Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6AA8274C8122026BEEE03BDE8434893834E233B0.cer
File:                     6AA8274C8122026BEEE03BDE8434893834E233B0.cer (raw, json)
Hash identifier:          8EbAGuegE0+WyLu5P+SySHDXxZ58F1Vl79bGN8vgztc=
Subject key identifier:   6A:A8:27:4C:81:22:02:6B:EE:E0:3B:DE:84:34:89:38:34:E2:33:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       74AFB6B4BCE5E1D547758FED8BCE11D20507BEBA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/6AA8274C8122026BEEE03BDE8434893834E233B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Mar 2024 06:08:47 +0000
Certificate not after:    Sat 15 Mar 2025 06:13:47 +0000
Subordinate resources:    AS: 61850
                          IP: 201.149.112.0/22
                          IP: 2804:1a48::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:af:b6:b4:bc:e5:e1:d5:47:75:8f:ed:8b:ce:11:d2:05:07:be:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 06:08:47 2024 GMT
            Not After : Mar 15 06:13:47 2025 GMT
        Subject: CN=6AA8274C8122026BEEE03BDE8434893834E233B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:37:de:1a:2c:5a:f7:19:d5:70:7c:d4:91:
                    c5:21:77:59:8c:3d:75:57:3c:c0:78:a8:c7:bc:f1:
                    7c:aa:38:e9:95:64:78:49:bb:25:fe:5e:37:21:44:
                    b1:98:15:01:11:0e:dd:ae:87:f4:39:fd:18:67:95:
                    58:f6:c2:2f:23:eb:ca:7c:fb:e0:0a:2f:4f:52:e5:
                    a2:c8:e7:f2:a0:a9:06:d6:01:62:32:3e:c6:3b:8a:
                    59:9e:90:6b:d1:3d:3f:55:e6:bf:90:bc:b6:14:9b:
                    85:4e:eb:b8:71:f1:0b:45:ac:ad:41:d5:43:37:28:
                    db:cd:b3:0e:0d:3b:fb:71:34:43:32:fd:8f:64:7b:
                    cb:24:bf:6d:38:94:c8:ee:4b:31:45:dd:24:19:d5:
                    30:16:77:9f:39:dc:86:3c:62:76:2a:32:39:82:42:
                    ff:72:37:08:0c:d5:31:da:67:0e:de:d2:ec:31:c6:
                    ee:3f:42:cd:63:c4:d1:1f:52:a6:be:90:4a:46:2e:
                    eb:99:dd:2a:49:89:cd:14:28:a3:2e:db:ab:df:38:
                    e8:75:75:04:d9:ce:34:84:1b:da:c2:5b:dc:77:8e:
                    d9:b4:df:b2:d8:c7:85:12:f9:f5:00:12:5d:da:b4:
                    75:3b:3d:dc:fb:71:46:7e:49:77:6e:42:31:dc:d9:
                    9f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:A8:27:4C:81:22:02:6B:EE:E0:3B:DE:84:34:89:38:34:E2:33:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/6AA8274C8122026BEEE03BDE8434893834E233B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.112.0/22
                IPv6:
                  2804:1a48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61850

    Signature Algorithm: sha256WithRSAEncryption
         69:33:cb:7a:4f:3d:56:79:8d:87:35:9c:45:d1:5f:b4:2b:7e:
         45:06:0d:c6:40:51:4d:5f:29:72:71:97:02:49:73:14:02:9d:
         72:99:7c:32:e9:96:98:10:10:ba:08:e7:07:10:b6:dc:13:a6:
         1c:86:dd:0f:06:40:d1:5e:3b:ec:a3:0c:01:e4:ae:fc:cd:b8:
         da:ee:c8:09:83:21:31:7b:42:6a:b7:c3:72:ed:da:cd:2d:e8:
         d3:dd:c6:e8:04:1e:6a:3d:6d:0f:12:08:49:29:79:b0:f5:e7:
         38:ad:31:f2:95:57:1c:2d:26:03:57:a6:e1:38:27:a1:d9:34:
         b7:5a:d5:96:72:16:55:57:df:a9:a7:57:58:09:b0:18:1d:1d:
         43:30:ee:d0:8c:aa:1c:85:ab:2c:cc:75:1f:c7:fb:a1:16:9a:
         eb:0a:dd:af:f9:b3:6b:c9:ae:63:0f:8e:01:27:34:db:b8:c8:
         bf:8e:4d:ef:93:d9:e2:17:de:b6:d7:64:c2:90:e5:1d:13:9f:
         d7:bc:2c:96:b4:42:1d:b6:d3:d9:e3:a8:c7:7c:c5:12:86:7c:
         64:76:af:f6:1e:f3:2b:67:3a:da:11:3c:50:8c:ee:dd:46:ed:
         08:f9:34:53:28:9c:dd:8e:5a:5c:ee:01:d1:7f:5a:ea:4f:d4:
         49:12:83:ae
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUdK+2tLzl4dVHdY/ti84R0gUHvrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTYwNjA4NDdaFw0yNTAzMTUwNjEzNDdaMDMxMTAvBgNV
BAMTKDZBQTgyNzRDODEyMjAyNkJFRUUwM0JERTg0MzQ4OTM4MzRFMjMzQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMDfeGixa9xnVcHzUkcUhd1mM
PXVXPMB4qMe88XyqOOmVZHhJuyX+XjchRLGYFQERDt2uh/Q5/RhnlVj2wi8j68p8
++AKL09S5aLI5/KgqQbWAWIyPsY7ilmekGvRPT9V5r+QvLYUm4VO67hx8QtFrK1B
1UM3KNvNsw4NO/txNEMy/Y9ke8skv204lMjuSzFF3SQZ1TAWd5853IY8YnYqMjmC
Qv9yNwgM1THaZw7e0uwxxu4/Qs1jxNEfUqa+kEpGLuuZ3SpJic0UKKMu26vfOOh1
dQTZzjSEG9rCW9x3jtm037LYx4US+fUAEl3atHU7Pdz7cUZ+SXduQjHc2Z9zAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqqCdMgSICa+7g
O96ENIk4NOIzsDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BdDQyQURnNml4QW53dG4xRjdQVVhLcnZCdkEyRjF1MTJY
UmQ2S3FIVEZuay8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQXQ0MkFEZzZpeEFud3RuMUY3UFVYS3J2QnZBMkYxdTEy
WFJkNktxSFRGbmsvMC82QUE4Mjc0QzgxMjIwMjZCRUVFMDNCREU4NDM0ODkzODM0
RTIzM0IwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALJlXAwDQQCAAIwBwMF
ACgEGkgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPGaMA0GCSqGSIb3DQEBCwUA
A4IBAQBpM8t6Tz1WeY2HNZxF0V+0K35FBg3GQFFNXylycZcCSXMUAp1ymXwy6ZaY
EBC6COcHELbcE6Ycht0PBkDRXjvsowwB5K78zbja7sgJgyExe0Jqt8Ny7drNLejT
3cboBB5qPW0PEghJKXmw9ec4rTHylVccLSYDV6bhOCeh2TS3WtWWchZVV9+pp1dY
CbAYHR1DMO7QjKochasszHUfx/uhFprrCt2v+bNrya5jD44BJzTbuMi/jk3vk9ni
F96212TCkOUdE5/XvCyWtEIdttPZ46jHfMUShnxkdq/2HvMrZzraETxQjO7dRu0I
+TRTKJzdjlpc7gHRf1rqT9RJEoOu
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org