Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C0E6F60F49662D74360BD3BBCFE05A8F8A9C4E00.cer
File:                     C0E6F60F49662D74360BD3BBCFE05A8F8A9C4E00.cer (raw, json)
Hash identifier:          h4Zwp9OOE5GsjqRQUPHMWvh0hAcnuhd19RyY1mT/rrg=
Subject key identifier:   C0:E6:F6:0F:49:66:2D:74:36:0B:D3:BB:CF:E0:5A:8F:8A:9C:4E:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       297B4670665D416B54EA61D0E7F02FCA95091D2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/C0E6F60F49662D74360BD3BBCFE05A8F8A9C4E00.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Jun 2022 20:09:07 +0000
Certificate not after:    Fri 02 Jun 2023 20:14:07 +0000
Subordinate resources:    AS: 28299
                          IP: 177.12.160.0/20
                          IP: 177.185.192.0/20
                          IP: 187.1.128.0/20
                          IP: 189.38.80.0/20
                          IP: 191.6.192.0/19
                          IP: 2804:10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7b:46:70:66:5d:41:6b:54:ea:61:d0:e7:f0:2f:ca:95:09:1d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  3 20:09:07 2022 GMT
            Not After : Jun  2 20:14:07 2023 GMT
        Subject: CN=C0E6F60F49662D74360BD3BBCFE05A8F8A9C4E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:cf:41:61:99:06:7b:70:29:9a:8b:df:eb:
                    c3:67:50:55:c7:29:cb:4d:56:e5:a7:bc:e2:39:1c:
                    1f:a0:ca:c4:a3:a9:48:7a:ff:b4:43:41:b8:75:aa:
                    8b:ca:78:f2:d1:f2:44:c2:f2:2f:19:e2:bf:03:d0:
                    ac:60:85:29:1e:4f:f5:4e:f9:34:dd:fa:c8:fd:1e:
                    eb:dc:fc:72:4b:e6:39:9f:3b:91:27:b9:1c:36:41:
                    de:65:df:33:c3:74:72:d6:e0:fc:d3:2d:d4:91:34:
                    82:e6:25:47:e8:6d:61:bf:1e:fd:22:c9:ce:52:88:
                    33:1d:ba:73:97:ae:31:8c:23:9e:a8:50:d5:3f:be:
                    13:c5:a3:0e:49:c6:29:cf:47:7f:2f:96:b8:92:61:
                    2c:19:98:22:fd:b9:86:fb:42:dc:75:20:20:ca:2f:
                    91:00:fc:47:b8:e4:41:1f:ab:5b:6b:f1:6d:e5:cc:
                    e1:3a:13:e5:8b:a2:d1:1e:30:d9:e9:21:c4:37:93:
                    7c:cc:10:0b:9e:6d:08:52:aa:ba:c0:4c:ed:67:01:
                    1a:ef:b8:a8:d5:51:3a:23:c1:8c:98:77:15:bd:6f:
                    6f:53:1e:8f:ec:32:47:42:7e:30:fc:d6:9c:27:72:
                    47:3d:d1:a3:47:1f:01:cb:28:9c:6e:4b:60:87:b6:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:E6:F6:0F:49:66:2D:74:36:0B:D3:BB:CF:E0:5A:8F:8A:9C:4E:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/C0E6F60F49662D74360BD3BBCFE05A8F8A9C4E00.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.160.0/20
                  177.185.192.0/20
                  187.1.128.0/20
                  189.38.80.0/20
                  191.6.192.0/19
                IPv6:
                  2804:10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28299

    Signature Algorithm: sha256WithRSAEncryption
         05:6e:29:95:14:35:b9:a3:6b:21:c5:70:f8:cc:90:ee:4a:22:
         52:a1:f0:70:8f:be:9b:05:63:b3:a2:d5:49:8e:8e:d7:f2:7a:
         a9:35:b2:a3:93:44:19:10:50:ec:b4:bc:a1:be:f9:53:0b:52:
         64:c3:52:79:ee:1b:81:91:cb:6a:08:78:36:9e:39:d0:a5:87:
         74:f6:07:81:ff:d7:97:10:cb:32:25:1a:87:a1:23:81:6b:98:
         38:49:60:9e:f2:c8:e4:3d:a6:54:18:22:7e:39:83:53:cd:cf:
         f5:6f:79:cb:7b:c7:f2:a5:08:0c:1b:c2:6d:42:1c:72:69:47:
         b5:0f:29:e6:5e:b8:db:3e:1d:46:4d:b1:54:d6:8a:99:54:50:
         fd:c4:6f:89:55:0a:6c:7c:d1:de:e4:e2:81:7b:30:e8:7c:80:
         bb:dd:ad:ae:57:03:48:b9:5f:8b:c2:55:21:dc:46:7b:c0:e0:
         44:6d:39:38:f5:0d:b1:5f:1d:9a:f5:91:c5:2b:97:28:64:21:
         4b:1c:0a:09:f1:c1:b8:9d:5b:15:06:34:b4:b0:bb:74:2a:43:
         34:ce:ba:72:eb:86:f6:83:10:e5:15:66:3d:1e:a2:ca:fe:c3:
         92:23:17:fe:82:29:24:0f:f0:df:70:4d:8f:68:cc:76:43:44:
         92:21:f6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org