Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6FDD6913F7D033D13BCB72DCE0C1CB8923C1FC68.cer
File:                     6FDD6913F7D033D13BCB72DCE0C1CB8923C1FC68.cer (raw, json)
Hash identifier:          9TTKashsA638mppbjDOkBQ14jI8xu5dHS1jifyoGOA0=
Subject key identifier:   6F:DD:69:13:F7:D0:33:D1:3B:CB:72:DC:E0:C1:CB:89:23:C1:FC:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       101084D5C3FC40A37A5A2024C037D8CF78685204
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/6FDD6913F7D033D13BCB72DCE0C1CB8923C1FC68.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Apr 2021 19:15:38 +0000
Certificate not after:    Wed 13 Apr 2022 19:20:38 +0000
Subordinate resources:    AS: 269092
                          IP: 45.179.168.0/22
                          IP: 2804:5f54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:10:84:d5:c3:fc:40:a3:7a:5a:20:24:c0:37:d8:cf:78:68:52:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 14 19:15:38 2021 GMT
            Not After : Apr 13 19:20:38 2022 GMT
        Subject: CN=6FDD6913F7D033D13BCB72DCE0C1CB8923C1FC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:e0:e1:9d:87:ce:69:7c:5c:9c:c3:d5:4a:
                    3e:95:72:ba:e2:fd:91:6c:0f:0a:84:5e:f1:76:c7:
                    bc:49:30:37:1f:85:00:26:d9:e2:cd:1f:e7:d7:01:
                    01:25:50:c1:85:29:05:2c:f8:f2:01:38:17:00:30:
                    f5:40:f9:02:f3:83:69:de:89:7d:0c:b8:5f:9a:f3:
                    58:fe:d7:22:0f:20:41:62:04:bf:42:11:25:9a:6c:
                    69:26:f1:cb:da:cd:28:33:52:c3:c5:a7:92:3d:89:
                    3b:af:69:44:43:3c:36:af:f4:c3:51:f4:1f:5b:d8:
                    29:a9:3e:d5:d4:d5:99:6b:33:c5:c2:01:d9:72:06:
                    ce:91:ee:67:d0:37:06:1d:29:97:08:c7:09:9a:f9:
                    e9:6a:64:01:6c:0c:5f:1c:fb:d6:bd:d8:e2:28:75:
                    7e:8e:f7:13:e4:7f:28:db:26:ef:55:fa:1f:67:24:
                    53:44:88:31:f9:33:cf:97:75:91:59:8b:36:91:ae:
                    f1:3b:2c:5b:0e:6a:77:40:bf:bb:e1:ce:53:93:23:
                    ee:20:17:8b:3d:c1:08:24:3f:c0:9c:7e:e3:f9:62:
                    2c:96:f1:d6:bb:c3:5d:3f:c7:92:03:8e:eb:f5:d9:
                    30:7c:c6:0b:49:13:ff:f4:ac:e6:3e:a4:71:bf:e6:
                    b6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:DD:69:13:F7:D0:33:D1:3B:CB:72:DC:E0:C1:CB:89:23:C1:FC:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/6FDD6913F7D033D13BCB72DCE0C1CB8923C1FC68.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.168.0/22
                IPv6:
                  2804:5f54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269092

    Signature Algorithm: sha256WithRSAEncryption
         60:12:a3:d3:85:53:a3:b8:a6:10:05:4b:12:6e:a7:4c:70:d1:
         d7:fb:86:4d:ab:89:be:46:55:b4:f4:8c:04:64:91:67:21:0d:
         59:7e:64:83:5d:b5:46:44:90:f0:bb:f6:f6:63:e0:80:03:aa:
         61:9b:bf:1d:07:ce:4a:6d:1a:fa:05:25:2f:b3:c8:fd:2f:32:
         76:74:71:73:ae:49:1d:51:47:40:47:fc:6f:a3:a2:41:2d:cc:
         3d:31:a0:02:f9:69:a4:56:61:53:80:a2:2c:bf:d0:ba:0f:ab:
         c2:c0:d3:79:76:9d:eb:82:c3:9c:3f:e6:e6:3f:ee:94:74:18:
         62:a6:86:2d:bd:0f:16:60:9c:2d:d7:42:e8:6f:83:11:65:cf:
         45:58:6f:72:7c:6d:ca:8a:5a:fe:fc:12:62:fc:d3:58:f0:f4:
         fd:d6:07:6a:4f:a8:bc:d5:08:9f:35:89:37:fc:91:cc:14:e3:
         cd:23:1d:f4:2e:fe:35:9b:dd:70:c7:aa:b2:ec:92:d6:95:94:
         8a:41:8a:93:41:32:9b:74:87:3e:de:b2:a4:ec:2e:71:b5:8a:
         93:dd:2d:bd:93:b7:13:0f:8a:d0:70:dd:32:fc:6e:7f:df:fb:
         39:84:18:d8:cd:29:1e:29:f8:cd:1b:ae:02:b3:b1:0c:e9:ea:
         39:66:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org