Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A6768A6B148248844D8E04551B1998D03AB86D3D.cer
File:                     A6768A6B148248844D8E04551B1998D03AB86D3D.cer (raw, json)
Hash identifier:          cuq0uQadp2o3cL5DkJDrU6rMMWmzGmYZLFGGOdiMYvU=
Subject key identifier:   A6:76:8A:6B:14:82:48:84:4D:8E:04:55:1B:19:98:D0:3A:B8:6D:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       216ED801924833BCA411FE886388382F3C1DFCAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/A6768A6B148248844D8E04551B1998D03AB86D3D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Jan 2023 04:01:23 +0000
Certificate not after:    Wed 17 Jan 2024 04:06:23 +0000
Subordinate resources:    AS: 264091
                          IP: 143.208.128.0/22
                          IP: 2804:2abc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6e:d8:01:92:48:33:bc:a4:11:fe:88:63:88:38:2f:3c:1d:fc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 04:01:23 2023 GMT
            Not After : Jan 17 04:06:23 2024 GMT
        Subject: CN=A6768A6B148248844D8E04551B1998D03AB86D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:47:f6:22:bd:77:e7:82:db:2a:ec:55:31:
                    73:d9:b3:ce:0d:bb:37:a7:25:06:3c:4f:4c:98:b6:
                    c5:e8:f9:61:70:51:2c:48:ee:32:36:90:26:98:d2:
                    11:a1:1e:89:d6:12:00:d5:7e:b2:bb:b3:a2:57:9f:
                    43:f9:5a:92:77:bc:ad:18:fb:e2:cf:8a:47:10:52:
                    4e:15:76:b8:53:a4:92:99:04:86:ad:4a:c5:ad:ca:
                    1e:3a:1c:81:b8:3a:9b:00:2a:b4:e0:60:ff:c2:1d:
                    6e:64:87:ec:aa:95:47:00:24:11:48:75:f2:f7:f1:
                    c7:df:e1:c0:db:09:cf:6f:c9:9e:44:54:2c:97:51:
                    e3:5d:7d:ad:61:d1:96:72:20:d1:f4:79:b2:56:d9:
                    e5:21:65:af:84:13:7e:7c:74:e4:cd:9d:78:aa:cd:
                    4e:57:52:b9:52:db:17:ad:d2:72:8a:25:bc:4a:da:
                    8d:6d:bd:4f:c9:14:21:cd:48:31:fa:4d:16:70:89:
                    03:1f:34:cc:07:c0:e6:f5:35:ba:69:3d:60:a3:17:
                    a9:16:99:9f:a9:16:d0:65:9c:72:20:bf:90:9e:9e:
                    f9:b8:88:a1:14:40:08:43:aa:f2:a2:99:99:cc:66:
                    46:e7:91:99:10:52:d7:03:ae:1c:7e:12:bd:45:e6:
                    d8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:76:8A:6B:14:82:48:84:4D:8E:04:55:1B:19:98:D0:3A:B8:6D:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/A6768A6B148248844D8E04551B1998D03AB86D3D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.128.0/22
                IPv6:
                  2804:2abc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264091

    Signature Algorithm: sha256WithRSAEncryption
         ac:28:5b:a2:9c:f7:03:85:a5:0c:9c:2c:f8:55:55:54:a0:10:
         ea:45:93:86:81:ad:d2:9b:80:bf:be:e0:ce:d2:63:1b:92:c1:
         bc:3d:05:ec:69:95:27:de:c3:31:31:99:82:be:de:7b:94:75:
         5d:f8:45:93:f6:9d:d6:68:16:21:04:e4:70:c9:ca:3e:6d:01:
         fb:f5:0a:d9:49:e6:59:95:96:a1:34:e7:60:9e:07:de:15:a8:
         f6:44:1a:a9:f8:38:52:43:3a:fc:81:12:90:74:ee:69:67:aa:
         f3:0c:49:35:d7:34:51:c5:dd:e5:dc:cc:ae:1d:c8:7a:6e:bc:
         00:4f:0d:4f:8d:33:3f:39:54:3e:7c:aa:b9:65:bd:b7:03:2c:
         94:ae:9e:9b:05:de:0e:eb:ba:c7:50:eb:3f:03:5f:6c:02:2b:
         40:2f:01:fe:98:56:a5:79:c3:a8:80:8c:e5:eb:28:e7:28:77:
         42:cd:75:9e:1d:21:c8:89:81:f2:e9:54:07:72:5e:a6:ca:7a:
         a8:b2:da:a0:01:01:f9:a8:24:10:b7:ce:df:85:7c:9a:a3:84:
         29:21:ca:1d:ff:29:71:06:7b:b7:4a:29:28:28:ae:4f:91:5e:
         18:92:98:61:94:9b:d2:1a:df:31:02:dd:f4:6e:16:1c:f5:93:
         e6:4c:d6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:41 2024 by rpki-client on console-ams.rpki-client.org