Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E.cer
File:                     6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E.cer (raw, json)
Hash identifier:          NnmVOrvGhZD0Otm1HoePU25tAZj4l0MYNZG2NUETqGs=
Subject key identifier:   69:44:C5:5B:F9:B2:E6:46:89:5F:4A:0B:34:0F:DB:CB:1A:D4:B6:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4369F40533E7A2F535B56F3AC0E642B8A1ABE766
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Nov 2023 17:25:08 +0000
Certificate not after:    Fri 22 Nov 2024 17:30:08 +0000
Subordinate resources:    AS: 268852
                          IP: 45.174.132.0/22
                          IP: 2804:5b84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:69:f4:05:33:e7:a2:f5:35:b5:6f:3a:c0:e6:42:b8:a1:ab:e7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 17:25:08 2023 GMT
            Not After : Nov 22 17:30:08 2024 GMT
        Subject: CN=6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:0d:69:cc:30:ef:84:6d:89:b7:65:56:5d:
                    db:aa:9d:08:90:66:89:d0:e8:c0:5c:96:e7:bf:ff:
                    f5:a7:38:76:6f:cb:a6:e8:c1:03:35:db:bb:53:00:
                    4d:49:c1:6c:04:f5:06:55:78:85:65:bc:95:1d:d2:
                    27:ef:d0:37:ce:83:a5:47:b1:4a:a6:29:1e:ce:b1:
                    17:82:1e:51:6e:ea:ec:a6:cf:df:fc:81:5a:e1:d9:
                    ff:45:21:52:33:11:71:9c:00:64:3c:f9:d4:b2:13:
                    c1:31:88:f0:b0:d7:fc:5f:29:5d:10:5c:6a:db:55:
                    f5:4c:a8:aa:6e:ff:d2:2e:30:50:f1:6f:76:74:a8:
                    05:23:88:e3:3c:e9:88:3a:43:11:54:56:1b:af:ea:
                    20:b0:c4:fa:ea:a4:be:fa:6e:b0:62:07:48:82:90:
                    eb:ad:40:08:04:60:6b:49:77:14:06:43:cb:08:d8:
                    d4:8d:67:e1:0f:1e:d0:2c:89:1a:6c:4a:e7:97:13:
                    64:f6:07:e2:90:6b:fc:3b:a1:6e:28:1f:b9:d8:9b:
                    93:52:5d:26:ec:b6:50:d7:86:31:a9:56:d0:36:20:
                    e0:de:b2:b0:7e:6e:a4:a7:64:95:49:28:68:5d:b9:
                    5d:70:dc:35:36:08:a6:10:4b:fe:db:51:a8:e4:36:
                    e4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:44:C5:5B:F9:B2:E6:46:89:5F:4A:0B:34:0F:DB:CB:1A:D4:B6:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.132.0/22
                IPv6:
                  2804:5b84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268852

    Signature Algorithm: sha256WithRSAEncryption
         88:bf:71:9a:44:da:b3:0b:93:72:10:b7:d4:3f:00:77:57:01:
         87:00:3e:7e:19:28:59:c0:4b:e5:78:d3:ce:2d:7b:a4:3d:d4:
         27:87:ea:c9:3b:8a:ca:b1:fb:c4:15:80:69:1c:1c:a6:b5:5e:
         9e:6f:db:fa:1e:9d:97:e8:2d:cf:57:31:96:1b:10:c0:17:4c:
         fe:30:5a:3e:0c:51:9f:70:92:9a:f7:ed:4c:95:e3:b3:98:1f:
         33:b2:94:7b:0f:e5:9b:64:18:ef:f6:d7:3e:b9:bf:94:65:8b:
         1f:ae:be:43:3b:6c:af:ed:56:bc:2d:c2:9c:79:4b:21:12:38:
         48:9a:72:31:fa:3a:30:67:a9:6e:1f:b3:7a:65:b1:d3:d8:ef:
         df:c1:be:e8:e6:4d:e1:f1:45:21:8b:0b:7e:50:e5:ae:62:68:
         0f:41:24:e8:50:b2:84:70:ca:7c:ab:b0:df:2f:68:bb:8f:f2:
         b2:69:9b:6f:8c:02:1b:12:87:fd:86:53:ed:18:3d:46:2c:d2:
         37:ba:05:c6:1e:dd:ae:b9:cf:42:cd:42:89:07:38:c6:d4:f6:
         99:7e:fd:17:e3:be:67:72:a6:9d:79:a0:a7:14:08:2c:98:bd:
         ec:f4:c6:ec:20:6e:7d:d8:e9:05:90:67:0d:58:c4:e2:40:05:
         26:33:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org