Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6414A22202CC9C361CCD163D34053C6A06E0EB55.cer
File:                     6414A22202CC9C361CCD163D34053C6A06E0EB55.cer (raw, json)
Hash identifier:          AuCEPxS+wcND3gmi1F7Oi8EKKdaojJJvDdrTLpbhXas=
Subject key identifier:   64:14:A2:22:02:CC:9C:36:1C:CD:16:3D:34:05:3C:6A:06:E0:EB:55
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       105D2428E061607D6BB08E6BCAA9848088FE5B05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/0/6414A22202CC9C361CCD163D34053C6A06E0EB55.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 10:36:11 +0000
Certificate not after:    Wed 05 Feb 2025 10:41:11 +0000
Subordinate resources:    AS: 263155
                          IP: 45.162.16.0/22
                          IP: 45.238.32.0/22
                          IP: 191.242.244.0/22
                          IP: 2804:17c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5d:24:28:e0:61:60:7d:6b:b0:8e:6b:ca:a9:84:80:88:fe:5b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 10:36:11 2024 GMT
            Not After : Feb  5 10:41:11 2025 GMT
        Subject: CN=6414A22202CC9C361CCD163D34053C6A06E0EB55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:28:f6:06:0c:f5:1e:5e:42:a2:61:ae:87:
                    44:1b:f3:65:0a:a1:86:a2:41:1b:73:2f:ad:8f:fa:
                    3b:19:e9:49:1b:be:59:ec:46:72:d6:3c:a4:a3:46:
                    f3:5e:d6:94:eb:0b:0f:f6:8b:6b:77:32:7b:9b:a1:
                    ba:c3:3d:cb:ec:9a:c1:24:68:76:5d:6c:95:43:45:
                    af:fc:11:7e:d5:4c:6f:f7:a0:49:6a:b0:b2:f5:bb:
                    d8:9b:8a:37:79:aa:50:3e:4f:56:f4:ef:7a:e3:2f:
                    a1:a9:09:5a:d1:50:bb:f7:a1:44:27:79:60:ef:0d:
                    84:8f:c5:b3:7c:02:41:83:06:43:9a:c4:6c:b9:d7:
                    3b:04:da:82:4b:49:85:14:b7:c2:71:d4:ed:64:84:
                    82:86:e7:ec:18:4a:41:31:cb:fc:bb:6e:c3:03:8b:
                    9c:e1:68:42:c0:8b:d8:31:dd:60:f5:75:01:e0:5b:
                    e1:f5:d1:9c:cb:3f:08:dc:27:b5:ec:8d:fa:d6:a7:
                    57:78:fd:d8:9a:b8:b2:d1:dc:5a:4f:1b:55:aa:23:
                    27:f3:20:77:63:f7:96:2c:9c:da:2c:d5:ad:e6:c8:
                    5b:7e:d9:02:36:91:90:ad:4f:37:68:fa:06:87:d9:
                    7a:9c:6f:56:18:21:a5:28:9f:7a:4d:46:f5:d3:cd:
                    66:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:14:A2:22:02:CC:9C:36:1C:CD:16:3D:34:05:3C:6A:06:E0:EB:55
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/0/6414A22202CC9C361CCD163D34053C6A06E0EB55.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.16.0/22
                  45.238.32.0/22
                  191.242.244.0/22
                IPv6:
                  2804:17c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263155

    Signature Algorithm: sha256WithRSAEncryption
         4c:db:57:60:57:32:0e:cc:45:5d:be:a5:9b:b1:59:71:c2:81:
         cf:86:7f:dd:ce:8b:3f:a6:1e:59:56:4f:8b:94:3f:92:5f:3c:
         45:d4:10:78:93:43:90:a6:1e:0b:f9:50:72:31:8a:61:f4:96:
         56:48:54:f6:69:f1:e0:20:7d:59:dd:47:53:c0:5b:bb:64:e0:
         2b:ea:c5:48:72:99:97:56:71:4f:e7:c2:b1:e5:2f:2e:92:e2:
         71:25:f5:c9:b8:7d:45:c7:de:fb:19:04:05:bf:bb:9e:ad:a3:
         d7:11:55:f2:0d:f3:f2:9d:6f:4a:75:b8:0a:6f:45:03:00:c8:
         27:b2:02:a0:ac:d4:0d:3e:dc:1a:cf:de:72:36:ec:a5:57:02:
         5b:d2:ed:08:66:dd:6b:f7:24:18:42:00:93:67:3e:3c:d1:c9:
         45:fc:71:8e:f8:f5:d0:96:0a:68:01:69:b3:37:b6:9f:46:78:
         55:65:5c:7f:77:7b:52:5c:8a:5b:fb:ca:b4:21:5e:43:6d:cd:
         7a:32:00:8c:a9:7c:02:1b:fb:24:50:28:6c:45:22:5a:e3:a8:
         bc:85:71:39:c6:97:e4:6b:85:6c:86:18:d1:ae:0b:bd:f7:aa:
         ca:ec:d2:f3:32:6e:89:f3:92:ab:3e:be:97:5d:ef:fa:6c:ed:
         b4:bb:b7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org