Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/06C8C441DDB121E8A6F43500C58D474F8861F147.cer
File:                     06C8C441DDB121E8A6F43500C58D474F8861F147.cer (raw, json)
Hash identifier:          flUbJlxzLob/BWuarBML8alFL21A1QGnT4NaHefs6VI=
Subject key identifier:   06:C8:C4:41:DD:B1:21:E8:A6:F4:35:00:C5:8D:47:4F:88:61:F1:47
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E2572059B950D121BE984BF450CDE38C53F0EAD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/06C8C441DDB121E8A6F43500C58D474F8861F147.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Dec 2023 20:47:28 +0000
Certificate not after:    Fri 13 Dec 2024 20:52:28 +0000
Subordinate resources:    AS: 269092
                          IP: 45.179.168.0/22
                          IP: 2804:5f54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:25:72:05:9b:95:0d:12:1b:e9:84:bf:45:0c:de:38:c5:3f:0e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 20:47:28 2023 GMT
            Not After : Dec 13 20:52:28 2024 GMT
        Subject: CN=06C8C441DDB121E8A6F43500C58D474F8861F147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:72:43:6f:7b:23:03:ea:33:2c:cf:ca:4c:
                    f3:3f:39:68:ae:a1:cc:c1:9d:72:bb:85:f5:41:25:
                    41:c2:e3:37:62:2b:88:fe:62:84:36:20:3e:34:6b:
                    77:19:bd:7e:e3:46:2e:c1:c1:5a:e8:31:a4:4a:f5:
                    95:3b:9e:e3:bf:d1:92:50:d8:ae:77:67:d3:2e:97:
                    16:af:17:36:f7:1b:0a:3f:67:6c:fa:13:4e:ab:64:
                    1d:9b:92:48:63:fe:ac:bd:4d:c4:ab:b3:34:d7:4e:
                    69:68:bf:e5:16:e1:01:a2:80:6a:b3:20:d7:a9:e2:
                    f3:11:13:ad:e8:0a:6e:91:7f:20:78:f4:c1:0b:3d:
                    29:df:c8:ee:6f:6c:dd:2b:6e:73:b1:94:c3:2e:2e:
                    8d:91:32:9a:ae:2f:66:6b:1f:88:3b:f6:96:4b:72:
                    9f:ee:31:c3:4a:63:ff:9c:19:f6:fa:8d:62:32:c9:
                    70:f8:51:0b:62:d7:19:ad:3f:da:e3:64:9f:fc:7d:
                    54:6d:97:cb:5a:cf:6e:04:14:d9:2e:a4:55:82:88:
                    11:11:52:3a:fa:b7:5b:6c:fa:89:6c:a6:a5:ee:a0:
                    dd:b0:d3:0d:e7:09:f8:67:5c:f4:c6:7e:58:92:e8:
                    73:92:fc:65:1a:3e:d2:9c:2c:41:fa:6f:1c:79:2a:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:C8:C4:41:DD:B1:21:E8:A6:F4:35:00:C5:8D:47:4F:88:61:F1:47
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/06C8C441DDB121E8A6F43500C58D474F8861F147.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.168.0/22
                IPv6:
                  2804:5f54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269092

    Signature Algorithm: sha256WithRSAEncryption
         a6:54:95:00:65:1a:fc:3c:07:d7:b9:58:fc:9b:9b:49:94:6f:
         b1:fe:8a:a9:05:91:0b:14:44:32:4e:54:07:eb:32:37:66:e0:
         22:00:18:68:9a:2f:63:9c:ae:5c:02:0c:00:0d:5a:71:ee:0c:
         c7:5d:21:2f:42:36:b1:9e:79:1f:a6:b0:5d:32:d3:db:16:94:
         6a:19:9b:3d:f8:a7:24:30:ea:90:6a:a6:71:11:96:e1:77:ed:
         1b:a1:be:91:31:ba:7f:3f:a9:ed:76:72:c9:76:66:e4:00:f7:
         ab:7c:e3:fc:b8:64:2c:be:eb:11:39:c5:cd:89:f1:e3:e0:dd:
         11:16:0d:9b:ed:f4:97:d6:64:20:a6:9e:a8:69:c3:f3:c1:81:
         2c:7b:14:1e:c4:2c:db:6c:2f:aa:cc:b4:5f:8c:0c:3c:6c:a0:
         3e:e6:81:70:6b:8a:51:21:f5:7a:16:30:ec:18:6c:c7:df:19:
         15:4f:6c:1e:d1:6b:70:61:b1:f1:d5:28:27:f3:35:d8:d3:65:
         ae:60:11:cd:0f:70:3b:7a:14:24:62:e2:46:7e:ff:b4:48:19:
         53:15:41:32:ea:f9:09:bc:84:07:4f:4e:ed:f8:84:7d:a0:44:
         b6:b5:f5:07:b8:b1:69:c1:ca:81:d5:a4:2a:16:af:02:7e:1f:
         f7:b7:6a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org