Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.cer
File:                     6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.cer (raw, json)
Hash identifier:          MjhMZWVnL7cUs2VQxuJrqv+KIJ/9Y2XmaHm/Ewyq31M=
Subject key identifier:   6A:F9:05:DD:92:B0:78:2F:96:5D:1A:95:4D:CE:A4:CC:60:32:EE:BE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D6D0D32AC0DECD168521A87382B4E4CB14A354D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Jun 2022 18:58:01 +0000
Certificate not after:    Wed 07 Jun 2023 19:03:01 +0000
Subordinate resources:    AS: 28299
                          IP: 177.12.160.0/20
                          IP: 177.185.192.0/20
                          IP: 187.1.128.0/20
                          IP: 189.38.80.0/20
                          IP: 191.6.192.0/19
                          IP: 2804:10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6d:0d:32:ac:0d:ec:d1:68:52:1a:87:38:2b:4e:4c:b1:4a:35:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  8 18:58:01 2022 GMT
            Not After : Jun  7 19:03:01 2023 GMT
        Subject: CN=6AF905DD92B0782F965D1A954DCEA4CC6032EEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:2e:53:ca:b6:ed:bd:6d:b4:1a:b3:1a:9d:
                    08:0c:d0:12:df:22:9f:89:86:7a:18:9a:75:95:99:
                    7b:4b:b1:27:de:17:b4:42:57:36:3d:87:43:2d:53:
                    1c:c3:2c:e5:c8:2e:21:71:61:47:46:90:d7:35:0a:
                    03:4d:74:8c:23:b0:30:d2:a4:b7:61:6c:31:80:11:
                    cb:e3:b3:35:27:4f:9a:f3:fe:95:ed:68:4f:76:a4:
                    9c:17:79:38:97:4d:cc:4e:cb:52:b0:1b:ab:6d:b2:
                    49:af:c3:55:98:0c:72:5d:ad:95:e5:6b:9b:65:9d:
                    4e:1e:dc:ea:e4:48:99:25:cf:41:d1:29:e0:24:a2:
                    e8:85:b1:3d:aa:f6:63:4c:b4:c7:d8:3d:51:5d:87:
                    54:53:02:5e:bd:e3:93:c8:57:bb:f8:3b:4d:bd:05:
                    76:d5:1e:20:ee:86:81:b4:1b:48:5e:44:63:1b:a5:
                    4b:eb:aa:b2:2d:1e:4f:54:21:c8:89:ba:75:e7:a6:
                    2d:19:27:b5:8d:42:ae:ae:b1:84:da:ec:6a:46:72:
                    1f:08:60:b0:57:62:bb:c7:8c:0f:5c:80:a0:6e:37:
                    2c:23:28:e9:01:25:24:cd:2c:67:9e:9e:62:58:b3:
                    be:c1:b8:60:23:9b:92:2a:76:a3:46:39:54:fd:e4:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:F9:05:DD:92:B0:78:2F:96:5D:1A:95:4D:CE:A4:CC:60:32:EE:BE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.160.0/20
                  177.185.192.0/20
                  187.1.128.0/20
                  189.38.80.0/20
                  191.6.192.0/19
                IPv6:
