Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/060A3504196D48C7C47255269CD48C73EA4E3404.cer
File:                     060A3504196D48C7C47255269CD48C73EA4E3404.cer (raw, json)
Hash identifier:          VlJ5JmC+FStdD+eI5uNMelQAreGIQlWpOL19appnN1Q=
Subject key identifier:   06:0A:35:04:19:6D:48:C7:C4:72:55:26:9C:D4:8C:73:EA:4E:34:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4EF2F29EBEDDC13B417963E3997BD6750011A9AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/060A3504196D48C7C47255269CD48C73EA4E3404.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Dec 2023 20:28:14 +0000
Certificate not after:    Fri 06 Dec 2024 20:33:14 +0000
Subordinate resources:    AS: 267560
                          IP: 181.191.216.0/22
                          IP: 2804:4348::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f2:f2:9e:be:dd:c1:3b:41:79:63:e3:99:7b:d6:75:00:11:a9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  8 20:28:14 2023 GMT
            Not After : Dec  6 20:33:14 2024 GMT
        Subject: CN=060A3504196D48C7C47255269CD48C73EA4E3404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:89:da:c7:aa:6e:bb:19:2e:53:67:f3:90:54:
                    d4:a3:ad:27:2d:9d:27:eb:8b:5b:b5:1a:76:82:bb:
                    df:97:9d:5d:ab:0f:79:1e:d3:d1:68:3c:e0:67:08:
                    bf:15:83:b8:88:82:98:fb:3e:3f:dd:29:ef:d3:e0:
                    51:cb:c3:b9:e9:ca:fc:6c:f9:ac:0d:c9:79:ae:53:
                    73:f4:07:8f:b7:9b:b8:c9:4f:95:3d:80:bd:37:94:
                    d0:f0:8c:31:95:72:47:09:d0:3a:84:12:bd:a4:78:
                    6f:16:15:11:5f:87:42:69:7e:7b:69:c4:50:b3:46:
                    6d:67:8e:3a:e0:4f:4c:9b:83:03:f5:67:3f:26:6d:
                    4c:6d:a1:1b:e8:4e:b6:1e:d3:a6:d1:93:d8:61:86:
                    e5:53:7f:a7:07:7b:1d:ba:7c:ad:92:52:23:5e:f8:
                    63:ae:df:cf:d6:4a:e9:29:5c:8f:36:ca:31:54:d9:
                    f5:a7:f1:2d:c0:c5:72:5a:25:6e:42:b0:8e:43:ec:
                    90:e8:e9:a6:50:8c:9d:e6:bf:87:e2:ac:5a:4c:1c:
                    14:91:58:1d:91:1a:fe:cd:d8:8f:3a:25:0f:2b:48:
                    29:e6:52:65:96:36:0b:ed:ca:9b:f5:c4:43:e8:da:
                    08:fe:aa:9b:fe:fc:82:74:49:d3:5e:25:12:fd:4e:
                    12:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:0A:35:04:19:6D:48:C7:C4:72:55:26:9C:D4:8C:73:EA:4E:34:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/060A3504196D48C7C47255269CD48C73EA4E3404.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.216.0/22
                IPv6:
                  2804:4348::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267560

    Signature Algorithm: sha256WithRSAEncryption
         66:ca:5a:8d:6a:4e:41:cd:aa:89:26:9e:81:62:f1:1c:45:55:
         a4:c5:c7:b0:0b:6f:46:8f:d4:71:de:95:38:b3:13:d2:d4:d3:
         bc:99:15:ae:e0:a5:8a:84:a0:b4:63:cb:b9:bf:04:b1:c3:8b:
         bf:4c:f7:07:60:48:6d:de:60:c1:ab:44:e4:87:46:54:f2:0f:
         2e:80:43:3c:34:b7:37:fd:1d:16:82:45:62:eb:df:62:26:0c:
         95:04:b4:a6:a5:11:bb:28:1c:fa:e8:01:89:83:0f:d4:2a:8f:
         42:7d:f8:73:ca:e4:b4:d4:ae:03:19:b9:f8:e9:05:a4:ec:c8:
         c4:a1:ea:ec:27:39:1e:d2:90:d6:23:56:f2:aa:e7:c7:07:cd:
         14:b0:ce:99:6b:51:e5:27:a6:97:75:43:ae:b7:5e:a4:6b:70:
         f9:20:a9:99:74:ba:98:86:b9:5b:0d:ae:8e:03:67:d6:aa:63:
         f0:f6:96:b2:19:a3:f1:30:fa:98:c8:f0:87:8b:36:27:9c:66:
         1a:ba:44:18:90:c0:4b:bd:75:c1:4d:0f:fb:de:82:c3:30:66:
         63:7f:ac:8e:ea:97:02:93:78:08:68:ed:fc:b7:90:16:67:8d:
         06:e5:30:62:eb:1a:ea:c0:8c:9a:ce:f7:fa:59:2f:82:68:b1:
         78:11:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org