Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.cer
File:                     6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.cer (raw, json)
Hash identifier:          br7ANB9fnKKtbBLLpnlWeEWWwnOnm11NbEoVGD3QCqQ=
Subject key identifier:   6A:F5:CB:B0:65:30:2A:9D:3D:BE:1E:97:B9:C2:CB:E2:1C:26:F2:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5FFAC8343520D367864857E1428540AF881F98E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 18:05:57 +0000
Certificate not after:    Tue 23 Jul 2024 18:10:57 +0000
Subordinate resources:    AS: 263142
                          IP: 177.93.80.0/21
                          IP: 2804:1760::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:fa:c8:34:35:20:d3:67:86:48:57:e1:42:85:40:af:88:1f:98:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 18:05:57 2023 GMT
            Not After : Jul 23 18:10:57 2024 GMT
        Subject: CN=6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f9:e1:7c:6c:67:34:4e:3f:f7:52:ad:f2:1a:
                    6e:eb:ea:d3:d7:d5:57:c5:81:76:e6:fd:e4:6c:28:
                    f7:3e:25:61:cd:dd:36:bc:10:b4:d4:e5:88:93:68:
                    a0:19:e9:cb:bd:fd:bb:59:5d:4b:e1:9b:cf:2b:01:
                    91:b0:54:74:66:b7:c4:09:ac:97:ce:78:b1:8f:e5:
                    97:42:b5:c4:04:ea:88:d4:b9:10:02:01:b4:98:09:
                    c2:5b:20:2c:00:9b:35:3a:f8:7a:6b:d1:93:77:e0:
                    41:63:c0:0a:6a:17:bf:8b:4b:fb:eb:14:90:f0:69:
                    c0:65:05:14:1d:f4:3d:d1:05:d0:d8:94:b9:e1:de:
                    8b:3a:d7:c1:35:29:73:ce:8e:f0:80:0a:55:fe:ee:
                    25:d1:e6:b9:06:2c:15:20:e3:dd:83:de:27:0a:0d:
                    9c:87:36:33:5c:9a:64:49:6a:3d:34:b9:d8:f6:75:
                    00:2d:5f:9f:5d:9a:b0:71:a8:65:2b:80:83:82:e5:
                    38:b2:50:40:8c:6a:b8:f5:18:c6:d2:28:45:cc:28:
                    b0:ca:a3:15:41:e8:a8:e1:28:05:36:15:ac:ab:8d:
                    97:fc:4d:2b:64:c2:e0:9b:df:f9:75:ab:6d:93:33:
                    48:65:3c:e3:26:5f:82:7c:51:02:38:a3:bc:08:87:
                    a7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:F5:CB:B0:65:30:2A:9D:3D:BE:1E:97:B9:C2:CB:E2:1C:26:F2:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.80.0/21
                IPv6:
                  2804:1760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263142

    Signature Algorithm: sha256WithRSAEncryption
         49:22:cd:38:aa:76:e0:5c:a3:f5:65:4d:a6:3e:ee:f3:ee:60:
         bc:d9:73:93:de:49:4d:62:04:5b:2f:9a:7a:77:94:a2:fc:24:
         88:af:5a:ad:6d:47:da:74:33:d6:52:0a:2f:f0:cb:8b:c4:0e:
         9a:5e:f2:ff:dc:37:11:84:ec:f3:87:c3:ff:fd:0c:8c:5d:b1:
         23:a5:17:90:ea:fb:76:08:5c:5d:8f:34:cb:f5:4e:6f:80:69:
         25:2f:c2:d2:41:4c:90:d8:a8:cb:6f:53:2b:43:98:29:83:83:
         67:55:e0:0e:ba:a9:33:8b:a0:db:5a:25:90:ed:15:33:8a:55:
         cd:8b:34:e4:b4:5b:50:23:fb:01:05:ff:f1:3f:3c:35:13:49:
         e2:f9:1d:5d:7d:b5:b0:9e:53:d1:73:11:63:0f:03:76:d2:97:
         d0:84:3f:b4:07:5d:e6:dc:4a:a1:a6:fe:93:bc:80:8d:f8:bf:
         b4:ee:83:03:58:65:18:9f:dd:64:89:72:95:22:20:56:99:b1:
         74:cc:8f:89:a4:d9:cd:62:0e:b1:3b:7c:aa:02:2f:4d:f0:f3:
         d1:f0:10:c7:ed:58:b0:f0:ee:40:b0:97:a2:68:00:dd:ca:cc:
         67:80:4d:b6:fb:25:a7:02:fa:28:2c:f1:39:56:95:68:28:1d:
         e1:91:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org