Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6169655FCC21E18D6D1A60EEB20D16A8262DA561.cer
File:                     6169655FCC21E18D6D1A60EEB20D16A8262DA561.cer (raw, json)
Hash identifier:          rNBfznhBrRYW7mke2+3lqTdoTA8linvt4suEPADzvZ8=
Subject key identifier:   61:69:65:5F:CC:21:E1:8D:6D:1A:60:EE:B2:0D:16:A8:26:2D:A5:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68A7356763B8B1E8825749B4B9E2CF13B1A69FD0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/6169655FCC21E18D6D1A60EEB20D16A8262DA561.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 18 Aug 2023 01:12:26 +0000
Certificate not after:    Fri 16 Aug 2024 01:17:26 +0000
Subordinate resources:    AS: 267336
                          IP: 45.234.16.0/22
                          IP: 2804:4be8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a7:35:67:63:b8:b1:e8:82:57:49:b4:b9:e2:cf:13:b1:a6:9f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 18 01:12:26 2023 GMT
            Not After : Aug 16 01:17:26 2024 GMT
        Subject: CN=6169655FCC21E18D6D1A60EEB20D16A8262DA561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:df:32:f0:8b:a4:4d:b9:7a:22:6a:cb:a1:
                    ef:5b:df:32:3c:6f:60:07:4a:bd:be:7e:5c:af:5b:
                    a0:e8:e9:6e:c8:32:14:66:ad:8e:2b:d0:11:1c:7c:
                    35:ad:c8:70:27:36:d5:0c:dc:cc:dc:f4:53:04:af:
                    e6:92:2d:ce:ab:09:fc:d8:4e:cd:95:8a:c2:8a:24:
                    a1:c6:c3:f2:f9:78:f4:5b:01:74:03:f9:e7:9b:89:
                    b4:5c:2d:82:6a:3e:96:6a:51:b2:7e:ca:aa:f0:37:
                    dd:6b:1d:87:49:ba:eb:81:44:3f:4a:0b:ee:5e:49:
                    41:db:48:ee:61:be:02:24:57:67:d3:a7:75:4a:bf:
                    87:c0:4f:f9:a2:92:7d:c6:74:b6:20:5f:a1:eb:33:
                    5b:7e:b5:18:2d:27:de:70:7a:64:f5:46:58:a0:9a:
                    b8:7d:a8:b4:10:ee:1f:d3:42:ec:70:bb:a1:ce:77:
                    16:15:14:69:33:00:94:ae:92:b7:1f:7d:68:13:46:
                    14:a6:06:cc:91:51:b8:79:6b:f4:b5:48:5b:59:37:
                    a5:00:2f:26:d0:22:8e:e8:50:cc:eb:b8:9c:3c:8f:
                    75:5c:03:fb:4a:b6:0d:a8:a4:ec:46:10:5a:b6:60:
                    f1:d8:00:0c:d6:57:a5:b4:d0:e4:ca:58:97:47:0b:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:69:65:5F:CC:21:E1:8D:6D:1A:60:EE:B2:0D:16:A8:26:2D:A5:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/6169655FCC21E18D6D1A60EEB20D16A8262DA561.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.16.0/22
                IPv6:
                  2804:4be8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267336

    Signature Algorithm: sha256WithRSAEncryption
         29:69:ff:ad:5f:3e:ef:06:e3:89:40:e0:55:6e:c6:61:d0:4e:
         60:60:c3:19:6a:33:6c:d2:a5:2c:1b:2c:aa:5e:e6:7b:a3:e4:
         26:25:c4:f5:67:31:69:dc:98:9b:c5:a5:f8:04:45:76:8e:17:
         47:dd:f9:ad:1b:6a:37:ea:17:1b:cb:ad:18:84:2f:1a:48:f9:
         57:46:ee:76:b0:71:3e:2c:7e:47:fd:20:73:28:00:07:97:0f:
         f1:02:24:49:7a:b2:35:65:e7:9b:20:6a:79:64:f2:be:be:a8:
         79:5b:57:9d:cd:76:6a:af:ee:8b:84:53:32:57:9a:22:62:8b:
         ab:c2:7b:90:a9:ed:fc:de:92:25:05:b3:0a:93:b9:bf:0c:c1:
         6b:68:84:99:53:08:e9:8d:d0:97:58:d8:f6:03:2e:4c:7e:36:
         1e:e4:7e:ff:98:9d:54:4a:91:f4:eb:be:7b:1d:a8:f9:c1:17:
         02:71:a3:52:b1:3d:a8:66:f8:90:4d:98:a0:b8:6c:a6:75:7f:
         ab:42:f7:01:dc:25:3b:f0:7f:48:9d:7b:ab:98:d0:b7:a7:3e:
         fc:7b:50:f9:51:08:ef:19:79:b5:87:42:12:07:2c:af:52:dd:
         87:ea:94:06:43:fb:db:95:e0:da:f3:cf:73:ca:b1:87:9a:ec:
         b7:32:fb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org