Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.cer
File:                     F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.cer (raw, json)
Hash identifier:          VQ3m7V2ytDMj2ygGKMp/YG+RW7LeU1LBWpS/df3pVb8=
Subject key identifier:   F6:C8:14:5E:EF:98:61:91:6E:BD:BF:83:7D:B6:A8:A7:78:8E:7F:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68D7D51E5FBD7CFD704F5C2CB0627A806B383418
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 18:57:32 +0000
Certificate not after:    Mon 03 Mar 2025 19:02:32 +0000
Subordinate resources:    AS: 266920
                          IP: 45.225.16.0/22
                          IP: 2804:4558::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d7:d5:1e:5f:bd:7c:fd:70:4f:5c:2c:b0:62:7a:80:6b:38:34:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 18:57:32 2024 GMT
            Not After : Mar  3 19:02:32 2025 GMT
        Subject: CN=F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0e:27:32:da:ff:fa:89:3d:3f:37:f3:de:ab:
                    b2:40:93:6e:d6:b4:2a:43:54:75:b8:dc:d0:28:b0:
                    5b:7d:04:69:c3:d6:35:6f:37:89:20:10:39:74:de:
                    9a:27:94:19:42:d4:15:fe:22:87:bb:01:b8:19:60:
                    83:29:65:7a:6e:de:fd:c5:57:79:21:93:a8:8a:ea:
                    47:71:8d:3a:60:33:03:02:2f:3a:da:eb:79:a4:c9:
                    a7:a8:33:19:bf:39:7c:0f:3f:b0:ce:ec:0a:fe:f5:
                    9d:81:ae:23:f2:af:33:a6:c7:eb:83:01:da:26:b3:
                    30:76:af:83:b4:9d:ba:24:78:08:81:c6:bf:56:05:
                    c6:d8:c3:9b:a8:0b:92:f7:b6:20:15:d9:1e:22:b8:
                    30:9e:73:0f:87:d8:eb:2f:83:2e:ab:98:7e:22:d5:
                    73:fa:a4:49:97:b7:b0:4f:3b:83:47:ea:a7:e8:34:
                    96:0a:f2:59:83:c3:a7:95:72:52:22:87:c4:89:15:
                    42:8d:6c:23:2c:77:4a:34:95:17:9f:a6:91:6f:bf:
                    6c:5d:72:00:93:16:0e:dd:9b:65:ea:55:13:fb:c2:
                    94:f0:c7:fc:cf:d8:96:4c:86:45:e1:c8:aa:e7:2e:
                    99:dd:57:2e:3a:33:05:8a:7c:bd:a8:67:8b:10:d8:
                    a6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:C8:14:5E:EF:98:61:91:6E:BD:BF:83:7D:B6:A8:A7:78:8E:7F:F5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.16.0/22
                IPv6:
                  2804:4558::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266920

    Signature Algorithm: sha256WithRSAEncryption
         4a:14:b8:68:6f:89:8c:72:57:d9:fe:91:7d:cc:22:b2:b9:c7:
         45:04:bb:c5:13:8a:d0:fa:6b:9b:1a:e7:f3:f6:19:df:c1:17:
         d0:94:43:b8:b7:26:ef:3b:0c:60:84:b4:e8:27:08:89:e6:5d:
         76:30:f8:8d:db:77:90:88:84:fd:62:a9:a0:fc:17:44:77:11:
         8d:9f:09:65:61:00:a9:2e:a6:db:cb:19:9f:71:7f:d7:ff:94:
         85:5b:19:20:cf:d6:4d:b6:39:81:f1:bf:28:5b:22:28:df:77:
         d5:66:82:6d:60:29:bc:20:f3:83:fe:62:58:4a:bd:cc:1b:71:
         68:0c:a6:79:ed:9a:fd:60:37:54:10:16:ef:8f:26:2d:9d:79:
         73:fa:3a:bf:ca:5e:09:90:4e:67:17:b3:7f:8a:cb:99:35:8c:
         90:19:b4:20:0c:b7:a9:7a:74:fb:3a:43:49:ff:35:11:67:df:
         39:41:b7:81:d2:48:02:61:75:cc:47:5b:6e:b4:e9:19:90:19:
         6e:1e:d2:10:6c:3f:c3:c0:cb:1e:1b:83:47:f1:c4:5c:1b:d9:
         e9:02:04:49:2b:59:36:3f:7c:4e:ce:a2:38:12:c8:5f:1d:fb:
         91:20:51:eb:45:0d:ef:be:1b:84:3a:3d:2d:bd:f5:ea:2b:eb:
         a6:45:55:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:18:19 2025 by rpki-client