Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6A954DCA8F132488386154F00954CB12AE07DEF6.cer
File:                     6A954DCA8F132488386154F00954CB12AE07DEF6.cer (raw, json)
Hash identifier:          u5wR/LsanIO2p6hx58wvQ1luyRxHr4Dt08YIiaI9FF8=
Subject key identifier:   6A:95:4D:CA:8F:13:24:88:38:61:54:F0:09:54:CB:12:AE:07:DE:F6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C0699C860B3249A39DBB0403D1977B7D7AF572B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/6A954DCA8F132488386154F00954CB12AE07DEF6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 09:51:57 +0000
Certificate not after:    Thu 25 Jul 2024 09:56:57 +0000
Subordinate resources:    AS: 266256
                          IP: 192.140.100.0/22
                          IP: 2804:3d24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:06:99:c8:60:b3:24:9a:39:db:b0:40:3d:19:77:b7:d7:af:57:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 09:51:57 2023 GMT
            Not After : Jul 25 09:56:57 2024 GMT
        Subject: CN=6A954DCA8F132488386154F00954CB12AE07DEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:03:2a:32:24:51:06:d0:37:46:40:85:a8:
                    65:81:d7:01:1f:d8:56:e9:78:01:4f:91:2a:77:17:
                    b9:e9:d7:a9:2f:3c:1c:4b:b6:6c:6c:51:4f:2a:6d:
                    ce:75:4b:d1:27:c6:a8:f2:1e:a3:81:fe:fa:c9:e6:
                    48:47:2a:90:0e:f7:d1:03:64:4e:34:db:95:16:52:
                    7b:a7:e1:b8:7c:96:41:52:f7:69:5c:92:98:e0:18:
                    c3:39:9d:f8:6e:fd:d4:e8:e4:8a:1e:eb:a2:63:47:
                    4e:3f:59:35:5b:2c:34:76:f3:1e:09:5b:ab:b8:d8:
                    97:cd:09:cd:85:31:55:fa:15:39:e3:f0:ac:3d:2b:
                    26:09:eb:e7:7e:66:c1:88:c6:49:c8:e9:48:cd:c0:
                    0f:17:27:ce:21:a0:40:b9:7f:9d:d1:9e:ba:f3:eb:
                    2d:aa:4d:f8:bb:42:3a:eb:28:a5:60:03:e3:3d:b5:
                    d0:70:35:21:9f:19:a4:fc:fe:c0:93:79:c8:82:6e:
                    9d:e9:b6:ea:f3:13:05:eb:3f:01:48:d6:98:88:ba:
                    bd:c2:12:73:68:76:96:59:a8:70:5f:8c:fc:0a:4c:
                    62:17:3e:9b:ec:23:b7:56:3a:7f:8c:ec:ea:dd:87:
                    ea:38:5c:55:c7:30:fc:f7:c0:b1:75:ed:85:5b:97:
                    df:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:95:4D:CA:8F:13:24:88:38:61:54:F0:09:54:CB:12:AE:07:DE:F6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/6A954DCA8F132488386154F00954CB12AE07DEF6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.100.0/22
                IPv6:
                  2804:3d24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266256

    Signature Algorithm: sha256WithRSAEncryption
         af:1e:1f:51:28:57:ad:66:3b:34:90:ee:71:1d:05:a0:d2:cf:
         82:f9:9e:68:e9:a6:1d:57:bc:28:10:98:33:0c:53:5f:e5:57:
         ad:86:b4:04:ab:3a:0d:41:02:bf:55:78:fc:3a:f1:4d:5b:6d:
         40:14:fe:a7:20:8b:e1:f6:dc:0e:24:89:0d:6c:76:82:1a:8a:
         45:7b:19:06:e1:e4:a1:66:56:4b:5c:25:c9:46:e8:77:ac:d8:
         2f:46:c0:3d:4e:dd:3f:4d:f7:ae:9b:c4:23:4e:1f:9a:6d:0a:
         34:dd:53:5b:ba:b1:97:b2:af:b7:ed:f8:0e:48:7f:93:93:f3:
         65:da:dc:bf:f5:6a:31:5d:37:2b:53:f5:80:e7:f3:27:c4:fc:
         e9:64:6b:28:fb:d9:8a:f2:8b:05:f4:a3:49:06:d5:56:25:e7:
         ee:90:0d:20:0c:44:f7:1e:9c:c7:39:8d:26:98:8b:3a:77:16:
         0b:47:ea:3f:9f:bd:c0:52:ed:59:5e:3f:1d:10:6a:73:fc:a7:
         39:8a:47:24:4b:1c:52:63:26:06:4e:ac:86:0d:8c:71:55:79:
         88:8c:22:bd:d9:db:26:7f:8b:70:ab:4b:6f:ea:b2:c5:19:3e:
         eb:f6:7e:da:e0:ca:00:cd:53:fc:ba:fa:a4:2e:27:90:67:6f:
         02:00:5c:ab
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIUTAaZyGCzJJo527BAPRl3t9evVyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjcwOTUxNTdaFw0yNDA3MjUwOTU2NTdaMDMxMTAvBgNV
BAMTKDZBOTU0RENBOEYxMzI0ODgzODYxNTRGMDA5NTRDQjEyQUUwN0RFRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsAAMqMiRRBtA3RkCFqGWB1wEf
2FbpeAFPkSp3F7np16kvPBxLtmxsUU8qbc51S9EnxqjyHqOB/vrJ5khHKpAO99ED
ZE4025UWUnun4bh8lkFS92lckpjgGMM5nfhu/dTo5Ioe66JjR04/WTVbLDR28x4J
W6u42JfNCc2FMVX6FTnj8Kw9KyYJ6+d+ZsGIxknI6UjNwA8XJ84hoEC5f53Rnrrz
6y2qTfi7QjrrKKVgA+M9tdBwNSGfGaT8/sCTeciCbp3pturzEwXrPwFI1piIur3C
EnNodpZZqHBfjPwKTGIXPpvsI7dWOn+M7Ordh+o4XFXHMPz3wLF17YVbl985AgMB
AAGjggMYMIIDFDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqlU3KjxMkiDhh
VPAJVMsSrgfe9jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9XU3h4QW4zVXRtcllzWFJYbVVuUGo2Wmppb2F2ektVcWtX
enZuTnJCR3l3LzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL1dTeHhBbjNVdG1yWXNYUlhtVW5QajZaamlvYXZ6S1Vxa1d6
dm5OckJHeXcvMC82QTk1NERDQThGMTMyNDg4Mzg2MTU0RjAwOTU0Q0IxMkFFMDdE
RUY2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALAjGQwDQQCAAIwBwMFACgE
PSQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBAQMA0GCSqGSIb3DQEBCwUAA4IB
AQCvHh9RKFetZjs0kO5xHQWg0s+C+Z5o6aYdV7woEJgzDFNf5VethrQEqzoNQQK/
VXj8OvFNW21AFP6nIIvh9twOJIkNbHaCGopFexkG4eShZlZLXCXJRuh3rNgvRsA9
Tt0/Tfeum8QjTh+abQo03VNburGXsq+37fgOSH+Tk/Nl2ty/9WoxXTcrU/WA5/Mn
xPzpZGso+9mK8osF9KNJBtVWJefukA0gDET3HpzHOY0mmIs6dxYLR+o/n73AUu1Z
Xj8dEGpz/Kc5ikckSxxSYyYGTqyGDYxxVXmIjCK92dsmf4twq0tv6rLFGT7r9n7a
4MoAzVP8uvqkLieQZ28CAFyr
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org