Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E6ECC64CB6F8E8DDBCFC5A1D28E894DCAAFEC31B.cer
File:                     E6ECC64CB6F8E8DDBCFC5A1D28E894DCAAFEC31B.cer (raw, json)
Hash identifier:          CR5K3XtHKnfCwgrnViwu3naTxC6VnpirnKh9m0n96o4=
Subject key identifier:   E6:EC:C6:4C:B6:F8:E8:DD:BC:FC:5A:1D:28:E8:94:DC:AA:FE:C3:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0C113C25F3B9D7F9EE7FB9C1977BAD0F7DD70C4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/1/E6ECC64CB6F8E8DDBCFC5A1D28E894DCAAFEC31B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Oct 2022 14:12:55 +0000
Certificate not after:    Thu 26 Oct 2023 14:17:55 +0000
Subordinate resources:    AS: 263646
                          IP: 138.121.172.0/22
                          IP: 138.185.60.0/22
                          IP: 168.232.52.0/22
                          IP: 170.81.84.0/22
                          IP: 170.150.240.0/22
                          IP: 170.246.228.0/22
                          IP: 177.74.128.0/21
                          IP: 201.148.236.0/22
                          IP: 2804:10bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:11:3c:25:f3:b9:d7:f9:ee:7f:b9:c1:97:7b:ad:0f:7d:d7:0c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 27 14:12:55 2022 GMT
            Not After : Oct 26 14:17:55 2023 GMT
        Subject: CN=E6ECC64CB6F8E8DDBCFC5A1D28E894DCAAFEC31B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:81:d4:1a:47:6f:91:e8:fc:60:ce:fe:11:
                    94:aa:54:bb:0e:16:6e:2d:86:57:85:71:aa:2f:a7:
                    21:49:37:59:65:b9:25:57:b8:a4:d8:39:0e:3e:49:
                    ee:51:a2:b1:86:e1:35:57:8b:93:db:51:71:d8:e8:
                    6c:c7:b3:ed:51:ed:44:b8:57:7b:e7:dd:38:0f:9b:
                    76:f5:71:6d:5b:c8:93:56:fe:c6:1b:80:92:65:7f:
                    58:5f:4c:25:dd:92:7e:5d:dd:55:2e:9d:50:9e:8e:
                    bc:41:2b:7e:63:44:5b:4d:7e:c2:7a:b3:5a:e1:1f:
                    e9:b4:62:3e:55:e9:d8:b5:b2:85:1f:d8:ec:27:5a:
                    54:b1:8f:8c:d4:25:9e:09:b2:d5:23:e5:51:1a:16:
                    d0:34:24:9d:2f:d3:43:f3:d9:64:8f:36:7b:a7:a0:
                    79:c3:dd:d9:77:4f:7c:08:27:5f:c0:8b:5a:86:62:
                    7b:88:0f:7f:40:8b:ed:8d:37:12:46:25:43:a5:2b:
                    b1:dd:9f:b9:32:ba:7d:4e:88:86:24:59:4d:64:6b:
                    48:a4:6c:ec:6b:67:d5:08:4a:64:a0:7f:e3:46:21:
                    80:ce:7e:23:0a:4d:1b:fa:20:cd:6b:1a:22:8d:d1:
                    e9:54:17:87:f0:b1:16:ad:bd:7b:5f:d0:0a:ab:2e:
                    f1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:EC:C6:4C:B6:F8:E8:DD:BC:FC:5A:1D:28:E8:94:DC:AA:FE:C3:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/1/E6ECC64CB6F8E8DDBCFC5A1D28E894DCAAFEC31B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.172.0/22
                  138.185.60.0/22
                  168.232.52.0/22
                  170.81.84.0/22
                  170.150.240.0/22
                  170.246.228.0/22
                  177.74.128.0/21
                  201.148.236.0/22
                IPv6:
                  2804:10bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263646

    Signature Algorithm: sha256WithRSAEncryption
         b2:ba:d4:ab:6c:1f:94:c8:a4:d5:78:7f:6b:2d:cf:85:6c:52:
         1c:41:34:18:8d:61:e3:f7:4e:96:78:81:75:2f:82:19:eb:7f:
         56:90:39:da:70:89:1f:a9:cf:25:62:3d:a9:58:d4:e7:0a:a9:
         48:52:0e:43:34:a4:a5:05:2f:8a:78:19:22:26:6d:d7:7e:a5:
         63:74:8f:78:71:86:d2:43:2b:d6:4f:69:7e:8d:0f:cf:d5:98:
         21:d0:9b:e3:f5:c2:7a:cd:ec:00:85:55:a7:8b:09:44:08:28:
         75:ae:95:d6:2e:29:b5:37:eb:17:8d:bd:9c:47:48:eb:94:64:
         f6:10:64:9d:d4:ae:bc:8b:b2:2d:b7:6b:28:6b:d7:16:7e:22:
         b9:dc:2c:1c:71:d1:09:7a:3b:2d:a0:d2:3f:fc:30:b9:0a:38:
         ae:bc:be:60:9e:0d:a2:2b:7d:72:0f:30:40:5f:36:d1:80:1d:
         af:67:ed:0e:7b:a4:1a:bb:07:36:23:20:d3:86:7d:b3:9e:db:
         76:e8:1a:9a:06:61:18:3b:f9:f0:eb:0a:ac:45:6a:6c:a0:60:
         12:0a:49:93:16:7d:4e:39:f8:87:18:5f:48:d3:1b:69:81:8c:
         10:ba:84:1d:9c:54:b7:49:2e:fb:7c:66:29:19:ce:f1:5c:0f:
         5b:c5:e3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org