Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.cer
File:                     6A0F858E8F214AF5D4475E80E8A4E94F75A29444.cer (raw, json)
Hash identifier:          RLV2OYSa2IPHbSWKBTsIK9K/zHV5FcOordyCeej7+UI=
Subject key identifier:   6A:0F:85:8E:8F:21:4A:F5:D4:47:5E:80:E8:A4:E9:4F:75:A2:94:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       590AE875E2AC0E9D54AB651C163B873438C8CF45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Dec 2022 20:15:13 +0000
Certificate not after:    Wed 27 Dec 2023 20:20:13 +0000
Subordinate resources:    AS: 263554
                          IP: 138.36.172.0/22
                          IP: 186.250.188.0/22
                          IP: 2804:21f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0a:e8:75:e2:ac:0e:9d:54:ab:65:1c:16:3b:87:34:38:c8:cf:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 28 20:15:13 2022 GMT
            Not After : Dec 27 20:20:13 2023 GMT
        Subject: CN=6A0F858E8F214AF5D4475E80E8A4E94F75A29444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:fe:95:ca:0c:cd:8f:57:9d:7b:3f:1f:55:
                    d8:23:89:ec:91:da:c2:54:d5:42:a5:f3:5c:91:4d:
                    4d:99:c3:58:ba:4f:79:83:f1:10:60:62:93:dd:50:
                    67:ae:91:3b:76:15:38:47:2c:d8:b3:24:58:99:4b:
                    fc:24:4c:2b:ea:d7:1c:c6:e3:99:74:ff:8a:2d:d2:
                    00:c0:f0:d3:66:82:36:1b:97:a6:6f:5b:d6:64:1f:
                    29:a9:a7:67:95:85:29:8d:02:43:52:83:5b:ba:4f:
                    6e:76:9c:e0:9c:18:89:ec:b8:41:0f:e0:0b:bf:6f:
                    27:0e:31:b1:bc:ab:64:e1:94:28:f7:ea:2c:b4:8c:
                    e8:1c:6e:25:c9:38:6c:53:1f:3c:ef:c5:e2:20:46:
                    35:1b:e4:78:07:6d:90:4e:53:17:f8:c1:73:0e:05:
                    54:e5:e0:1f:44:ae:f4:23:95:8a:59:ee:55:da:b6:
                    30:e2:7c:f6:88:5e:6b:2a:52:6b:63:de:4e:e3:61:
                    90:f8:91:36:dd:87:ed:09:92:dc:52:80:e2:b1:22:
                    96:c3:ad:89:17:1d:19:8e:f3:53:2e:07:70:b5:0d:
                    05:a8:63:84:65:8a:83:13:40:6d:8e:96:45:7c:00:
                    7f:70:d0:30:f8:08:55:bd:2f:3b:2c:30:1e:f5:6a:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:0F:85:8E:8F:21:4A:F5:D4:47:5E:80:E8:A4:E9:4F:75:A2:94:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.172.0/22
                  186.250.188.0/22
                IPv6:
                  2804:21f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263554

    Signature Algorithm: sha256WithRSAEncryption
         ad:14:97:5c:e6:ea:e5:0f:cf:86:e2:10:3b:4b:1b:48:f6:ca:
         50:6b:f0:b0:73:0d:7f:2e:7b:1f:03:b3:ff:7e:c7:fa:53:f4:
         9c:ed:16:9f:c9:49:bc:ee:2d:49:40:52:d7:1c:a3:36:cc:9c:
         bb:94:89:e1:f7:fb:45:ab:dc:b0:6b:06:1b:e1:29:7b:04:ea:
         44:bf:c1:4f:3c:4a:88:2d:c5:8a:d3:3d:8b:50:a3:8a:64:37:
         d6:25:7e:c8:cf:f0:fc:80:ad:5b:4e:1b:8a:fe:e0:f3:68:70:
         c2:4b:c3:b5:9a:2a:fd:b8:c7:39:f7:69:e8:17:1b:27:7e:a4:
         7d:89:7b:85:1b:8d:e4:34:96:a2:20:9c:b7:ee:29:17:05:12:
         4c:54:d7:47:b9:3f:da:cf:5b:a5:d7:6e:80:1e:6d:2a:d5:01:
         4b:3f:5a:bb:94:8f:43:22:fc:bf:a7:6c:35:fa:c5:63:2b:12:
         6e:d9:14:99:a9:32:e9:13:1c:cf:41:8a:cf:b5:4a:f3:4e:3a:
         d4:bd:48:3f:b3:aa:ce:78:ca:1a:78:02:6c:e3:80:77:8a:d8:
         dc:40:a1:48:1c:06:cf:85:95:ce:ef:f5:7a:0d:d3:61:3f:e2:
         fb:52:43:d5:e8:e9:4f:e5:8a:2a:f7:c5:b6:61:86:50:be:97:
         8e:e3:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org