Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/06881049B94787E5C7A09A8083CA7953DD26CC5E.cer
File:                     06881049B94787E5C7A09A8083CA7953DD26CC5E.cer (raw, json)
Hash identifier:          cpHYCwubHU5yZPmV2iW5b9t80OHp9yDuF7N6zTfQ4eo=
Subject key identifier:   06:88:10:49:B9:47:87:E5:C7:A0:9A:80:83:CA:79:53:DD:26:CC:5E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       231E2039C1DBA1EE20051B58E033D61B2137B377
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/06881049B94787E5C7A09A8083CA7953DD26CC5E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 16:06:35 +0000
Certificate not after:    Thu 20 Feb 2025 16:11:35 +0000
Subordinate resources:    AS: 262901
                          IP: 177.22.192.0/20
                          IP: 191.240.176.0/20
                          IP: 2804:1110::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1e:20:39:c1:db:a1:ee:20:05:1b:58:e0:33:d6:1b:21:37:b3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 16:06:35 2024 GMT
            Not After : Feb 20 16:11:35 2025 GMT
        Subject: CN=06881049B94787E5C7A09A8083CA7953DD26CC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:25:31:2a:76:6f:73:67:83:30:6f:f6:ac:8c:
                    45:b6:7a:21:18:18:10:84:ea:43:95:7e:52:bc:27:
                    58:14:86:80:96:4b:20:7e:b2:95:24:55:fd:15:13:
                    4d:9f:49:4f:04:0b:ec:86:a1:a6:e6:cf:db:5c:7c:
                    10:2c:72:eb:99:44:df:53:9c:a3:45:ec:41:84:55:
                    0a:1b:ef:b0:70:d1:48:08:be:d5:ed:2e:c7:bb:16:
                    35:e5:44:07:d1:17:0f:10:6b:9b:73:f2:c3:b9:cb:
                    4b:41:71:ac:17:a2:8b:b7:21:bd:49:ef:bd:0a:ea:
                    b8:ed:b7:17:84:44:b8:33:6d:4b:5c:99:41:71:9c:
                    f1:50:e1:73:e6:f3:a0:ff:f4:dd:8d:f0:93:59:72:
                    30:84:85:28:a2:a7:af:93:dd:cd:72:97:46:a9:6d:
                    14:de:b0:cc:ef:3a:f5:4c:20:05:88:29:5d:5e:77:
                    a1:44:73:7e:ac:07:49:d7:65:fe:ff:f9:e2:c7:ca:
                    71:0e:35:12:bd:1f:4c:bf:e5:84:53:a6:ec:24:75:
                    fc:3f:c3:3b:29:06:f5:7a:c7:60:5e:48:ba:f1:bf:
                    1b:81:2a:f2:b6:43:b3:52:e9:b9:df:1c:6f:99:e0:
                    24:09:3b:8e:a9:94:57:2a:de:e3:52:a5:59:8e:e7:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:88:10:49:B9:47:87:E5:C7:A0:9A:80:83:CA:79:53:DD:26:CC:5E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/06881049B94787E5C7A09A8083CA7953DD26CC5E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.192.0/20
                  191.240.176.0/20
                IPv6:
                  2804:1110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262901

    Signature Algorithm: sha256WithRSAEncryption
         5e:f4:da:ed:36:00:81:66:8b:ab:fb:68:b3:aa:0b:bd:98:ad:
         ab:44:0b:44:f3:e4:c9:6e:86:78:94:5b:25:ec:c4:bf:f6:9b:
         f6:a7:9d:67:c3:49:4a:51:85:e0:4f:73:65:2a:ad:47:41:2d:
         a0:d4:5a:8b:20:4d:b2:83:aa:fe:c0:76:05:61:df:a0:5e:85:
         fd:a7:77:b1:84:fc:1d:e1:c0:94:dc:b1:f5:98:06:b3:12:35:
         ed:91:64:40:6d:1e:8b:ce:12:5b:1d:86:21:42:e1:b0:36:fe:
         e4:e7:4d:37:e7:54:c4:eb:f9:e6:39:dc:99:c0:66:f1:5f:5e:
         21:b5:bd:bf:7b:9d:f2:cf:68:3e:3b:be:d5:2b:e1:47:7c:9b:
         18:67:20:41:39:a3:9f:bc:be:56:c1:c8:0c:0f:3c:7a:0b:9a:
         76:69:1a:b2:e6:83:21:78:18:ea:0e:c0:8b:c4:c5:3a:4b:63:
         99:23:2f:f1:5f:c6:7d:ca:39:cd:ee:e7:99:03:e4:b6:d1:d9:
         34:37:92:71:41:66:21:4f:0c:ef:3f:0d:b6:c2:a6:7b:90:fe:
         33:4c:c5:70:9f:a2:d9:74:e6:88:44:08:2e:21:e4:ca:24:a2:
         57:1b:af:e4:60:cd:4a:99:67:79:49:ac:c8:34:73:2a:00:d8:
         7f:24:46:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org