5:b2:4a:90:b3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 19:27:37 2023 GMT
            Not After : Aug  1 19:32:37 2024 GMT
        Subject: CN=6F5235A07BE2112EF77598049545376B4D51493A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:12:be:6f:6e:83:f9:9e:23:b1:48:67:e3:fd:
                    dd:42:c1:bb:b0:76:e5:c3:e9:97:9c:1d:65:ed:13:
                    64:39:2a:81:2e:db:f3:3c:9f:e9:b8:26:85:2a:2f:
                    1c:c1:79:e9:80:b4:f8:80:6b:d0:0d:ec:fe:ac:03:
                    f4:0d:11:13:03:e7:0c:27:98:b8:42:03:f4:53:cc:
                    93:b3:66:00:73:fb:36:12:f2:3a:e0:2e:bc:c0:e9:
                    21:6f:11:ba:be:ee:b0:7d:b0:6a:23:de:42:fc:59:
                    8c:27:89:d7:c8:41:d4:17:93:d8:1b:86:2e:67:03:
                    f3:94:76:55:54:4d:26:3c:48:13:bc:48:1a:79:a4:
                    d3:12:01:82:85:82:70:e4:fd:5f:ca:1f:0b:8b:9a:
                    67:11:81:a6:9e:0f:e9:e6:55:6d:8b:db:59:2a:bb:
                    25:3c:ca:8c:89:b4:9a:70:db:3c:f2:6b:32:a8:06:
                    5b:09:42:5d:fc:a7:6d:21:b3:e2:2e:d3:67:66:f9:
                    42:ae:b4:a7:ce:03:65:2a:48:aa:e0:f8:61:10:9a:
                    f7:a2:f0:fc:e3:5a:e6:fc:b6:bf:77:4d:16:8a:f1:
                    8e:2f:7f:5f:be:38:f7:32:ef:a1:f3:ce:22:8e:22:
                    72:d9:6d:61:52:6f:d0:6c:a6:d6:3b:0a:aa:c3:7a:
                    1b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:52:35:A0:7B:E2:11:2E:F7:75:98:04:95:45:37:6B:4D:51:49:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/0/6F5235A07BE2112EF77598049545376B4D51493A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.212.0/22
                IPv6:
                  2804:3aa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266101

    Signature Algorithm: sha256WithRSAEncryption
         47:09:8e:ec:c5:88:22:69:48:90:48:e0:15:db:d0:4b:9a:19:
         d0:e4:e6:7b:79:58:09:db:16:ef:34:a4:8b:ee:4b:0f:47:22:
         83:d7:53:21:45:a6:12:4d:57:40:e3:04:fe:90:64:c5:0c:ad:
         03:d4:8d:f4:54:88:aa:92:a5:83:34:a3:dd:25:d8:bf:7f:ce:
         7f:25:5f:98:a9:a6:10:6f:59:f2:51:23:01:a9:74:d1:bc:5b:
         be:2d:08:c3:35:f8:27:c6:04:a6:20:98:26:61:8b:22:b5:0e:
         f2:0c:be:8f:6b:31:5a:16:bf:20:34:94:2f:33:ad:21:f7:b8:
         77:7c:07:c3:d1:3c:9e:0a:2a:b7:65:ba:17:ce:8f:5a:31:78:
         62:42:c7:05:e5:fa:2c:76:93:39:6f:be:98:23:dc:77:0d:ee:
         33:f5:8c:c0:ba:5b:43:48:86:c5:44:e1:18:81:c8:39:61:6a:
         2f:57:b0:51:70:6c:e0:04:4b:a0:e3:b5:0b:3b:47:c7:fd:35:
         4b:60:cc:e2:62:cb:fa:8c:63:33:ab:03:e4:94:88:27:13:dd:
         ed:2f:83:8e:9d:30:67:19:ee:53:cb:47:a1:80:52:e1:dc:cd:
         80:8d:fa:0b:7e:76:4d:be:13:a3:cb:1c:4f:2c:c8:cf:2d:f3:
         b3:80:8f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:09:05 2025 by rpki-client