Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6953DAF36134A9A694E5D5563C16D6E5A74EE9D1.cer
File:                     6953DAF36134A9A694E5D5563C16D6E5A74EE9D1.cer (raw, json)
Hash identifier:          3Z6GuKWYARC7MYWTSKBQ4BSZr55UOUCpFTdK7zg+Ek8=
Subject key identifier:   69:53:DA:F3:61:34:A9:A6:94:E5:D5:56:3C:16:D6:E5:A7:4E:E9:D1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F6B673846B7DFD470D4AEB1389BD2864311AC6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/6953DAF36134A9A694E5D5563C16D6E5A74EE9D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Jan 2023 17:31:00 +0000
Certificate not after:    Wed 10 Jan 2024 17:36:00 +0000
Subordinate resources:    AS: 267440
                          IP: 192.141.0.0/22
                          IP: 2804:418c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6b:67:38:46:b7:df:d4:70:d4:ae:b1:38:9b:d2:86:43:11:ac:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 11 17:31:00 2023 GMT
            Not After : Jan 10 17:36:00 2024 GMT
        Subject: CN=6953DAF36134A9A694E5D5563C16D6E5A74EE9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:3e:98:55:a3:97:87:49:ff:c3:4a:95:77:
                    a4:aa:4b:99:ad:cb:ed:36:3d:c6:7b:1d:83:72:f8:
                    ae:70:32:cc:ac:36:78:6c:47:8a:85:d4:48:3b:69:
                    63:11:13:3a:1c:4e:ad:ff:82:aa:f6:84:81:64:ed:
                    8c:b1:e2:c4:16:34:89:2a:16:c7:57:1e:70:88:9e:
                    35:b3:55:e5:e4:44:a7:01:45:d1:f8:bc:f5:32:79:
                    83:ba:78:62:01:04:3f:36:30:29:8c:5c:fe:82:18:
                    c5:97:24:2f:8b:c3:55:cd:9d:20:c7:69:d2:e8:27:
                    c9:de:1b:cd:c5:11:e4:06:fc:36:6f:34:e4:c7:ba:
                    ba:f9:34:1f:7b:db:d4:b6:61:1a:77:79:0b:a5:5b:
                    c0:37:c3:6f:03:34:92:b3:93:1a:e3:c2:22:31:39:
                    44:92:8f:1c:b5:ed:65:83:39:e2:2f:be:72:89:d1:
                    35:cd:c6:05:f9:51:27:17:ad:48:71:01:17:c9:8e:
                    20:02:5e:8f:bd:a2:15:3f:dd:fb:21:5b:4d:2d:28:
                    03:6c:d7:29:a9:7d:95:67:d8:5e:1e:6e:85:a6:95:
                    2b:9c:25:7e:83:4c:d5:c9:2b:e7:33:e4:50:d2:92:
                    08:30:3c:f2:ef:f4:86:a5:ac:c7:2d:30:b2:1c:da:
                    c6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:53:DA:F3:61:34:A9:A6:94:E5:D5:56:3C:16:D6:E5:A7:4E:E9:D1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/6953DAF36134A9A694E5D5563C16D6E5A74EE9D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.0.0/22
                IPv6:
                  2804:418c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267440

    Signature Algorithm: sha256WithRSAEncryption
         b0:e5:c7:68:00:37:c1:27:e4:e2:e4:77:93:ba:45:7a:86:cf:
         7c:28:7c:4d:95:c1:5e:f6:b6:f0:7d:15:e4:ac:44:aa:ab:a5:
         70:20:a0:c4:67:b7:c9:dd:32:e2:0c:62:85:f4:49:64:df:9f:
         48:21:a1:06:56:f1:a4:37:08:fb:06:e4:53:df:a6:da:c4:cc:
         7b:48:7b:49:c1:9b:c8:53:32:7e:17:a8:03:06:6c:b9:27:f1:
         f3:27:a0:f6:79:ed:9e:b0:ea:bd:67:a5:f7:d4:db:45:c3:cf:
         c1:2e:b1:66:21:09:57:5d:ad:66:c7:c2:df:01:76:05:d1:58:
         80:ff:7b:0d:16:cd:29:d8:99:43:b4:a9:40:0d:10:df:d2:67:
         5c:c4:9b:fa:b8:e1:8b:82:8d:79:95:d5:55:85:0b:7d:58:31:
         29:a2:9f:41:60:ca:29:c7:67:25:d1:bc:38:8b:3f:a5:29:cf:
         34:17:02:e2:3e:0e:d7:43:2e:c5:9f:fd:8b:32:1c:30:12:f0:
         80:4a:6d:51:ad:a0:00:39:0c:49:6b:2d:df:dc:ec:83:7d:db:
         c9:e3:93:7f:e2:09:a0:67:24:1d:ad:7d:dc:3c:be:c4:68:87:
         6d:14:7b:cd:a9:23:aa:9a:ac:78:92:3c:c3:0f:38:5f:14:1b:
         01:ad:c8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org