                  2804:10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28299

    Signature Algorithm: sha256WithRSAEncryption
         9d:70:39:ef:ed:bc:5c:ff:83:22:a7:62:89:41:0e:0b:7a:57:
         9d:92:a0:ad:9d:a4:7b:77:26:fd:d7:6b:29:52:6d:21:0f:8e:
         0a:9a:8d:ca:cc:8d:49:7a:60:f2:13:ef:be:9b:16:11:19:b9:
         bc:c9:3e:e9:64:ba:8d:ba:a5:48:f8:ab:aa:5a:3b:5a:4e:2c:
         f5:32:00:b1:18:6d:ae:fa:5a:50:24:52:16:fe:db:3c:df:76:
         37:47:0c:e1:10:18:96:f9:17:3f:c6:79:78:9e:a9:9a:3a:ce:
         36:7b:03:f2:d7:d9:d9:02:19:93:33:71:66:75:8e:6d:89:1c:
         4c:29:60:85:7f:92:d5:9c:5f:9a:d0:65:88:ea:06:d6:e6:b5:
         59:d7:a3:0f:15:96:42:38:dd:4c:1d:2f:a0:3a:3c:21:f9:c0:
         0e:be:47:0c:0d:b9:ff:1f:1e:49:e2:51:b9:b7:f9:00:f7:ba:
         25:78:e1:fe:91:8a:1a:b2:12:98:55:a4:08:77:03:ed:3d:8d:
         c8:95:8d:82:5d:a0:25:0d:77:09:fc:98:7f:a6:c8:3c:98:21:
         15:43:df:e5:fa:a4:86:54:15:81:a8:29:03:e4:c2:27:a5:95:
         9f:3d:51:df:26:e4:2d:93:8b:ec:3f:66:c4:8f:c7:75:50:a3:
         91:44:48:06
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgIUXW0NMqwN7NFoUhqHOCtOTLFKNU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA2MDgxODU4MDFaFw0yMzA2MDcxOTAzMDFaMDMxMTAvBgNV
BAMTKDZBRjkwNUREOTJCMDc4MkY5NjVEMUE5NTREQ0VBNENDNjAzMkVFQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4GC5TyrbtvW20GrManQgM0BLf
Ip+JhnoYmnWVmXtLsSfeF7RCVzY9h0MtUxzDLOXILiFxYUdGkNc1CgNNdIwjsDDS
pLdhbDGAEcvjszUnT5rz/pXtaE92pJwXeTiXTcxOy1KwG6ttskmvw1WYDHJdrZXl
a5tlnU4e3OrkSJklz0HRKeAkouiFsT2q9mNMtMfYPVFdh1RTAl6945PIV7v4O029
BXbVHiDuhoG0G0heRGMbpUvrqrItHk9UIciJunXnpi0ZJ7WNQq6usYTa7GpGch8I
YLBXYrvHjA9cgKBuNywjKOkBJSTNLGeenmJYs77BuGAjm5IqdqNGOVT95Mz1AgMB
AAGjggMxMIIDLTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRq+QXdkrB4L5Zd
GpVNzqTMYDLuvjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IUVJybmRFRWJUR3lkODFBbzhVdEtScmJzNTJHdUt4cjln
SGFOOGgxbjJ2bS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IUVJybmRFRWJUR3lkODFBbzhVdEtScmJzNTJHdUt4cjln
SGFOOGgxbjJ2bS8wLzZBRjkwNUREOTJCMDc4MkY5NjVEMUE5NTREQ0VBNENDNjAz
MkVFQkUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEBLEMoAMEBLG5wAMEBLsB
gAMEBL0mUAMEBb8GwDANBAIAAjAHAwUAKAQAEDAZBggrBgEFBQcBCAEB/wQKMAig
BjAEAgJuizANBgkqhkiG9w0BAQsFAAOCAQEAnXA57+28XP+DIqdiiUEOC3pXnZKg
rZ2ke3cm/ddrKVJtIQ+OCpqNysyNSXpg8hPvvpsWERm5vMk+6WS6jbqlSPirqlo7
Wk4s9TIAsRhtrvpaUCRSFv7bPN92N0cM4RAYlvkXP8Z5eJ6pmjrONnsD8tfZ2QIZ
kzNxZnWObYkcTClghX+S1ZxfmtBliOoG1ua1WdejDxWWQjjdTB0voDo8IfnADr5H
DA25/x8eSeJRubf5APe6JXjh/pGKGrISmFWkCHcD7T2NyJWNgl2gJQ13CfyYf6bI
PJghFUPf5fqkhlQVgagpA+TCJ6WVnz1R3ybkLZOL7D9mxI/HdVCjkURIBg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org