Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B6CD24F925D5B02BA9586C5598202D5DE275A1ED.cer
File:                     B6CD24F925D5B02BA9586C5598202D5DE275A1ED.cer (raw, json)
Hash identifier:          5SMsCJ2oeKwSmxCqHAkqZ1GU/BpLcgld5mf9aZVx+xM=
Subject key identifier:   B6:CD:24:F9:25:D5:B0:2B:A9:58:6C:55:98:20:2D:5D:E2:75:A1:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B437D7FF4BCA7E425E1E0BEA62ECA26DF8A2A3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/B6CD24F925D5B02BA9586C5598202D5DE275A1ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Jun 2023 00:49:41 +0000
Certificate not after:    Fri 31 May 2024 00:54:41 +0000
Subordinate resources:    AS: 265138
                          IP: 143.208.72.0/22
                          IP: 2804:2b28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:43:7d:7f:f4:bc:a7:e4:25:e1:e0:be:a6:2e:ca:26:df:8a:2a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  2 00:49:41 2023 GMT
            Not After : May 31 00:54:41 2024 GMT
        Subject: CN=B6CD24F925D5B02BA9586C5598202D5DE275A1ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:49:0b:07:74:3c:33:15:b5:ff:e3:ed:66:b2:
                    ec:57:15:12:fb:71:87:20:9b:1b:26:36:f7:3f:ca:
                    c0:96:2e:d5:97:e0:9a:04:68:cd:13:e0:a0:0b:d3:
                    c7:c7:22:93:a3:6f:57:68:c4:5f:ff:a6:3b:f5:59:
                    b4:42:7d:b0:2e:89:ab:f4:5e:42:dd:de:b8:19:4b:
                    b4:4e:ab:6e:db:a3:a9:d3:ad:de:28:85:34:bb:ff:
                    5a:62:6e:e2:ee:ba:7d:b4:61:9c:3d:c0:b8:e4:c1:
                    bf:1e:04:7e:22:1b:47:45:96:a8:d2:9a:f1:c4:30:
                    f9:b0:09:e9:56:f5:02:b9:ca:2f:ee:34:4e:0f:2c:
                    e9:55:69:9c:55:e2:e1:43:bb:db:49:24:09:f0:c8:
                    9b:85:20:42:af:c9:81:f7:7b:c1:4c:68:c0:2c:20:
                    8d:5d:e0:6d:94:24:19:f1:72:b5:3f:d7:f0:fe:ed:
                    c7:1f:51:3a:3b:8e:b4:52:44:dd:58:43:fb:c4:7f:
                    dc:06:e0:04:31:38:f4:41:4f:99:eb:c8:00:ca:5a:
                    32:95:87:10:48:4a:72:ca:4d:ea:fe:bb:66:7e:36:
                    b3:9a:02:61:11:8e:2c:b2:e5:e4:1e:c1:18:83:5d:
                    b7:06:4b:85:f4:70:fc:53:b2:8d:1d:b9:26:c3:f9:
                    42:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:CD:24:F9:25:D5:B0:2B:A9:58:6C:55:98:20:2D:5D:E2:75:A1:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/B6CD24F925D5B02BA9586C5598202D5DE275A1ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.72.0/22
                IPv6:
                  2804:2b28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265138

    Signature Algorithm: sha256WithRSAEncryption
         b7:19:e9:b0:fd:ad:a0:38:59:58:2e:79:48:24:da:4f:76:9c:
         f4:2f:29:30:aa:65:54:bf:2f:51:b3:13:4c:a3:d3:fb:e3:e0:
         67:c9:9a:a1:b2:f8:40:c9:f6:52:11:c9:56:ac:a1:fc:7b:34:
         cb:f0:a6:c5:e9:19:d1:ca:66:2a:d4:4a:e9:58:d7:1a:61:b9:
         90:f7:a9:3a:65:67:e7:1e:5c:6f:70:e4:fc:8f:a1:20:6c:66:
         bb:2d:23:5c:f9:42:3d:8d:58:86:fe:2e:91:22:3d:7d:0c:8b:
         73:70:4d:cb:20:06:cd:37:07:06:f1:eb:19:64:af:77:32:ca:
         7c:df:97:3a:8d:9a:c0:63:d9:e9:32:56:a9:2d:e3:bb:e0:23:
         c5:bd:3b:51:e5:92:1e:e0:b2:a5:c1:c8:a4:4d:7c:69:c2:0d:
         5f:d6:13:70:90:a2:3d:2f:ad:c6:fe:da:ca:2f:0b:11:12:51:
         e5:5a:5c:de:27:41:56:6a:a1:f4:8b:14:fa:04:80:af:1e:9d:
         02:b8:9f:da:5e:8f:d5:20:f3:f5:c3:87:f1:d6:57:db:f3:6f:
         e0:73:e3:67:fc:71:e2:eb:28:38:2f:4f:ee:22:42:a0:5f:06:
         12:69:72:5f:1b:1d:fc:49:73:05:6c:ac:a3:f8:c2:15:6a:13:
         6f:04:5e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org