Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF6F651962E513C0566982D037B8C2B9D63509F0.cer
File:                     CF6F651962E513C0566982D037B8C2B9D63509F0.cer (raw, json)
Hash identifier:          C9AdACTGpkbvzfIqcaVyk6F0jUzURWww9yXCFpfp3vo=
Subject key identifier:   CF:6F:65:19:62:E5:13:C0:56:69:82:D0:37:B8:C2:B9:D6:35:09:F0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7EA0FAE1BE948CAADCF165F79AD4D979731CCFB6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eqi5hF6M1Pmcyrjo2iDDnPB5rfUQpde9LkatGLnLEy1r/0/CF6F651962E513C0566982D037B8C2B9D63509F0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eqi5hF6M1Pmcyrjo2iDDnPB5rfUQpde9LkatGLnLEy1r/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Apr 2022 23:14:00 +0000
Certificate not after:    Thu 06 Apr 2023 23:19:00 +0000
Subordinate resources:    AS: 268834
                          IP: 45.172.252.0/22
                          IP: 2804:5b50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a0:fa:e1:be:94:8c:aa:dc:f1:65:f7:9a:d4:d9:79:73:1c:cf:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  7 23:14:00 2022 GMT
            Not After : Apr  6 23:19:00 2023 GMT
        Subject: CN=CF6F651962E513C0566982D037B8C2B9D63509F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f8:0e:c6:3c:ff:21:37:ac:78:e7:f1:30:48:
                    96:57:87:8f:f2:50:4b:61:52:1a:82:56:d5:49:9e:
                    79:ef:8d:8f:26:f7:f4:e7:dd:83:a6:6c:0b:7d:ef:
                    cd:29:71:0a:6e:d6:4b:29:ed:1e:8e:d8:b3:54:2f:
                    a8:e6:ec:24:01:3b:16:b5:d3:6f:d1:c3:09:34:9e:
                    7e:3c:99:16:2e:7d:51:83:31:00:ba:ca:2c:f4:4d:
                    50:bf:c5:e8:74:a3:05:da:47:a7:66:42:7a:fd:d0:
                    fd:b3:4a:2e:ae:1f:91:28:d7:7e:de:b7:96:59:f4:
                    a6:c2:86:60:13:b8:29:f0:75:5b:20:52:be:62:7e:
                    cd:d4:9e:59:89:89:86:4e:5b:c5:e7:28:dc:c6:c6:
                    1f:f8:9e:03:a6:4e:80:2d:eb:2e:fc:9a:9c:ed:71:
                    ec:78:63:82:2a:07:42:b6:8f:ed:50:d4:8e:f2:62:
                    67:86:b4:67:38:5b:46:5f:9b:99:18:04:0c:e1:3d:
                    a5:c5:90:e6:00:74:a6:89:b7:41:61:ab:02:c9:17:
                    73:b2:69:0a:ef:8c:29:cb:cc:b4:03:44:6d:ef:2c:
                    d1:ac:af:49:63:94:93:c7:c8:b2:6a:e4:eb:a1:3e:
                    f2:8d:af:b2:10:42:ae:db:a7:af:75:ac:5d:4b:d2:
                    9e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:6F:65:19:62:E5:13:C0:56:69:82:D0:37:B8:C2:B9:D6:35:09:F0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eqi5hF6M1Pmcyrjo2iDDnPB5rfUQpde9LkatGLnLEy1r/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eqi5hF6M1Pmcyrjo2iDDnPB5rfUQpde9LkatGLnLEy1r/0/CF6F651962E513C0566982D037B8C2B9D63509F0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.252.0/22
                IPv6:
                  2804:5b50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268834

    Signature Algorithm: sha256WithRSAEncryption
         60:a9:de:21:49:b9:0d:bd:16:3b:4e:c8:06:b4:25:6c:23:e7:
         65:8c:16:6d:53:6a:ce:6e:f8:53:0e:e7:38:cf:22:4d:9d:4d:
         24:80:bd:3e:da:ee:21:13:cd:00:3c:89:84:f8:00:0f:6f:9d:
         b0:e6:f6:76:03:43:83:c6:d4:db:63:a7:f6:af:de:21:14:d9:
         39:e8:26:79:58:c7:1b:fb:1e:7e:c0:2d:75:9c:dc:b8:07:5d:
         1e:de:5d:10:14:fb:ab:2a:df:83:fb:b2:6f:a5:02:fa:cf:c4:
         34:85:51:88:41:d2:54:e2:a8:a7:a7:eb:f4:bb:8c:99:f9:64:
         89:07:71:d6:59:05:40:83:fe:a4:de:bc:6d:5b:a3:8a:b3:86:
         a3:73:17:6d:ba:6b:d9:74:46:ab:6a:f6:ca:9f:32:bc:83:32:
         ea:81:a0:92:ac:2f:da:a1:e0:a4:50:60:f9:a9:f5:82:f0:b0:
         e4:57:f0:b1:57:6f:07:cf:d0:76:e2:4f:1b:8b:16:de:27:86:
         c6:ee:d2:26:f4:99:68:53:c0:52:1e:a4:c6:e2:4d:f7:d2:d1:
         1b:f7:13:7d:e3:22:04:f5:f6:8e:13:0d:4e:8b:ea:61:9f:9c:
         82:ea:24:85:21:fe:2c:14:17:7a:22:2c:fd:79:f3:ab:9b:d7:
         67:2f:7d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org