Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.cer
File:                     D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.cer (raw, json)
Hash identifier:          QKpXWL+2ybStGYfB6r04lmLdM5b4kpeshHghxaDDkiU=
Subject key identifier:   D6:F5:53:EC:FC:DB:A2:52:2E:44:AA:AC:F3:87:79:9E:1C:A9:8E:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1270E17666AE6752BB2126AB485F6FB569F40666
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 18:23:23 +0000
Certificate not after:    Wed 19 Mar 2025 18:28:23 +0000
Subordinate resources:    AS: 266584
                          IP: 45.7.116.0/22
                          IP: 2804:3e44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:70:e1:76:66:ae:67:52:bb:21:26:ab:48:5f:6f:b5:69:f4:06:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 18:23:23 2024 GMT
            Not After : Mar 19 18:28:23 2025 GMT
        Subject: CN=D6F553ECFCDBA2522E44AAACF387799E1CA98EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:f5:cd:9f:cd:87:04:24:f9:86:7f:31:de:
                    74:f8:49:9c:1f:e4:61:02:59:06:f0:18:16:48:8d:
                    3d:75:74:42:77:ec:95:cb:f1:af:d6:cd:0f:64:22:
                    09:79:23:be:94:53:09:f7:fb:43:bf:aa:16:17:16:
                    49:bd:ce:ff:5e:3d:88:04:be:41:75:6d:14:9d:49:
                    16:fc:59:07:32:10:8f:97:b3:b1:ea:6c:b3:42:43:
                    b9:57:dd:9a:ea:5a:61:c2:d7:75:1e:ea:06:a7:b9:
                    ff:22:c8:80:5c:3b:11:75:c7:ad:6c:81:42:67:d8:
                    97:a9:63:db:e7:f2:a2:63:82:60:93:e5:f2:dd:ae:
                    ff:2c:7d:ee:23:28:60:a5:b8:56:e0:6a:a4:68:3a:
                    4b:79:31:d4:2b:d2:f7:08:fc:2b:e5:32:46:6e:cb:
                    74:f5:04:48:42:a8:1b:41:df:e7:43:18:89:59:74:
                    af:7b:55:6d:2c:d6:87:14:28:9b:2a:3e:09:4f:1d:
                    72:88:3c:b6:4f:f8:eb:c0:66:b4:16:4f:03:ba:bf:
                    b0:21:db:23:d2:f5:63:53:06:bc:c9:3d:f8:eb:1e:
                    7d:ec:2e:c5:be:81:0c:f1:4d:bb:f9:22:ad:7f:6c:
                    79:c7:0e:76:5f:b1:d7:1c:74:0e:e2:b8:09:89:f7:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:F5:53:EC:FC:DB:A2:52:2E:44:AA:AC:F3:87:79:9E:1C:A9:8E:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.116.0/22
                IPv6:
                  2804:3e44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266584

    Signature Algorithm: sha256WithRSAEncryption
         85:27:53:a7:24:a8:26:26:c8:a5:3f:92:77:3d:8d:ef:ed:63:
         a2:0e:5a:66:c2:8a:50:4a:65:48:1a:1b:39:eb:69:3a:f6:4d:
         bd:95:3d:23:2f:00:33:f2:75:f2:da:d9:d1:a6:d1:a1:0d:70:
         cb:25:62:8f:64:32:9f:fd:b3:30:6b:1b:fd:f8:d3:29:01:fd:
         29:54:66:a9:4d:67:47:43:8f:17:79:5c:48:da:3d:c1:11:e5:
         ff:cc:b5:fe:20:d0:ad:8b:77:49:e9:6a:e4:25:8f:bd:87:fa:
         b7:38:08:ff:e9:fc:0f:76:60:f3:d8:f1:14:9d:17:a5:32:92:
         f8:62:d4:7a:29:d4:b9:9c:d3:63:e9:9d:57:b5:53:18:86:98:
         35:5b:e6:e7:d9:a8:1f:00:13:ab:cd:00:43:52:42:43:a9:58:
         17:e0:bd:19:d0:6c:c0:eb:0f:2a:80:89:ac:93:d6:77:74:6b:
         f3:02:a1:76:63:e6:00:25:ee:28:c6:13:be:71:8b:34:46:b1:
         31:36:45:79:09:fb:7f:cd:d8:d9:0a:2b:ee:a1:c3:bd:4f:06:
         f9:1a:7c:27:35:9b:dc:3d:0d:21:77:62:df:83:29:52:6e:32:
         37:47:8d:da:fe:df:45:1b:b5:61:1e:44:ed:11:20:23:b5:1f:
         97:65:5e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org