Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/60B391E3F854EEC1E1FBE5C002CFE33FE3DA64D2.cer
File:                     60B391E3F854EEC1E1FBE5C002CFE33FE3DA64D2.cer (raw, json)
Hash identifier:          rrBPyhG+3/8KT0Q75XkuPIBsAIDgaML2HvhwB2lIVDo=
Subject key identifier:   60:B3:91:E3:F8:54:EE:C1:E1:FB:E5:C0:02:CF:E3:3F:E3:DA:64:D2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       261073E473527CF5070CAAAFB7620EEB98D4CA9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/60B391E3F854EEC1E1FBE5C002CFE33FE3DA64D2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 20:40:59 +0000
Certificate not after:    Mon 17 Mar 2025 20:45:59 +0000
Subordinate resources:    AS: 270760
                          IP: 179.109.116.0/22
                          IP: 2804:70fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:10:73:e4:73:52:7c:f5:07:0c:aa:af:b7:62:0e:eb:98:d4:ca:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 20:40:59 2024 GMT
            Not After : Mar 17 20:45:59 2025 GMT
        Subject: CN=60B391E3F854EEC1E1FBE5C002CFE33FE3DA64D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:48:af:d2:37:a6:56:6d:dc:19:38:39:34:
                    dd:4d:3c:00:d2:64:d3:6c:f2:aa:34:d8:a7:10:28:
                    72:e7:72:e2:50:f8:ef:11:88:9a:99:1c:c8:c2:10:
                    79:58:07:c0:3a:92:c2:7b:f9:ad:ea:a3:40:07:15:
                    b7:e6:1e:8a:b2:d2:b8:01:cd:9c:32:cc:48:c3:ea:
                    ba:bd:dc:88:e7:84:12:2b:cc:2e:97:77:c6:bb:d6:
                    8a:6e:26:58:e9:71:83:da:b3:55:b2:28:71:9c:ce:
                    0a:3b:97:10:fd:fa:ec:21:8f:ae:01:22:d6:ed:81:
                    c6:ad:ec:68:5d:07:fe:0f:c8:a7:ef:60:48:d4:92:
                    21:94:03:c6:c4:cf:1b:d6:d1:fd:3d:55:f9:8a:b0:
                    6d:23:11:83:82:81:e6:aa:6b:55:f0:a0:39:23:12:
                    2b:9c:46:75:6e:26:b6:1e:5f:2e:fe:62:ae:3d:ec:
                    9a:b7:2e:f9:ec:5b:0a:60:10:b2:37:71:d7:f0:e4:
                    90:3a:ad:54:ad:22:cf:4c:16:af:fa:4e:98:a4:d5:
                    87:1b:5e:75:08:c8:89:95:ed:08:96:31:91:12:c0:
                    a2:96:ca:88:61:a4:ff:ee:dc:f2:53:41:08:4a:42:
                    5f:32:01:72:53:84:08:bc:3e:0c:84:96:ea:1e:96:
                    46:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:B3:91:E3:F8:54:EE:C1:E1:FB:E5:C0:02:CF:E3:3F:E3:DA:64:D2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/60B391E3F854EEC1E1FBE5C002CFE33FE3DA64D2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.116.0/22
                IPv6:
                  2804:70fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270760

    Signature Algorithm: sha256WithRSAEncryption
         12:0e:89:17:07:d6:31:78:c5:05:70:7a:5a:0a:58:11:aa:82:
         95:c0:3d:07:e8:59:0e:22:ff:ce:9c:6f:f9:9f:dd:2a:3c:34:
         44:fd:81:97:6b:45:7d:ee:df:1c:eb:a4:58:97:ef:ea:3d:ab:
         75:6d:d0:5c:2a:0d:7e:be:39:4c:0c:cf:d5:81:ce:60:6d:c4:
         4f:f6:49:01:26:1d:9b:c7:a1:f1:e0:4d:a8:32:ea:b5:5e:35:
         6d:15:70:5a:3c:bb:96:57:3f:5e:7b:76:fe:18:de:cb:2e:30:
         8a:b0:4d:fe:d3:65:5c:95:f3:2a:fc:44:30:37:35:1f:f3:be:
         84:f5:ae:8e:45:3e:29:63:05:0a:b7:0b:a6:5c:68:59:ee:37:
         9f:97:f2:18:e6:f4:13:14:b6:76:48:7c:8a:f6:f6:44:dd:4d:
         26:7a:82:71:de:7c:d5:56:66:2a:a5:ef:31:32:e5:f2:1f:ad:
         4d:63:76:5f:a7:08:bb:27:91:c9:41:30:8c:c8:92:95:e5:86:
         11:ef:ee:0b:05:19:8b:88:31:c5:69:ee:6d:ab:9e:fc:43:fa:
         3e:85:ea:03:32:e6:fd:69:17:76:98:22:b6:fb:46:73:ad:f1:
         e6:73:bc:51:86:ad:0d:43:fa:04:18:ff:86:d3:33:90:4c:30:
         02:66:c8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org