Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/06A34D263017DF21326D15EAE8F1A9D84084E4EE.cer
File:                     06A34D263017DF21326D15EAE8F1A9D84084E4EE.cer (raw, json)
Hash identifier:          bWHlarTU1HbLoVqewHMs8f5CpmEbkq0gN4vBhc8dwWs=
Subject key identifier:   06:A3:4D:26:30:17:DF:21:32:6D:15:EA:E8:F1:A9:D8:40:84:E4:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E369713EB83CAF489633DD0C5C78F23946F4AD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/06A34D263017DF21326D15EAE8F1A9D84084E4EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Jan 2023 16:25:23 +0000
Certificate not after:    Fri 12 Jan 2024 16:30:23 +0000
Subordinate resources:    AS: 265263
                          IP: 168.90.32.0/22
                          IP: 2804:2d20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:36:97:13:eb:83:ca:f4:89:63:3d:d0:c5:c7:8f:23:94:6f:4a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 13 16:25:23 2023 GMT
            Not After : Jan 12 16:30:23 2024 GMT
        Subject: CN=06A34D263017DF21326D15EAE8F1A9D84084E4EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9a:4e:6d:a8:67:f4:db:31:46:4e:eb:26:85:
                    98:24:8f:5a:3c:12:bf:b1:f0:7e:7a:8e:51:a6:6b:
                    86:47:31:b0:7e:8f:41:df:49:04:f3:23:53:10:49:
                    4f:d2:f8:ef:f3:81:f6:40:5a:22:ff:6f:8f:0c:7c:
                    24:e5:df:9d:37:3e:af:67:3b:e4:e4:f1:e3:32:1c:
                    72:06:b3:f6:8a:60:68:ba:04:f7:b5:b0:9e:8d:2d:
                    d7:7e:ba:6f:e2:47:d5:0f:a8:ae:d6:c1:5d:76:92:
                    53:32:58:9f:4a:8e:49:06:04:06:ce:68:a3:9e:1a:
                    ea:dd:ba:11:52:6e:c5:48:f8:cc:4c:32:38:37:b4:
                    d2:27:df:4d:0b:62:17:24:0f:0d:67:bd:4e:95:0a:
                    73:81:87:a6:c5:b4:9f:dd:4f:7a:83:06:08:0d:c2:
                    67:bc:4b:a5:73:4f:7a:90:be:67:21:7e:31:45:d4:
                    02:de:b7:78:fe:77:63:37:03:5f:a9:ec:4e:b1:ff:
                    e9:af:9c:36:8e:7d:b0:b8:9a:08:51:44:66:13:8c:
                    d9:2c:84:2d:72:1e:74:ee:a9:98:76:62:f1:9f:2c:
                    f0:38:6b:0f:20:02:a0:82:da:b8:19:46:36:aa:be:
                    ca:1a:5a:95:c5:f1:cd:01:aa:81:93:eb:f1:e4:8d:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:A3:4D:26:30:17:DF:21:32:6D:15:EA:E8:F1:A9:D8:40:84:E4:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/06A34D263017DF21326D15EAE8F1A9D84084E4EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.32.0/22
                IPv6:
                  2804:2d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265263

    Signature Algorithm: sha256WithRSAEncryption
         7b:6e:e3:48:ba:b7:a8:69:08:1c:23:d1:cb:ef:15:67:e8:27:
         d2:49:42:f3:e7:1d:de:21:1a:50:6b:3c:46:e6:be:e9:19:f5:
         f7:96:78:93:74:55:82:79:c3:1c:6f:f3:46:d0:8f:a4:7f:d0:
         78:99:08:a8:a1:64:09:04:c3:e1:94:2a:55:76:75:40:d9:26:
         e7:28:ef:8a:44:05:92:89:2f:0c:f4:2d:d3:44:9d:32:86:93:
         66:64:fa:82:fe:87:51:79:ee:ce:95:91:8f:f9:52:9e:14:13:
         7a:14:f5:3b:14:9f:78:5f:d5:2d:0c:56:2b:28:4c:36:a6:93:
         90:24:ff:54:35:f5:9f:54:a8:64:ab:61:e0:e9:67:05:2b:50:
         bc:ae:73:db:57:a1:65:5c:ed:b5:28:6d:39:6e:b5:17:25:de:
         5e:81:e8:99:f6:2d:fa:31:7c:f4:f9:54:85:f6:18:27:70:cf:
         2d:23:3b:06:83:85:80:a6:d1:15:89:08:91:b4:72:d0:10:ed:
         9b:ed:0d:80:70:32:87:78:a2:b5:89:99:7c:f7:af:95:8c:e2:
         53:34:63:07:85:93:12:dd:57:90:58:23:3f:4e:94:53:4e:e3:
         9f:fc:2e:dd:71:44:88:be:26:ac:c8:d0:6b:83:1a:0a:f9:fb:
         18:70:dd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org