Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.cer
File:                     6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.cer (raw, json)
Hash identifier:          YTvG3rnT7lyT80+OJ5JbTm8Q/nvWMaIknZMYoEpE5FQ=
Subject key identifier:   6A:23:AA:2A:FC:E2:E3:27:B2:ED:F3:EF:40:EB:D1:22:CC:BA:88:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F583A894420D80DF15C83EA4BCCD0EB8BBF6963
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 15:05:10 +0000
Certificate not after:    Thu 11 Jul 2024 15:10:10 +0000
Subordinate resources:    AS: 264201
                          IP: 138.97.208.0/22
                          IP: 2804:2418::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:58:3a:89:44:20:d8:0d:f1:5c:83:ea:4b:cc:d0:eb:8b:bf:69:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 15:05:10 2023 GMT
            Not After : Jul 11 15:10:10 2024 GMT
        Subject: CN=6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:e4:92:c3:16:57:0a:33:d5:2f:92:dd:76:
                    c4:34:42:31:9e:cd:2b:c2:a4:24:78:63:eb:98:65:
                    c4:5d:37:45:d9:7c:43:b2:d2:ee:48:35:b8:3e:eb:
                    2b:97:f9:80:57:2f:5c:f0:c8:41:b7:3f:34:4e:83:
                    17:18:41:33:09:05:6d:5a:cb:33:3f:a7:88:54:93:
                    97:ee:b7:26:d4:46:9e:d5:c2:03:63:49:02:25:03:
                    13:51:03:63:1e:95:aa:9b:13:4e:7f:8f:69:40:08:
                    ad:05:9b:37:f5:a9:66:7b:6a:88:b3:ca:ab:42:1b:
                    b7:85:28:2d:99:e8:4c:66:75:8d:4c:c8:8c:94:1c:
                    09:af:fc:65:b0:cc:bd:88:c2:e7:4f:b1:4c:86:23:
                    c7:d5:f5:54:a1:6d:e0:4c:4f:76:13:7e:23:b0:b2:
                    00:da:c0:df:0b:15:66:58:78:84:4c:a9:68:5c:58:
                    3e:5c:51:81:2a:49:db:fa:19:97:ad:ad:b7:bb:7a:
                    fa:1c:bd:5d:76:32:83:79:44:a3:05:55:82:24:30:
                    da:e6:f3:b2:a0:08:94:00:43:32:f1:d6:dc:a5:4c:
                    ef:5b:94:11:12:9d:7f:05:cd:bf:f3:9a:1b:fb:b6:
                    51:8d:f7:f3:a9:ba:4d:40:ae:c0:b7:1c:33:ae:ab:
                    0a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:23:AA:2A:FC:E2:E3:27:B2:ED:F3:EF:40:EB:D1:22:CC:BA:88:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.208.0/22
                IPv6:
                  2804:2418::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264201

    Signature Algorithm: sha256WithRSAEncryption
         26:23:28:98:01:ba:9e:f9:06:f9:52:61:86:06:49:bd:21:b5:
         30:05:93:24:21:be:34:e3:79:28:07:1e:41:1a:9a:30:f3:8d:
         c0:15:e4:a8:79:71:ab:2f:b7:58:78:36:10:8b:53:02:c5:31:
         a8:09:3f:fd:2d:82:3c:b2:5c:69:ac:18:bd:8e:31:4d:b9:2b:
         ce:35:c5:78:f2:5f:6f:92:e1:55:4d:3c:97:1f:79:16:00:73:
         d2:b2:a9:31:b9:d3:f5:91:2c:6c:c0:9b:b6:80:e4:19:9c:79:
         11:41:2e:ba:e2:48:94:f5:50:d4:f9:42:bd:51:3b:c5:67:97:
         b2:62:3d:4f:38:83:b7:1f:18:11:ec:8f:dc:e7:15:00:2e:d8:
         dd:31:cf:60:d3:50:32:4d:4e:a6:6b:46:92:a9:b0:c8:83:7b:
         b3:03:e5:8d:64:26:12:5b:18:ec:65:ff:86:4d:6a:d3:3b:06:
         bf:56:5e:82:e8:d8:3b:ac:01:17:95:3f:50:cf:cc:2f:b4:15:
         32:ed:83:03:2e:df:b1:7c:39:4b:ae:bc:46:47:fa:82:f5:91:
         27:d2:5d:57:e0:81:73:fb:e7:4e:3a:fe:3c:df:85:06:2b:50:
         8f:55:5d:f7:0e:11:8e:2b:f7:2b:bd:50:23:4c:eb:bb:84:d9:
         d2:74:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org