Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C6854C1B7C9199CE0A61F0056B2163AD62B2B980.cer
File:                     C6854C1B7C9199CE0A61F0056B2163AD62B2B980.cer (raw, json)
Hash identifier:          oImADgoZaGSw47A0tkyp361NI1PdHO9y582twJFYsv4=
Subject key identifier:   C6:85:4C:1B:7C:91:99:CE:0A:61:F0:05:6B:21:63:AD:62:B2:B9:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1BE3F8D9328924B2A6F45D0665860A04CD1ACDD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/C6854C1B7C9199CE0A61F0056B2163AD62B2B980.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 31 Aug 2023 01:50:33 +0000
Certificate not after:    Thu 29 Aug 2024 01:55:33 +0000
Subordinate resources:    AS: 269671
                          IP: 45.191.124.0/22
                          IP: 2804:6824::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e3:f8:d9:32:89:24:b2:a6:f4:5d:06:65:86:0a:04:cd:1a:cd:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 31 01:50:33 2023 GMT
            Not After : Aug 29 01:55:33 2024 GMT
        Subject: CN=C6854C1B7C9199CE0A61F0056B2163AD62B2B980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:ca:ea:ee:81:83:f1:94:cc:d5:af:b7:c0:
                    fe:f8:a8:53:2d:00:30:61:83:b8:df:2a:e4:21:18:
                    ad:3d:a7:5d:d2:9c:b4:09:9a:0b:d4:ea:0f:c4:6a:
                    34:61:cc:ee:d9:65:25:fd:bd:19:c4:a1:83:f1:99:
                    21:67:66:30:c8:2f:4c:bd:7c:ae:5e:2a:0e:11:a3:
                    8a:3b:ee:63:6e:17:01:12:ba:5b:af:47:8a:d9:96:
                    7a:aa:91:35:c3:96:b1:9e:50:65:36:3b:47:14:5d:
                    45:21:85:8a:49:37:8e:e0:5c:c6:0b:40:42:59:a7:
                    5e:22:4c:32:40:d1:be:70:b6:58:21:46:5f:62:a1:
                    3a:f9:90:03:3b:83:e6:ff:9b:69:d0:ab:89:bf:0a:
                    09:f3:ec:3f:23:ec:be:9b:2c:de:e7:4b:3c:c6:1a:
                    1a:15:6c:23:28:98:a1:9b:43:2f:7b:98:5f:b3:45:
                    82:49:c3:66:ab:a9:5a:75:5b:22:53:c2:1d:da:45:
                    23:de:49:65:cc:ef:c6:48:61:3e:7c:86:70:d0:7e:
                    1e:12:68:f9:dc:dc:e2:7c:ad:05:b4:21:ee:55:44:
                    2d:e8:60:d0:4b:17:36:2c:e3:74:88:43:66:fd:49:
                    a6:35:4a:00:a0:b3:4b:2c:9d:82:bc:33:70:1a:39:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:85:4C:1B:7C:91:99:CE:0A:61:F0:05:6B:21:63:AD:62:B2:B9:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/C6854C1B7C9199CE0A61F0056B2163AD62B2B980.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.124.0/22
                IPv6:
                  2804:6824::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269671

    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:8b:58:22:66:2e:ff:8e:e2:11:7d:bf:08:d1:1e:6f:9a:
         e5:53:19:6a:9b:7d:31:92:df:c9:1c:45:b4:38:22:6d:d6:d3:
         bc:cd:d0:cf:e3:1f:90:39:18:eb:d8:e8:bd:af:73:3a:66:b3:
         4c:21:60:44:6a:07:ff:d2:90:14:16:d7:07:91:15:2a:49:b4:
         5e:94:e0:9b:ec:5e:de:1a:15:53:5e:34:4d:93:c4:9d:22:4e:
         61:0f:eb:1b:07:c6:8e:87:da:61:0f:74:ed:73:e9:c9:7b:aa:
         05:dc:8f:28:62:66:46:9d:1b:ae:71:41:d3:81:b2:c2:63:81:
         27:2c:9c:20:39:f9:a2:b5:24:28:9f:79:d4:72:42:cc:8a:a9:
         6b:90:f4:95:a8:f2:b0:eb:43:98:d4:d9:6a:f5:a2:09:0a:bc:
         5d:4c:e7:fb:a0:75:65:02:d0:97:6b:b7:9e:42:72:f0:97:ad:
         0d:35:1f:e5:cf:9e:00:7b:70:4a:ea:5f:7c:99:01:e3:5a:b1:
         bd:6e:c6:39:03:68:87:38:9e:0f:2b:39:9d:69:8f:db:a9:f4:
         6b:74:a2:56:00:7f:75:a0:48:07:eb:5e:cd:3d:5b:58:4e:07:
         8d:b0:42:47:71:ae:3c:bc:2e:90:56:c0:ec:0f:1f:25:ec:ca:
         ab:7a:23:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org