Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CA6B34AFB25E47173E38783782E46D43F86C4899.cer
File:                     CA6B34AFB25E47173E38783782E46D43F86C4899.cer (raw, json)
Hash identifier:          RyJql1/YZPsxQK/he5HknItsAqTB35U761+NvTbYuSM=
Subject key identifier:   CA:6B:34:AF:B2:5E:47:17:3E:38:78:37:82:E4:6D:43:F8:6C:48:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       408144AF3DEE2CC761BA0110F7116C421605E69D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/CA6B34AFB25E47173E38783782E46D43F86C4899.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Dec 2023 05:24:20 +0000
Certificate not after:    Sat 28 Dec 2024 05:29:20 +0000
Subordinate resources:    AS: 268870
                          IP: 45.174.184.0/22
                          IP: 2804:5bd0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:81:44:af:3d:ee:2c:c7:61:ba:01:10:f7:11:6c:42:16:05:e6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 30 05:24:20 2023 GMT
            Not After : Dec 28 05:29:20 2024 GMT
        Subject: CN=CA6B34AFB25E47173E38783782E46D43F86C4899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:98:13:e7:d5:6c:9d:7e:d7:4a:5f:b5:9b:04:
                    77:dc:02:66:c2:24:8c:27:53:17:0f:b4:f5:54:e3:
                    b4:d9:82:f1:7d:00:58:b6:b1:1c:87:35:5a:35:e5:
                    8f:64:a7:54:c3:8d:8a:2b:8b:25:09:00:47:f8:8d:
                    81:87:b2:1c:ae:c0:06:a0:87:88:1b:78:b0:fe:9c:
                    13:1d:22:97:a6:99:c8:9b:18:ab:d3:84:53:c1:74:
                    fe:e5:d0:13:e5:05:c1:ae:38:a0:6b:7e:5b:1a:42:
                    45:e2:90:06:90:1f:6c:7b:f1:e1:1c:92:f8:17:5a:
                    3a:32:1c:c3:04:a7:72:cb:1e:0d:e8:e5:55:72:3e:
                    c5:a4:c4:fa:72:cd:85:af:3f:cb:d9:9b:af:f4:4b:
                    1b:db:7a:b6:04:6a:68:1e:e2:18:53:58:0c:f7:ef:
                    d8:a8:2d:6f:14:15:ea:8b:fe:99:26:ba:87:d7:d2:
                    08:68:f5:11:12:7a:68:77:e7:75:6a:85:36:93:97:
                    ba:9c:6a:f0:24:ff:90:68:36:f8:f4:49:08:b2:c5:
                    c8:30:90:31:08:05:6c:67:db:8b:44:93:ba:f6:cd:
                    78:fc:4b:d4:19:56:b8:c4:ba:5f:3a:fd:56:74:8f:
                    c3:50:90:d0:94:4a:aa:58:a9:21:a3:45:ba:f5:ef:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:6B:34:AF:B2:5E:47:17:3E:38:78:37:82:E4:6D:43:F8:6C:48:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/CA6B34AFB25E47173E38783782E46D43F86C4899.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.184.0/22
                IPv6:
                  2804:5bd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268870

    Signature Algorithm: sha256WithRSAEncryption
         77:00:9d:28:ab:89:69:7f:60:56:07:5c:35:82:67:67:6b:15:
         f7:83:f8:c5:32:8d:10:62:c2:9d:38:79:b4:36:90:4d:28:0d:
         59:91:6a:54:eb:05:a6:b2:f6:3f:23:13:8e:e5:55:0c:ec:6d:
         24:8f:fd:9a:6c:60:7e:10:df:4a:3a:89:5f:53:4b:5e:d6:c8:
         71:4d:a1:90:d4:5f:da:d2:02:ac:0e:d0:e3:1e:a8:df:2f:4b:
         80:c6:99:2e:3b:51:0a:72:69:07:3e:ad:b0:79:4e:ec:82:04:
         ae:2c:f7:e9:01:5c:6e:aa:38:75:5b:6b:7e:ba:b3:95:cb:e1:
         42:cf:0c:ff:cb:89:3f:d0:31:91:d6:4b:e4:0f:af:a2:23:b5:
         1b:0c:36:75:dd:fb:a9:3b:65:62:eb:43:48:69:22:c4:6c:05:
         e3:ee:93:fb:8c:d8:8a:76:03:9c:13:64:9f:32:16:b1:44:f2:
         de:ab:32:f7:24:84:31:6c:7b:e9:64:a9:26:71:f5:32:f1:80:
         ba:d7:a8:dc:5a:c6:f1:cc:84:1f:a8:6e:82:26:58:73:cc:f2:
         eb:91:f5:e6:38:97:0c:fd:8e:da:cf:db:aa:fa:45:e6:ba:8b:
         2e:7a:3b:6e:88:77:bb:9a:74:5b:81:7c:b5:f7:58:94:81:5e:
         34:c2:26:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org