Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer
File:                     C6A2521E13521DFA520C40EC85BF7155050CA33B.cer (raw, json)
Hash identifier:          VBXTbWi8ZPSB7LRs7im5W+z5txLt6gpCLTNJk9YEb7o=
Subject key identifier:   C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1277DA2F2CDBF336943223247B4135DAD6B6A16F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 13:25:47 +0000
Certificate not after:    Wed 02 Apr 2025 13:30:47 +0000
Subordinate resources:    AS: 268726
                          IP: 45.171.184.0/22
                          IP: 2804:59cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:77:da:2f:2c:db:f3:36:94:32:23:24:7b:41:35:da:d6:b6:a1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 13:25:47 2024 GMT
            Not After : Apr  2 13:30:47 2025 GMT
        Subject: CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:10:37:a7:7c:6b:ca:a5:ab:2b:d4:66:81:
                    41:be:c7:69:fb:e5:46:09:b4:f1:b5:55:d0:9a:53:
                    dc:3a:ea:26:88:59:95:7d:d1:af:2a:f2:08:70:34:
                    7e:ff:ab:f2:84:df:0f:8e:96:e5:8b:7c:92:71:38:
                    e3:b0:f8:18:92:17:45:a9:fe:fc:08:2d:3d:f3:e8:
                    6c:4c:ff:20:7e:a7:df:20:0c:bc:99:53:36:45:04:
                    71:de:44:84:97:71:aa:db:2d:8d:59:d0:04:91:18:
                    c9:55:0f:03:45:24:c9:71:ca:ee:25:44:66:67:09:
                    d1:30:8f:31:b5:1b:70:33:93:e2:0a:5e:5f:3d:92:
                    9e:6b:83:17:18:39:d2:14:20:30:7e:e9:c6:25:32:
                    84:46:86:1f:f0:20:76:a6:d0:09:d4:3b:fa:cf:02:
                    f1:78:d7:cc:01:17:f0:aa:61:6e:3a:c0:52:67:33:
                    15:4e:fb:2d:f0:ea:a5:e3:93:36:86:be:bc:5d:13:
                    f2:06:46:a5:be:6a:5c:35:45:49:cb:a9:b7:01:5b:
                    25:1a:43:86:3c:fa:14:99:8d:82:94:ce:6a:31:d0:
                    ed:04:85:59:13:43:49:6c:4f:45:d0:45:5a:22:6b:
                    74:0a:82:3e:2e:58:37:65:62:d7:b9:21:8e:7e:1e:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.184.0/22
                IPv6:
                  2804:59cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268726

    Signature Algorithm: sha256WithRSAEncryption
         21:31:f1:b4:84:38:5a:28:c3:2a:8e:ab:0e:a2:f2:aa:7e:09:
         c4:bd:61:cc:05:2d:f2:b5:cd:f2:54:32:13:5c:6a:6d:77:53:
         61:81:7e:a5:45:14:c7:98:f4:07:74:1d:b3:3a:11:ff:3e:d3:
         61:17:e4:96:21:ee:c7:89:52:af:09:ea:86:6e:92:b5:f0:23:
         d5:2f:ae:b2:52:0c:3a:c1:5c:8f:be:2a:87:e0:5d:63:e1:18:
         8c:80:6a:79:c8:ef:b7:6b:77:1f:de:0f:f5:c0:da:e3:9d:cd:
         38:2d:8e:b5:c8:70:c6:95:18:a8:88:db:2e:40:32:07:aa:29:
         10:8d:92:74:b0:9d:91:37:c3:5c:c2:eb:d6:c2:6f:c0:2c:b4:
         e0:b7:74:da:91:53:27:ec:be:85:07:84:2e:8a:ca:32:8d:94:
         c5:2b:d0:ba:f7:77:43:3d:02:6e:4c:52:62:32:bb:dc:96:33:
         da:5d:3b:be:3f:2b:1d:4d:8b:91:10:2d:ab:01:30:85:c8:01:
         d9:ce:fd:44:ed:97:2d:30:9b:d0:76:4a:9e:80:6b:a1:af:98:
         72:a8:9b:75:5a:ff:ac:f8:09:0d:e5:63:f3:22:26:f4:8b:3d:
         28:44:0b:62:d8:55:2b:fa:56:90:1a:65:fa:7d:e4:5a:7f:26:
         d4:5d:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org