Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CB6C6266A30903A3C0A747ABFDA7510F516400ED.cer
File:                     CB6C6266A30903A3C0A747ABFDA7510F516400ED.cer (raw, json)
Hash identifier:          QjFJXV72jfIVjtA0O9T1yb/C6pTZIOiuIkr5m/w9bio=
Subject key identifier:   CB:6C:62:66:A3:09:03:A3:C0:A7:47:AB:FD:A7:51:0F:51:64:00:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       372599899AA466F937E6C89DAD287EABD11623C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/CB6C6266A30903A3C0A747ABFDA7510F516400ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jan 2024 13:35:31 +0000
Certificate not after:    Wed 29 Jan 2025 13:40:31 +0000
Subordinate resources:    AS: 11432
                          IP: 200.155.128.0/18
                          IP: 200.170.192.0/18
                          IP: 200.194.248.0/21
                          IP: 200.201.128.0/19
                          IP: 2804:138::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:25:99:89:9a:a4:66:f9:37:e6:c8:9d:ad:28:7e:ab:d1:16:23:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 13:35:31 2024 GMT
            Not After : Jan 29 13:40:31 2025 GMT
        Subject: CN=CB6C6266A30903A3C0A747ABFDA7510F516400ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:51:ed:01:c2:44:7a:82:40:ce:a2:2f:74:
                    69:e1:4b:b8:d8:62:85:0a:92:5d:b3:ea:e1:00:50:
                    aa:20:99:43:e9:97:c2:c9:0f:df:ee:b9:c1:e1:fb:
                    a1:57:de:f4:13:91:a7:bb:73:94:1b:37:30:e0:8a:
                    1a:c8:82:56:53:fb:60:70:6e:88:8b:23:56:79:78:
                    02:22:52:5b:58:cf:bb:ec:2a:e3:52:eb:94:80:b9:
                    56:59:b3:ff:8a:85:07:bb:7c:4e:35:d7:f4:c4:6d:
                    25:99:49:2d:51:10:f0:24:d6:da:5c:eb:56:5d:61:
                    6b:9a:4a:c5:b9:c1:ac:e0:01:2c:63:90:a9:62:d4:
                    1e:47:1f:20:f8:bf:91:02:2a:ae:0c:e4:42:4a:01:
                    1a:4f:9f:bc:24:dc:81:ce:48:58:8f:d6:21:f3:81:
                    b2:2f:9a:ce:cf:89:a7:77:dc:e9:68:e9:32:f7:c4:
                    c9:41:bc:bb:73:87:9c:9c:f7:73:7e:8d:07:fe:f3:
                    a1:e1:2d:de:3e:de:55:82:73:17:aa:fd:d5:32:74:
                    10:20:0b:d9:35:69:b6:25:94:37:2f:26:c1:cc:1e:
                    fd:0e:c8:cc:e8:74:71:90:a4:03:f6:8e:9f:c9:c9:
                    a7:75:44:d5:b3:0b:26:2a:11:ae:8d:9a:56:ff:38:
                    8e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:6C:62:66:A3:09:03:A3:C0:A7:47:AB:FD:A7:51:0F:51:64:00:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/CB6C6266A30903A3C0A747ABFDA7510F516400ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.128.0/18
                  200.170.192.0/18
                  200.194.248.0/21
                  200.201.128.0/19
                IPv6:
                  2804:138::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11432

    Signature Algorithm: sha256WithRSAEncryption
         9a:45:ed:71:23:bf:fe:a9:a5:83:ec:70:e2:4a:3d:de:3c:92:
         87:8c:13:f4:c2:b6:9f:ad:64:db:6b:7b:0d:f0:61:09:d0:36:
         27:05:20:af:2b:92:50:9a:fb:d9:10:e0:e0:d9:66:c5:11:b3:
         a6:0f:37:05:fb:00:92:6b:18:6d:20:ba:8a:06:d3:7a:00:f3:
         e1:72:f1:a5:1f:86:11:26:c5:12:d9:58:aa:40:7d:2a:9d:00:
         11:00:23:b9:da:44:9d:3b:42:42:dd:1a:41:63:21:90:69:8e:
         a8:8d:dd:ed:b2:57:54:28:f4:41:4f:8e:2a:a1:26:fa:be:da:
         28:6f:4c:d2:4f:d5:66:8a:4d:41:67:2f:38:30:7a:c1:6c:75:
         95:bd:52:92:4d:fc:64:3e:dd:da:e4:0c:db:e7:ea:4d:1e:0e:
         46:c2:7b:0f:fd:58:47:5b:5e:f9:b7:a0:87:bc:9e:66:4c:1b:
         b2:83:2e:2b:50:dd:9d:c4:4a:76:49:eb:86:cc:07:d5:07:da:
         35:ef:06:fe:b0:9f:f7:a6:6a:15:e8:1b:4a:16:5b:51:dc:87:
         e0:51:ae:9e:ce:a3:f5:30:7b:6e:33:c0:cc:70:90:96:2d:fa:
         6d:b1:ac:43:ef:e8:6c:18:36:e2:67:2a:35:bb:4c:88:5f:d3:
         ec:13:05:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org