Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/606BD5D9908F2CE5467F35CEF08F1E79CC627693.cer
File:                     606BD5D9908F2CE5467F35CEF08F1E79CC627693.cer (raw, json)
Hash identifier:          PcQE8bZjsEt22pvoI2zm9qjScTb3KTqKbRhE5Bu/91Q=
Subject key identifier:   60:6B:D5:D9:90:8F:2C:E5:46:7F:35:CE:F0:8F:1E:79:CC:62:76:93
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1191DC263F69DA65DAB6A7C05E49D4115AD454F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/606BD5D9908F2CE5467F35CEF08F1E79CC627693.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 15:24:52 +0000
Certificate not after:    Tue 16 Apr 2024 15:29:52 +0000
Subordinate resources:    AS: 270722
                          IP: 187.102.248.0/22
                          IP: 2804:705c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:91:dc:26:3f:69:da:65:da:b6:a7:c0:5e:49:d4:11:5a:d4:54:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 18 15:24:52 2023 GMT
            Not After : Apr 16 15:29:52 2024 GMT
        Subject: CN=606BD5D9908F2CE5467F35CEF08F1E79CC627693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:af:75:b7:75:5a:a3:b6:28:10:b8:5a:ff:
                    17:bd:c2:98:5f:4d:8f:c8:d9:fc:c2:c4:84:18:74:
                    6d:e3:7d:73:51:d8:45:99:1a:54:91:ba:be:f2:67:
                    67:ca:64:05:0f:48:a0:14:1d:db:a0:58:49:bd:1d:
                    50:45:de:4c:18:15:c3:dd:55:44:4d:e1:c4:e6:c8:
                    20:d4:e2:a7:af:54:72:06:38:aa:aa:5a:2a:f7:51:
                    78:b3:b4:58:74:9a:74:2e:3d:21:b3:13:90:0a:89:
                    5d:de:ab:fc:76:2f:32:b7:74:71:42:83:a6:4a:0c:
                    9f:44:b0:11:66:7b:58:d6:87:f3:7b:70:13:f8:7a:
                    fe:cd:b9:81:0b:bd:a1:e1:5c:94:69:42:d9:2b:29:
                    7a:fd:dc:52:fa:24:99:80:7e:42:67:b6:b0:9c:c9:
                    58:c2:2d:a7:79:4f:e2:94:c1:24:07:da:9a:c8:34:
                    3a:5b:97:a1:eb:6f:55:6f:40:e6:ca:b3:0e:c2:be:
                    18:14:5e:ed:4c:84:ab:63:f6:5b:e9:50:5e:05:89:
                    a4:e3:b8:31:12:67:b8:22:82:b5:16:6f:79:49:c2:
                    43:6d:97:cb:d1:09:82:45:e6:03:13:ad:64:c4:47:
                    a8:1e:df:ac:3b:7d:64:e7:65:d1:cc:db:aa:86:25:
                    9e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:6B:D5:D9:90:8F:2C:E5:46:7F:35:CE:F0:8F:1E:79:CC:62:76:93
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/606BD5D9908F2CE5467F35CEF08F1E79CC627693.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.248.0/22
                IPv6:
                  2804:705c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270722

    Signature Algorithm: sha256WithRSAEncryption
         47:5d:c2:7f:a1:7f:bc:a2:11:c4:cc:47:57:2d:53:4c:0a:45:
         3e:b0:38:64:8a:eb:90:31:c1:c6:2f:e9:09:79:e9:ef:94:4f:
         7d:d4:15:c4:b7:15:1a:c4:c6:28:4c:64:f5:77:63:95:16:26:
         69:d5:c2:05:31:c5:4d:65:87:86:d2:45:4a:ca:3f:c1:2b:91:
         0e:70:6f:e0:a9:d0:cb:9e:a2:4c:7a:72:e0:74:c7:99:d4:ea:
         ab:34:65:b8:9a:ed:a1:16:e5:0d:32:c5:fc:05:1a:ea:d9:e5:
         24:d0:50:67:66:97:a4:27:a3:03:16:f3:c7:b6:0a:67:66:0c:
         71:ea:7e:31:97:8b:5b:e7:7f:36:d8:cc:bf:ec:94:4f:a9:71:
         e8:12:38:9c:2a:c0:f0:c4:e8:08:5a:d8:01:43:ac:72:09:46:
         9d:d8:0a:d5:f2:5b:47:30:5d:fe:26:ca:d7:a0:3b:b4:02:64:
         66:83:78:85:46:67:2d:04:52:3f:f5:09:2d:f5:e9:f3:d7:c6:
         62:3b:79:73:6f:51:72:8c:24:9b:c0:e0:4b:0d:e8:14:cb:37:
         22:99:fb:60:f8:f5:87:89:da:be:f2:d4:5d:5b:c9:ff:29:99:
         de:75:65:ad:7b:f7:6e:d0:00:19:49:84:2f:56:9a:cf:d2:a0:
         11:04:88:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:59:14 2025 by rpki-client