Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/06769F6D0B23295F3DD51E3A59B0F1C7FAAA4BFD.cer
File:                     06769F6D0B23295F3DD51E3A59B0F1C7FAAA4BFD.cer (raw, json)
Hash identifier:          KvlvREb65C/iIrusaVROvLoxK8Z+NqX2PfXo4f8FgIQ=
Subject key identifier:   06:76:9F:6D:0B:23:29:5F:3D:D5:1E:3A:59:B0:F1:C7:FA:AA:4B:FD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       37328EEADC22BDAB04E5508952525D0A0B044587
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/06769F6D0B23295F3DD51E3A59B0F1C7FAAA4BFD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Feb 2023 12:09:42 +0000
Certificate not after:    Mon 12 Feb 2024 12:14:42 +0000
Subordinate resources:    AS: 53181
                          IP: 191.241.64.0/20
                          IP: 201.33.160.0/20
                          IP: 2804:113c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:32:8e:ea:dc:22:bd:ab:04:e5:50:89:52:52:5d:0a:0b:04:45:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 12:09:42 2023 GMT
            Not After : Feb 12 12:14:42 2024 GMT
        Subject: CN=06769F6D0B23295F3DD51E3A59B0F1C7FAAA4BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:72:df:15:59:5c:56:1c:90:17:d9:d5:1d:c2:
                    b0:39:5e:b6:24:db:de:7d:5a:bc:38:4a:cb:f2:e7:
                    a7:1e:4a:18:07:0a:6c:0d:0e:16:1c:8d:b6:ae:65:
                    10:53:cc:b5:13:a3:fc:cd:06:20:5a:68:3a:47:34:
                    ae:76:94:0f:2b:f4:2f:c5:bc:e1:89:7f:0b:ef:1e:
                    ad:31:8d:fa:3e:66:73:f4:76:e2:66:67:87:ae:78:
                    af:a9:40:c7:dd:ac:01:82:69:47:66:23:aa:c6:30:
                    32:cb:85:74:89:ad:24:c2:32:25:89:d7:5a:82:90:
                    04:07:1f:eb:39:ec:ff:3a:68:ee:86:36:93:c2:cf:
                    93:e4:c0:04:01:e7:e1:43:4b:69:d6:40:45:fe:af:
                    9a:5b:ee:14:d8:81:cd:36:73:a2:74:16:58:56:c8:
                    b1:2b:c0:e5:97:19:58:f3:8f:0b:65:58:cb:4e:e5:
                    ee:24:d5:f4:a6:e5:f3:57:9e:29:21:60:3a:5b:be:
                    24:fe:da:20:81:10:2a:95:f4:25:db:04:cc:f5:8f:
                    ad:8b:47:56:05:7d:77:5b:2a:48:90:aa:89:99:ae:
                    7a:02:da:cc:0c:fe:70:6b:c2:6e:d4:fe:cc:f8:61:
                    8a:d0:fe:09:03:bc:7a:fb:37:5f:28:7f:bc:ea:40:
                    ec:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:76:9F:6D:0B:23:29:5F:3D:D5:1E:3A:59:B0:F1:C7:FA:AA:4B:FD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/06769F6D0B23295F3DD51E3A59B0F1C7FAAA4BFD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.64.0/20
                  201.33.160.0/20
                IPv6:
                  2804:113c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53181

    Signature Algorithm: sha256WithRSAEncryption
         4c:01:62:6c:76:02:a0:e0:83:0d:9b:f7:94:77:e3:c8:66:5b:
         cf:6c:14:2c:b7:bd:3a:f1:b5:49:df:74:bb:39:e5:74:47:cc:
         c2:e9:14:ba:7d:c7:ca:10:2e:79:a2:ee:26:fa:8f:b6:9c:1b:
         5d:a5:20:51:31:a8:71:23:7f:03:30:67:8b:1c:aa:a0:d1:1c:
         66:d6:52:e0:f0:8e:a9:fe:1a:51:bf:de:be:0b:ea:c4:9b:9c:
         03:9a:95:98:31:97:98:0c:91:f3:f2:19:89:14:4e:3d:4b:2f:
         55:a9:48:13:c0:94:85:53:b5:a0:0c:1d:0c:05:64:a4:13:da:
         b5:0f:c5:a3:cd:7a:e7:20:fb:a7:83:9e:ad:4f:2a:b9:1b:a2:
         94:1c:64:54:22:d7:ec:b2:0b:07:9f:7a:56:af:54:a4:b7:fd:
         47:f8:6e:cd:b6:38:5c:f4:ab:8a:58:97:b4:0b:d0:1c:06:1c:
         66:27:db:e1:ad:2f:df:76:ae:8d:08:d0:ea:57:0e:7b:0a:96:
         16:32:fb:0b:30:6d:8c:11:1d:75:ca:bb:2a:3a:65:07:4f:ca:
         a3:31:6b:d5:9e:09:4b:80:18:ac:da:61:d6:88:e4:cf:ce:c2:
         03:9c:67:8e:b5:f0:72:d9:9d:36:fb:ae:96:73:32:e4:f2:a3:
         1e:0b:76:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org