Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
File:                     6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer (raw, json)
Hash identifier:          /0xsEDxox9rHh8sDJttYzZr5hEb1E7F8jfgUtsOBCX4=
Subject key identifier:   6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       106D29CCE989B03BB86F65A7BFF46A603AC7E657
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 20:04:59 +0000
Certificate not after:    Mon 07 Apr 2025 20:09:59 +0000
Subordinate resources:    AS: 262493
                          IP: 138.255.216.0/22
                          IP: 168.121.148.0/22
                          IP: 170.82.132.0/22
                          IP: 177.8.48.0/21
                          IP: 177.55.48.0/20
                          IP: 2804:fec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6d:29:cc:e9:89:b0:3b:b8:6f:65:a7:bf:f4:6a:60:3a:c7:e6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  8 20:04:59 2024 GMT
            Not After : Apr  7 20:09:59 2025 GMT
        Subject: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:b7:86:2d:7c:a7:03:77:6c:3e:58:67:4c:
                    df:ce:ac:46:d0:62:e3:7b:11:10:84:b7:63:3c:7e:
                    34:02:97:ea:32:c2:42:1e:70:6c:bc:a2:d6:09:8a:
                    7a:ec:6e:9c:f7:5e:25:24:a5:46:34:66:d9:22:3b:
                    33:e4:9c:d9:b5:92:be:0a:00:1b:6d:8b:13:af:a7:
                    fc:4c:dc:af:c2:ac:23:14:44:6d:4d:cd:d4:31:ba:
                    6f:f1:fb:90:aa:a1:63:eb:76:57:61:c9:77:01:94:
                    18:9e:fa:18:75:8e:48:fb:be:b9:bb:5c:49:2c:26:
                    ca:69:b3:d6:94:f4:df:bb:01:4c:4a:0f:f7:44:3d:
                    19:37:b9:29:35:9b:dc:d5:fd:bf:69:7b:10:5b:54:
                    40:74:ed:87:e4:6c:f4:92:b1:11:41:5d:3d:89:dc:
                    0e:0b:e7:d4:e9:ea:07:f3:a7:5e:97:f8:94:04:f7:
                    08:3b:65:4f:95:e0:d3:79:e8:cc:83:5c:fb:2c:52:
                    7b:eb:98:fd:4f:00:4f:de:54:00:97:18:0c:77:bc:
                    fc:b7:24:ff:4e:a6:d1:a7:13:91:be:c7:f5:1f:4b:
                    3e:66:fe:f6:10:2b:e9:b6:e3:24:7e:72:a2:e1:4c:
                    50:24:f7:33:0a:7b:46:44:d5:7d:0d:f8:35:1d:4e:
                    a1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22
                  168.121.148.0/22
                  170.82.132.0/22
                  177.8.48.0/21
                  177.55.48.0/20
                IPv6:
                  2804:fec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262493

    Signature Algorithm: sha256WithRSAEncryption
         02:7d:3e:ef:7d:70:0a:cd:79:e9:c8:40:5a:4c:31:7c:fa:6a:
         9a:0a:15:28:da:44:55:f1:f9:e6:02:e5:8f:32:05:63:fb:8f:
         15:61:e6:ee:c6:c9:ce:ff:47:b9:67:e8:a4:a6:60:1a:91:a3:
         24:0c:e6:92:3d:78:25:90:d1:1a:fc:03:3b:e9:81:f1:23:fc:
         2f:5a:cf:c7:ce:e5:85:65:7a:35:c2:40:b5:d9:76:87:cf:85:
         2e:39:f8:04:2f:a2:91:4e:17:80:ef:01:8b:93:6b:55:61:24:
         79:5d:1b:fb:29:3d:d7:fc:e3:61:2d:9b:7b:96:a8:c8:fb:71:
         4e:7a:5e:a4:55:56:b5:53:d5:4a:26:e7:72:f6:8b:c8:69:cf:
         20:dd:40:3a:a1:ec:4d:69:80:10:0b:a8:88:58:5c:89:32:04:
         9a:4b:5e:6a:72:82:23:09:ac:64:76:d4:da:09:4d:9a:fd:44:
         ee:05:d1:6c:f9:4e:0e:ad:02:69:de:9a:8d:f0:f3:7c:bb:56:
         2b:80:05:45:55:54:b1:4f:e6:21:bf:28:ea:55:b5:91:0b:61:
         7b:5d:6f:93:ee:1e:af:51:16:00:48:13:10:9b:3d:1c:25:88:
         d3:72:28:77:28:ab:8e:14:f4:b4:04:e4:53:29:5d:d2:8f:72:
         3b:60:f7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org