Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE.cer
File:                     6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE.cer (raw, json)
Hash identifier:          Bs+BFypQk2qsibBhh+pqbaLRmo0Ph6B07QyLm60qG0Q=
Subject key identifier:   6A:0C:CC:41:E6:02:C8:6A:6E:BA:1E:A8:BD:08:E6:18:F2:2B:F5:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2481F9C2A27010687EAA9E07D8514D7C3E5F4705
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Jul 2023 00:23:31 +0000
Certificate not after:    Mon 15 Jul 2024 00:28:31 +0000
Subordinate resources:    AS: 267662
                          IP: 45.224.164.0/22
                          IP: 2804:44f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:81:f9:c2:a2:70:10:68:7e:aa:9e:07:d8:51:4d:7c:3e:5f:47:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 17 00:23:31 2023 GMT
            Not After : Jul 15 00:28:31 2024 GMT
        Subject: CN=6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:4a:88:62:f6:41:73:38:aa:42:0c:dd:ca:
                    1f:62:7e:82:58:0d:9a:43:f3:91:7d:c4:0e:25:21:
                    82:e1:5f:80:4b:93:8b:9f:7d:0d:a3:14:6f:4f:ed:
                    b6:1a:d4:93:1c:84:8f:aa:84:e1:3c:18:2b:e9:f5:
                    7a:d6:f7:67:e1:69:0b:9b:6c:bd:43:00:89:96:3d:
                    22:e2:00:f2:91:f5:06:0d:d9:ce:35:44:fb:99:d5:
                    af:a5:01:34:3c:db:3f:c2:97:bf:01:f9:a1:74:d0:
                    fb:de:3f:e2:44:c3:b2:06:19:0c:2a:dd:a0:cc:23:
                    fc:b4:5e:ef:91:57:74:3e:62:c3:ff:a2:bd:a9:42:
                    96:f3:51:99:84:2a:ad:48:f6:28:59:d6:90:4d:e2:
                    bc:2a:ef:57:b0:4a:af:8f:92:a1:d7:f6:b6:7e:4d:
                    3d:18:90:cf:e2:b9:72:b7:25:63:87:bb:06:60:83:
                    6c:85:21:18:b2:e0:3b:dd:e0:dd:5d:14:b2:63:e2:
                    83:99:cf:f5:07:48:1b:af:d9:3d:64:3a:ae:97:0c:
                    5f:e8:85:c0:df:d5:ce:e6:7c:7b:82:c0:21:da:65:
                    11:eb:71:2b:11:60:93:03:97:89:6f:93:c6:07:86:
                    6d:39:9e:0a:96:0a:ff:96:29:8e:6a:64:61:28:f6:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:0C:CC:41:E6:02:C8:6A:6E:BA:1E:A8:BD:08:E6:18:F2:2B:F5:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.164.0/22
                IPv6:
                  2804:44f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267662

    Signature Algorithm: sha256WithRSAEncryption
         8f:b1:71:89:30:c5:21:e4:25:1d:cb:17:c5:aa:07:19:dd:8f:
         8c:40:12:4b:68:90:df:72:07:3d:57:15:d0:12:4e:63:66:2b:
         0f:8c:1c:e9:a7:b5:ae:d5:13:17:49:5f:69:36:18:d2:9d:5e:
         87:22:28:c2:cc:69:2b:bd:a8:40:9e:ed:19:c8:3a:75:4c:f8:
         b0:9b:08:90:9a:32:0b:bb:fb:16:c3:0e:53:5e:ca:68:01:53:
         d2:72:4c:c4:3f:62:ab:c4:be:0a:d9:1a:a7:6d:e3:e9:ff:e1:
         7a:93:27:16:d4:15:86:a7:92:07:48:b8:bc:d2:c5:cf:59:9d:
         1b:03:0d:6d:c4:87:6d:19:b4:25:76:99:de:3f:5b:06:dc:b5:
         9f:a2:ab:cc:28:64:16:ea:ed:a4:30:cf:8d:b0:2a:8c:7f:be:
         de:97:17:37:74:f7:cc:31:0d:5b:dd:31:34:7e:93:8c:98:79:
         d8:77:2d:6a:17:7e:e4:29:f0:47:8a:79:ee:22:78:61:a6:d7:
         44:50:9e:73:aa:50:59:f1:c3:48:f3:04:31:c9:9b:a6:4b:a5:
         41:93:ab:c4:63:81:86:16:a6:3d:5a:a6:e8:f3:bb:6c:c8:8b:
         53:b9:33:87:79:28:ff:2e:61:c6:a8:16:a4:83:20:10:4c:1c:
         9a:0e:f0:c1
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUJIH5wqJwEGh+qp4H2FFNfD5fRwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTcwMDIzMzFaFw0yNDA3MTUwMDI4MzFaMDMxMTAvBgNV
BAMTKDZBMENDQzQxRTYwMkM4NkE2RUJBMUVBOEJEMDhFNjE4RjIyQkY1Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgkqIYvZBcziqQgzdyh9ifoJY
DZpD85F9xA4lIYLhX4BLk4uffQ2jFG9P7bYa1JMchI+qhOE8GCvp9XrW92fhaQub
bL1DAImWPSLiAPKR9QYN2c41RPuZ1a+lATQ82z/Cl78B+aF00PveP+JEw7IGGQwq
3aDMI/y0Xu+RV3Q+YsP/or2pQpbzUZmEKq1I9ihZ1pBN4rwq71ewSq+PkqHX9rZ+
TT0YkM/iuXK3JWOHuwZgg2yFIRiy4Dvd4N1dFLJj4oOZz/UHSBuv2T1kOq6XDF/o
hcDf1c7mfHuCwCHaZRHrcSsRYJMDl4lvk8YHhm05ngqWCv+WKY5qZGEo9pqDAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqDMxB5gLIam66
Hqi9COYY8iv1zjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81TVZnZUw5aGpqTU11YkJhMVdZVFRGWG9GNjNaeEJHSzQy
WVJTWGFuTFVvTS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNU1WZ2VMOWhqak1NdWJCYTFXWVRURlhvRjYzWnhCR0s0
MllSU1hhbkxVb00vMC82QTBDQ0M0MUU2MDJDODZBNkVCQTFFQThCRDA4RTYxOEYy
MkJGNUNFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt4KQwDQQCAAIwBwMF
ACgERPAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBWOMA0GCSqGSIb3DQEBCwUA
A4IBAQCPsXGJMMUh5CUdyxfFqgcZ3Y+MQBJLaJDfcgc9VxXQEk5jZisPjBzpp7Wu
1RMXSV9pNhjSnV6HIijCzGkrvahAnu0ZyDp1TPiwmwiQmjILu/sWww5TXspoAVPS
ckzEP2KrxL4K2RqnbePp/+F6kycW1BWGp5IHSLi80sXPWZ0bAw1txIdtGbQldpne
P1sG3LWfoqvMKGQW6u2kMM+NsCqMf77elxc3dPfMMQ1b3TE0fpOMmHnYdy1qF37k
KfBHinnuInhhptdEUJ5zqlBZ8cNI8wQxyZumS6VBk6vEY4GGFqY9Wqbo87tsyItT
uTOHeSj/LmHGqBakgyAQTByaDvDB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org