Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1A6E686960A7D47F1286E3D15A8DA89E120888BD.cer
File:                     1A6E686960A7D47F1286E3D15A8DA89E120888BD.cer (raw, json)
Hash identifier:          K/9c1J13xVPuKwTXcu+tPbCvkRl9go37UKax32izLYo=
Subject key identifier:   1A:6E:68:69:60:A7:D4:7F:12:86:E3:D1:5A:8D:A8:9E:12:08:88:BD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7CD19401A689DEDEA2AF7FAF10322A399490CF71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/1A6E686960A7D47F1286E3D15A8DA89E120888BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 02 Mar 2024 02:15:25 +0000
Certificate not after:    Sat 01 Mar 2025 02:20:25 +0000
Subordinate resources:    AS: 61616
                          IP: 2804:8ec8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d1:94:01:a6:89:de:de:a2:af:7f:af:10:32:2a:39:94:90:cf:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  2 02:15:25 2024 GMT
            Not After : Mar  1 02:20:25 2025 GMT
        Subject: CN=1A6E686960A7D47F1286E3D15A8DA89E120888BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:ec:d4:3d:f8:75:32:26:6f:14:f3:99:64:
                    55:a6:83:c1:b2:5f:55:63:d0:4b:1f:aa:98:c9:ed:
                    85:0a:49:0f:d0:1c:1e:27:7e:02:97:e4:de:20:cf:
                    e6:6e:8d:17:0f:37:d6:22:3e:d2:78:48:26:20:e1:
                    07:b2:ff:4f:1a:43:72:87:e4:71:6a:13:21:57:fa:
                    a2:b1:3c:6f:25:dc:56:6b:f0:d0:e5:2d:47:13:17:
                    5d:9d:45:ea:0a:1d:64:47:d6:e8:9f:15:01:52:84:
                    51:fd:82:cc:bd:e4:f6:3a:b7:5d:62:e1:00:08:20:
                    d8:e0:fc:dc:ef:da:9f:dd:9d:5e:f2:f1:80:ea:b2:
                    74:bd:13:20:1b:58:b9:ad:c0:de:c4:5f:ff:b0:d0:
                    56:c9:02:ec:a6:c0:0f:40:2b:05:cd:05:c9:41:37:
                    13:9f:ca:22:31:81:c8:58:3e:ea:11:a2:6d:b2:b6:
                    27:aa:4e:f6:43:24:33:16:08:ed:3e:7c:29:d4:17:
                    a8:67:39:44:d5:50:b7:ad:1e:fa:c5:00:ab:91:6e:
                    2d:24:89:70:88:77:ca:ff:cb:0c:cd:e5:1e:f0:d9:
                    de:ac:28:8b:e1:d5:4b:12:f1:61:3c:18:86:83:12:
                    75:8d:cd:fa:c5:2f:8b:67:a1:c5:82:0c:a8:1b:b9:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:6E:68:69:60:A7:D4:7F:12:86:E3:D1:5A:8D:A8:9E:12:08:88:BD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/1A6E686960A7D47F1286E3D15A8DA89E120888BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ec8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61616

    Signature Algorithm: sha256WithRSAEncryption
         30:08:1d:45:c0:74:5a:7b:45:e9:43:ff:92:2e:6d:bf:f4:a1:
         07:bd:a5:59:b4:9f:8e:56:1c:be:35:5e:22:fe:de:9a:0f:13:
         84:2f:eb:ec:73:b3:86:89:e8:a0:31:5e:68:b4:87:a2:b4:86:
         9a:6a:35:41:a6:0f:69:4f:7b:a0:97:93:83:98:1d:f2:31:4a:
         28:6d:df:f2:58:58:fe:dc:02:28:bb:64:ec:3e:a4:f4:1f:98:
         44:af:a5:7d:af:00:29:38:db:dc:6f:14:83:2c:4c:dd:a7:a1:
         e7:a3:6b:7b:1b:85:e2:9f:90:a7:fe:1b:01:ed:8a:ea:fd:91:
         62:28:40:b7:87:d7:65:45:7d:24:87:5a:47:24:f9:71:3b:a6:
         a9:8e:f4:dc:d1:37:c1:b8:b6:43:4b:ab:b8:20:66:38:82:7d:
         66:76:79:1c:d2:05:9f:13:e6:03:ee:55:77:a5:46:c5:98:15:
         56:e4:bc:6e:02:36:f7:5e:72:0a:3e:fc:08:64:b8:c1:fc:1d:
         5e:90:e3:74:55:ab:43:7f:c6:c2:39:0b:aa:2f:52:b6:b9:e8:
         0d:d7:10:6c:b3:e1:cb:7b:46:6d:db:cb:b7:ef:a6:28:9a:ad:
         cb:d9:70:30:39:1a:b6:f9:82:66:a4:88:75:33:a2:2c:ab:68:
         a8:2d:4d:54
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgIUfNGUAaaJ3t6ir3+vEDIqOZSQz3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDIwMjE1MjVaFw0yNTAzMDEwMjIwMjVaMDMxMTAvBgNV
BAMTKDFBNkU2ODY5NjBBN0Q0N0YxMjg2RTNEMTVBOERBODlFMTIwODg4QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vOzUPfh1MiZvFPOZZFWmg8Gy
X1Vj0EsfqpjJ7YUKSQ/QHB4nfgKX5N4gz+ZujRcPN9YiPtJ4SCYg4Qey/08aQ3KH
5HFqEyFX+qKxPG8l3FZr8NDlLUcTF12dReoKHWRH1uifFQFShFH9gsy95PY6t11i
4QAIINjg/Nzv2p/dnV7y8YDqsnS9EyAbWLmtwN7EX/+w0FbJAuymwA9AKwXNBclB
NxOfyiIxgchYPuoRom2ytieqTvZDJDMWCO0+fCnUF6hnOUTVULetHvrFAKuRbi0k
iXCId8r/ywzN5R7w2d6sKIvh1UsS8WE8GIaDEnWNzfrFL4tnocWCDKgbucrjAgMB
AAGjggMNMIIDCTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQabmhpYKfUfxKG
49FajaieEgiIvTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CQUJmZmJBUnVtalQxU0UzQzhza2pTSlJmSlBVd1F4QkFt
WXBSNEZkMU5QVy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJB
bVlwUjRGZDFOUFcvMC8xQTZFNjg2OTYwQTdENDdGMTI4NkUzRDE1QThEQTg5RTEy
MDg4OEJELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBI7IMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDwsDANBgkqhkiG9w0BAQsFAAOCAQEAMAgdRcB0WntF
6UP/ki5tv/ShB72lWbSfjlYcvjVeIv7emg8ThC/r7HOzhonooDFeaLSHorSGmmo1
QaYPaU97oJeTg5gd8jFKKG3f8lhY/twCKLtk7D6k9B+YRK+lfa8AKTjb3G8UgyxM
3aeh56NrexuF4p+Qp/4bAe2K6v2RYihAt4fXZUV9JIdaRyT5cTumqY703NE3wbi2
Q0uruCBmOIJ9ZnZ5HNIFnxPmA+5Vd6VGxZgVVuS8bgI2915yCj78CGS4wfwdXpDj
dFWrQ3/GwjkLqi9StrnoDdcQbLPhy3tGbdvLt++mKJqty9lwMDkatvmCZqSIdTOi
LKtoqC1NVA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org