Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.cer
File:                     2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.cer (raw, json)
Hash identifier:          45ZgMXyLxTD09cfr59nIOoedoMyYTdhXXJ0/21xXHI4=
Subject key identifier:   2F:6D:77:8F:72:DC:BD:C0:ED:0D:A7:C5:F0:5C:14:34:8F:34:A1:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       74893A6D082E9DAE9B84DC5AA0D5A209D77846F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 12:04:55 +0000
Certificate not after:    Fri 26 Jul 2024 12:09:55 +0000
Subordinate resources:    AS: 61615
                          IP: 2804:8c64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:89:3a:6d:08:2e:9d:ae:9b:84:dc:5a:a0:d5:a2:09:d7:78:46:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 28 12:04:55 2023 GMT
            Not After : Jul 26 12:09:55 2024 GMT
        Subject: CN=2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b1:06:cc:10:66:90:4a:01:f2:e8:08:16:90:
                    50:e7:02:55:68:a5:88:f0:88:3b:d1:84:d6:1f:05:
                    b8:bd:f8:b4:ec:60:99:86:3b:86:4b:0f:d3:1c:80:
                    02:15:f0:6b:68:4c:1b:24:c5:dd:2d:d8:2c:60:cc:
                    14:0a:23:89:d6:04:c6:75:e5:bb:30:da:d2:0b:0f:
                    4d:e3:f1:44:43:ce:68:2c:d7:b8:ba:a6:1e:9c:57:
                    26:5d:03:a6:69:52:c1:e1:ad:01:9d:d7:03:03:32:
                    3d:0e:5e:a3:5d:84:61:e8:00:00:cd:3c:84:72:a2:
                    91:f2:8e:0c:77:c3:f7:7b:d8:4c:c2:82:6b:19:01:
                    03:db:6a:5f:0f:19:71:0f:d6:9a:7a:94:4b:10:20:
                    af:df:fe:db:61:e9:df:53:23:41:2e:49:22:e9:e9:
                    a0:86:0f:dd:71:23:f5:19:33:fd:b5:b4:cd:04:0f:
                    d0:c9:42:74:35:e6:a2:82:98:0b:98:dc:64:0d:17:
                    24:50:a9:13:0f:93:df:0b:2e:b8:ec:e1:9a:01:10:
                    70:66:50:af:fc:dd:a0:dc:5d:d2:a4:86:d0:c2:6f:
                    97:bc:40:18:24:d9:06:5e:1a:1b:6b:b6:bb:7d:c5:
                    69:2a:41:e9:b0:5a:22:6e:93:88:f8:bc:84:1c:3e:
                    da:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:6D:77:8F:72:DC:BD:C0:ED:0D:A7:C5:F0:5C:14:34:8F:34:A1:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61615

    Signature Algorithm: sha256WithRSAEncryption
         b0:e3:e4:74:7c:59:89:2a:36:2a:09:59:f3:fe:45:76:89:19:
         80:6d:0f:c7:58:4c:de:63:5b:23:83:2f:35:dd:41:cf:ee:3b:
         57:f1:20:13:94:09:75:4d:11:41:4c:f1:9e:53:23:f3:78:32:
         d4:4d:b9:48:b6:78:a4:51:8e:08:ba:ff:15:fa:70:df:be:3a:
         0b:7b:61:ce:3b:45:41:2d:14:9a:55:55:ea:f9:fd:87:b8:bc:
         17:01:d8:62:38:d6:b2:ae:bc:33:1b:a2:c4:26:4d:4d:76:9c:
         6a:25:02:c1:be:d3:ed:ad:2c:13:b8:c4:16:d5:e8:4a:fc:3a:
         93:e8:5a:33:7b:f2:07:44:48:50:6b:03:d6:73:90:91:87:bc:
         12:41:84:06:80:53:2a:2d:2b:d1:fa:6a:e1:d7:df:4d:cb:3d:
         c8:07:84:1a:1c:39:a6:a4:2f:c0:ff:d8:9c:f9:f7:b4:f5:bb:
         ef:66:f9:2c:95:1f:61:60:23:12:e7:e2:21:c4:52:15:6b:5c:
         5d:44:25:dc:52:33:eb:d4:9e:92:72:3b:50:92:09:fd:cc:76:
         00:05:bf:01:cb:80:12:aa:3a:64:7e:0c:67:a6:03:b4:de:68:
         4c:d4:59:ad:f3:f9:5e:c1:b6:3a:71:50:3a:f1:79:94:8a:fa:
         41:7d:85:91
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIUdIk6bQguna6bhNxaoNWiCdd4RvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjgxMjA0NTVaFw0yNDA3MjYxMjA5NTVaMDMxMTAvBgNV
BAMTKDJGNkQ3NzhGNzJEQ0JEQzBFRDBEQTdDNUYwNUMxNDM0OEYzNEExNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsQbMEGaQSgHy6AgWkFDnAlVo
pYjwiDvRhNYfBbi9+LTsYJmGO4ZLD9McgAIV8GtoTBskxd0t2CxgzBQKI4nWBMZ1
5bsw2tILD03j8URDzmgs17i6ph6cVyZdA6ZpUsHhrQGd1wMDMj0OXqNdhGHoAADN
PIRyopHyjgx3w/d72EzCgmsZAQPbal8PGXEP1pp6lEsQIK/f/tth6d9TI0EuSSLp
6aCGD91xI/UZM/21tM0ED9DJQnQ15qKCmAuY3GQNFyRQqRMPk98LLrjs4ZoBEHBm
UK/83aDcXdKkhtDCb5e8QBgk2QZeGhtrtrt9xWkqQemwWiJuk4j4vIQcPtoDAgMB
AAGjggMMMIIDCDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvbXePcty9wO0N
p8XwXBQ0jzShSTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84dllNRmVRNkp1QURZRzFFbjM5TmdZbUFQeWtSMlI1eldK
REdjTkpjSEpuRC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84dllNRmVRNkp1QURZRzFFbjM5TmdZbUFQeWtSMlI1eldK
REdjTkpjSEpuRC8wLzJGNkQ3NzhGNzJEQ0JEQzBFRDBEQTdDNUYwNUMxNDM0OEYz
NEExNDkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEjGQwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAPCvMA0GCSqGSIb3DQEBCwUAA4IBAQCw4+R0fFmJKjYq
CVnz/kV2iRmAbQ/HWEzeY1sjgy813UHP7jtX8SATlAl1TRFBTPGeUyPzeDLUTblI
tnikUY4Iuv8V+nDfvjoLe2HOO0VBLRSaVVXq+f2HuLwXAdhiONayrrwzG6LEJk1N
dpxqJQLBvtPtrSwTuMQW1ehK/DqT6Foze/IHREhQawPWc5CRh7wSQYQGgFMqLSvR
+mrh199Nyz3IB4QaHDmmpC/A/9ic+fe09bvvZvkslR9hYCMS5+IhxFIVa1xdRCXc
UjPr1J6ScjtQkgn9zHYABb8By4ASqjpkfgxnpgO03mhM1Fmt8/lewbY6cVA68XmU
ivpBfYWR
-----END CERTIFICATE-----