Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer
File:                     696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer (raw, json)
Hash identifier:          ee9cXmFZa/S7LpD2kpY9vJ47cH+EGAt1pECpnM7drF0=
Subject key identifier:   69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B511A7691EBB0E077A906E9B75B306B48188900
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 14:55:21 +0000
Certificate not after:    Thu 27 Jun 2024 15:00:21 +0000
Subordinate resources:    AS: 265022
                          IP: 170.84.48.0/22
                          IP: 2804:3188::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:51:1a:76:91:eb:b0:e0:77:a9:06:e9:b7:5b:30:6b:48:18:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 14:55:21 2023 GMT
            Not After : Jun 27 15:00:21 2024 GMT
        Subject: CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:6f:b2:e9:01:71:6f:87:af:bb:e1:ba:a6:
                    4f:30:69:48:d5:61:18:d7:d0:85:33:df:96:72:26:
                    69:18:8b:7a:5c:25:59:8c:5e:c4:1b:54:41:9b:d0:
                    48:de:05:10:5d:f8:7a:96:e6:0b:c4:e4:89:c5:43:
                    34:c6:f5:33:78:2e:0f:83:90:35:79:d1:08:c0:3f:
                    d8:8d:fe:04:ea:54:12:41:9e:06:7a:8a:67:9f:85:
                    48:68:32:48:50:e7:0b:58:a0:2e:59:35:b4:dd:05:
                    20:95:fb:df:23:cb:b8:d6:a2:41:c9:0f:c3:be:bb:
                    d9:af:fa:1e:34:83:61:27:94:1d:58:09:13:70:cd:
                    f8:75:81:86:6a:ed:c4:29:f5:be:2d:6a:df:bf:93:
                    14:5e:fa:dc:44:bf:0d:b4:f6:1d:86:79:03:92:7c:
                    3a:23:38:75:79:3b:bd:b3:01:56:22:8a:bd:22:86:
                    f5:3b:b8:63:99:8b:91:09:f9:4c:b0:15:a1:ef:9a:
                    21:38:a8:57:71:ce:13:6b:97:3a:f9:8b:a5:49:d3:
                    8d:8e:13:41:fa:ac:38:e4:65:98:ad:53:67:09:3e:
                    12:9e:c4:13:7d:83:89:53:6e:20:5a:74:3d:e3:84:
                    ed:bf:05:27:e0:58:4e:23:88:ad:a5:a4:c2:90:9b:
                    9d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.48.0/22
                IPv6:
                  2804:3188::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265022

    Signature Algorithm: sha256WithRSAEncryption
         99:6a:f3:2f:80:1e:86:ef:e6:24:f8:e7:70:15:34:44:de:5d:
         44:d0:0d:94:4a:7d:9a:6d:2f:06:e7:d7:6d:96:f4:ca:04:12:
         70:bd:b5:c7:e4:a0:82:15:75:98:d2:79:ec:a0:45:e9:75:85:
         10:88:b2:8a:d0:d1:ea:64:c9:33:be:9c:29:04:b6:39:a8:10:
         f9:a3:76:1c:de:f1:b1:3e:64:75:48:e1:a9:6d:28:c4:49:99:
         e5:fd:23:90:b3:a3:f5:2b:56:eb:00:fe:8e:5b:a8:ec:d7:99:
         dd:67:17:aa:87:a2:8a:95:7b:e5:34:4f:5b:2e:f8:f0:7c:5b:
         97:c7:00:9d:72:53:38:b1:98:75:4c:68:ac:6f:26:bc:d3:e9:
         a0:d3:a3:9c:e2:d3:60:11:8a:f2:c2:b3:f5:83:4a:b5:ad:58:
         55:d5:93:71:10:2d:12:a0:b9:3f:f8:53:9f:17:90:9d:48:34:
         23:a7:4f:f8:3b:62:a6:0c:8b:02:69:7e:7a:e6:1a:15:89:a5:
         52:0d:b7:b9:d8:ca:3b:a3:ec:03:6f:ee:85:1a:01:aa:4e:ec:
         c7:a8:a1:aa:a5:c4:27:f7:a9:2a:11:1d:39:d5:ff:96:6b:20:
         a0:f2:8e:04:85:89:4e:1d:98:86:f4:a2:43:02:4f:55:bf:17:
         45:74:0d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org