Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6A489D98A99498E1688CB01EE6ADE968F2FC841D.cer
File:                     6A489D98A99498E1688CB01EE6ADE968F2FC841D.cer (raw, json)
Hash identifier:          KuDb+lpQc00UgHws8wO+ALIONxF0Z9rowfbk+270q6U=
Subject key identifier:   6A:48:9D:98:A9:94:98:E1:68:8C:B0:1E:E6:AD:E9:68:F2:FC:84:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1233DA0CC59D4808671A62F4ED78EB1241B5DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/6A489D98A99498E1688CB01EE6ADE968F2FC841D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 12:39:50 +0000
Certificate not after:    Tue 11 Feb 2025 12:44:50 +0000
Subordinate resources:    AS: 267271
                          IP: 45.232.184.0/22
                          IP: 2804:4ae8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:33:da:0c:c5:9d:48:08:67:1a:62:f4:ed:78:eb:12:41:b5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 12:39:50 2024 GMT
            Not After : Feb 11 12:44:50 2025 GMT
        Subject: CN=6A489D98A99498E1688CB01EE6ADE968F2FC841D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:36:c4:08:6e:ea:3a:70:d5:97:86:ab:e4:01:
                    d9:f0:64:6c:dc:a3:6c:8d:69:56:64:a1:50:53:87:
                    db:9c:06:43:f4:73:51:db:6f:13:e0:2c:58:cf:da:
                    01:60:83:37:a3:b7:60:08:9c:04:c4:13:b0:79:f4:
                    d4:58:11:1d:f5:0e:29:d2:9b:7e:70:06:d2:a2:93:
                    bb:f7:e3:ca:4a:0f:d7:50:ef:06:1c:4b:ae:1a:77:
                    6d:a3:d2:75:ab:f9:59:fa:d4:57:73:2e:d9:16:1b:
                    57:db:08:a9:53:f1:42:04:b0:4b:65:7b:9a:14:43:
                    36:6e:0d:35:1d:52:cc:5d:cd:15:c1:ab:42:71:ae:
                    5f:27:cc:a1:1f:80:08:46:88:b7:e0:4d:5f:84:56:
                    b4:42:92:62:08:5c:20:4e:07:69:d3:46:b7:94:99:
                    ea:5d:34:15:9d:b4:c1:68:0b:e2:01:ae:e1:ae:fc:
                    fa:52:16:94:87:c8:e2:61:51:fe:6d:30:c1:89:c3:
                    b0:1d:46:05:b7:58:6a:02:4f:de:72:d1:b4:ae:17:
                    69:bb:1a:ae:3c:23:e4:c6:8c:a1:e1:fc:54:69:97:
                    a9:56:44:a1:7b:31:53:70:2e:e5:f6:7d:f7:e2:3a:
                    b9:9d:3b:26:43:6b:45:6b:50:c1:05:a1:50:65:b7:
                    ab:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:48:9D:98:A9:94:98:E1:68:8C:B0:1E:E6:AD:E9:68:F2:FC:84:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/6A489D98A99498E1688CB01EE6ADE968F2FC841D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.184.0/22
                IPv6:
                  2804:4ae8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267271

    Signature Algorithm: sha256WithRSAEncryption
         60:5b:44:ea:21:16:83:fd:19:d1:30:f3:24:0e:54:a3:60:02:
         80:3a:e0:b7:43:ff:fe:bd:21:d7:b1:24:99:d5:31:95:6c:8c:
         c8:ac:ed:38:44:7a:da:b6:22:5f:b9:bf:ad:83:20:75:47:41:
         f9:c9:35:ff:32:55:75:70:c0:d3:c8:52:d6:2c:c4:30:af:e0:
         79:3b:0f:67:59:aa:26:d4:b1:cb:97:70:c8:65:58:f4:4b:ce:
         8f:c8:de:0c:1e:a7:68:3a:6b:64:3c:13:0c:76:d3:d1:5e:92:
         a4:24:26:4f:88:df:02:22:1f:f7:68:71:be:4f:07:3b:68:da:
         5b:76:8a:d9:4e:d8:c0:70:e1:b2:5a:25:80:52:32:39:64:a2:
         97:7c:84:ea:21:f1:f5:15:04:0c:df:5f:33:c4:ce:d2:7b:46:
         90:23:71:60:33:ba:3b:cb:84:1d:ec:b3:3e:e2:75:b7:f9:c7:
         ae:4d:7a:ce:6f:56:31:43:2d:a9:91:f1:d1:0a:d1:ef:0a:06:
         fa:ec:02:ef:f8:85:8c:64:ae:26:b1:37:42:77:ab:4f:b7:5d:
         58:75:9e:22:6a:2e:2c:03:d9:1e:cc:6c:f6:a3:f5:90:da:6b:
         9b:58:4a:2d:df:87:86:a0:e1:37:86:63:66:e0:41:58:5c:ec:
         bf:52:d7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org