Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7.cer
File:                     E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7.cer (raw, json)
Hash identifier:          fzlAIQoFbOp1mFoEcXgl+Zqe6CyXVF8OyItAWZvshtI=
Subject key identifier:   E6:B9:A7:01:BE:3F:6A:23:53:E6:C5:36:B8:1E:FF:25:20:AB:61:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       227764CCCAF23F8E8442810A747F356CED2EA708
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 26 Aug 2023 20:47:23 +0000
Certificate not after:    Sat 24 Aug 2024 20:52:23 +0000
Subordinate resources:    AS: 264550
                          IP: 138.0.136.0/22
                          IP: 170.0.32.0/22
                          IP: 2804:215c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:77:64:cc:ca:f2:3f:8e:84:42:81:0a:74:7f:35:6c:ed:2e:a7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 26 20:47:23 2023 GMT
            Not After : Aug 24 20:52:23 2024 GMT
        Subject: CN=E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:69:94:12:ac:0f:78:26:75:22:54:c6:d5:
                    5d:55:2e:25:f8:74:f6:a3:e6:03:d2:3f:80:d3:b7:
                    49:61:92:d5:74:62:c9:76:90:e7:30:85:ac:79:ae:
                    a7:eb:b5:fd:bb:a2:54:04:c3:d8:e8:c1:0a:cd:f4:
                    b8:64:fc:1b:98:b9:85:6f:f1:96:16:99:57:ae:b0:
                    36:54:ba:37:d9:6b:1a:5a:50:46:8c:66:e1:c1:3f:
                    fd:69:ab:10:52:0a:a0:db:80:dd:5d:1a:2d:38:88:
                    f0:af:69:b4:36:a8:ac:6b:fe:80:4d:5c:4e:39:d0:
                    da:43:3f:7a:09:05:f3:f8:1b:0b:58:6e:f3:05:e7:
                    0a:82:56:02:49:d0:df:8c:4b:94:cf:9f:75:70:cb:
                    c6:7a:87:28:94:c0:82:97:a1:b6:2e:72:9b:fe:7e:
                    97:0a:22:60:15:55:42:42:b8:3b:ae:16:39:2b:fc:
                    31:59:93:af:dd:92:4a:85:dc:0b:7b:ff:89:bd:c5:
                    bf:5a:3b:9b:ec:48:54:c8:a2:87:67:0c:f6:38:20:
                    30:88:e4:ea:51:d7:1a:c3:43:59:51:9c:cf:24:07:
                    9e:54:1f:b4:60:9f:76:05:cd:f2:17:a6:58:76:3b:
                    d1:e9:ba:e0:e1:80:c1:96:03:df:6c:3f:fc:f0:3d:
                    91:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:B9:A7:01:BE:3F:6A:23:53:E6:C5:36:B8:1E:FF:25:20:AB:61:A7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.136.0/22
                  170.0.32.0/22
                IPv6:
                  2804:215c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264550

    Signature Algorithm: sha256WithRSAEncryption
         31:b1:60:65:f2:16:3a:76:f3:b7:9c:64:11:7b:17:2b:80:be:
         5a:40:90:ed:d5:b0:b7:f6:6e:d2:96:2f:33:5d:26:96:a6:2b:
         d7:60:31:76:d1:49:56:ff:46:8c:7d:3d:ef:45:d2:ca:b9:70:
         2b:6f:da:4d:cf:4e:d7:bf:f0:4a:9f:d9:59:83:08:21:06:bc:
         9a:1a:1e:af:b8:d3:11:02:d6:27:0c:12:61:d8:50:ad:91:ed:
         df:62:ee:75:21:46:2e:24:42:eb:4d:f4:c3:1d:ca:45:8d:cd:
         8b:9b:e1:05:4c:cc:4a:5a:e9:21:45:dd:f8:94:70:57:c4:3e:
         fb:32:05:35:c7:35:43:12:90:af:03:18:84:19:a3:2e:72:dd:
         46:3b:bd:c3:ef:e7:65:7c:46:ef:56:8f:94:b8:13:30:9d:e0:
         e6:03:03:f2:ba:7e:d8:10:21:f2:f5:38:e6:67:9e:ed:4b:0d:
         22:81:61:d7:fb:1d:9b:c5:32:46:27:01:13:b6:10:0e:a5:0d:
         e2:39:66:10:73:bd:ea:86:ea:e0:32:86:3e:3b:2c:73:f7:06:
         69:38:92:22:9e:3a:5b:6a:56:2e:f8:c0:d9:d1:cd:15:eb:b4:
         91:cf:04:6f:0e:b4:fd:7a:55:60:06:c9:9c:2c:57:79:08:e1:
         d3:b9:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org