Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.cer
File:                     6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.cer (raw, json)
Hash identifier:          Dc27a5xnHA5G35oZ8G3P8RutKrrPljy3WB/9+RUCKko=
Subject key identifier:   6A:B6:E1:6E:8F:16:16:97:0F:1B:CE:4C:CA:23:DF:CF:F7:B0:FB:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23F0256F6134EEB61A5A3F83284F2F7F698CD7C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Mar 2024 14:18:34 +0000
Certificate not after:    Wed 12 Mar 2025 14:23:34 +0000
Subordinate resources:    AS: 61592
                          IP: 45.224.216.0/22
                          IP: 45.232.188.0/22
                          IP: 45.234.100.0/22
                          IP: 2804:4c34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f0:25:6f:61:34:ee:b6:1a:5a:3f:83:28:4f:2f:7f:69:8c:d7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 13 14:18:34 2024 GMT
            Not After : Mar 12 14:23:34 2025 GMT
        Subject: CN=6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:88:dd:a1:1a:0a:26:f5:01:19:c9:e3:57:2d:
                    62:db:9a:b1:c6:9e:c2:28:5b:7d:8a:48:ee:a5:78:
                    fb:67:a5:65:74:8e:09:64:4c:d9:65:f0:dd:81:4b:
                    14:84:8c:78:25:9f:30:09:3d:8b:3e:9c:ae:0f:58:
                    07:45:54:d5:2b:ae:00:95:a4:ff:22:82:c7:55:29:
                    be:25:c5:c6:6f:59:2d:1b:41:6e:57:1e:a3:b6:f6:
                    da:d2:d5:1d:46:ce:67:69:d5:3e:f3:45:50:ec:b8:
                    d5:34:14:91:87:f0:93:02:37:69:cf:53:50:2c:0d:
                    13:07:80:aa:f8:ee:74:03:b6:db:0d:95:65:38:4d:
                    d0:3a:98:c1:ea:fb:15:77:33:a0:c0:e0:83:a0:b1:
                    8f:2a:e7:1e:1d:68:d4:fe:1e:13:67:ea:f1:a6:b8:
                    bc:85:05:9d:d2:fd:11:f1:06:c1:d1:3d:90:fa:b5:
                    fe:f9:70:24:74:ab:c9:2c:32:6a:5c:53:7e:1e:20:
                    87:83:fd:48:d4:f9:a8:5f:27:64:64:10:0c:3b:80:
                    07:f9:46:73:81:e3:06:75:ee:d9:13:f0:e5:18:1f:
                    d2:81:e6:1c:82:39:02:66:f8:10:dd:8b:98:a0:4c:
                    c1:63:2f:73:44:61:23:18:2e:f6:0f:cd:df:ef:e5:
                    b8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:B6:E1:6E:8F:16:16:97:0F:1B:CE:4C:CA:23:DF:CF:F7:B0:FB:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.216.0/22
                  45.232.188.0/22
                  45.234.100.0/22
                IPv6:
                  2804:4c34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61592

    Signature Algorithm: sha256WithRSAEncryption
         9d:99:4e:4a:ea:5f:62:65:c9:75:04:b4:e3:3e:6f:33:e1:c1:
         3b:9a:e2:77:55:ed:cf:e4:a3:0a:df:2e:bd:a7:71:db:3d:d9:
         e1:08:50:bb:1f:9b:33:91:c5:36:a5:6b:d8:4f:33:ae:9d:fd:
         43:b0:d8:42:0a:c9:7a:c7:89:9c:7b:96:bd:6e:33:db:7f:52:
         f3:86:5c:db:fc:49:0d:18:7c:2f:ac:7c:62:b6:a3:0a:c6:7f:
         b6:4b:96:21:53:0f:92:be:43:a9:3d:14:56:bf:c1:62:4b:4b:
         8c:66:b5:46:3e:f1:de:f2:80:8c:e8:11:5f:b5:a7:cb:60:95:
         06:33:83:5d:09:bc:c9:c5:d2:d0:08:12:c3:23:9e:2c:aa:97:
         0a:9d:56:89:b4:c9:d3:cd:22:b7:9d:f5:7f:2d:96:dd:f3:7a:
         4b:32:55:3c:c2:52:f8:f3:af:ce:26:5c:ea:f3:10:fd:b0:48:
         65:ba:b5:c2:c8:f6:9f:e1:6c:ae:35:95:3a:e3:ee:5f:f6:7e:
         cd:30:57:2e:4f:79:0b:7f:83:74:81:99:21:56:3b:f5:f5:21:
         80:3a:a0:52:44:27:8b:85:9f:9b:85:c0:81:2d:4b:6a:c8:cc:
         f5:59:6b:70:cb:e8:36:88:6b:27:d8:72:9c:45:d7:55:58:09:
         91:25:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org