Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6B275A9FA80E5CEB9DD5699EEBDF9C412A2D4A25.cer
File:                     6B275A9FA80E5CEB9DD5699EEBDF9C412A2D4A25.cer (raw, json)
Hash identifier:          fkE/YYvTkLQf26OjnjzVFWCdjy2xDyNSvK2pzkzaILQ=
Subject key identifier:   6B:27:5A:9F:A8:0E:5C:EB:9D:D5:69:9E:EB:DF:9C:41:2A:2D:4A:25
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F826DDF87521D1EAA3C836900DDB8E1746E8DA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/6B275A9FA80E5CEB9DD5699EEBDF9C412A2D4A25.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 12:58:59 +0000
Certificate not after:    Thu 20 Jul 2023 13:03:59 +0000
Subordinate resources:    AS: 268973
                          IP: 45.176.252.0/22
                          IP: 2804:5d74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:82:6d:df:87:52:1d:1e:aa:3c:83:69:00:dd:b8:e1:74:6e:8d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 12:58:59 2022 GMT
            Not After : Jul 20 13:03:59 2023 GMT
        Subject: CN=6B275A9FA80E5CEB9DD5699EEBDF9C412A2D4A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:50:7e:e2:e2:9d:e7:4d:eb:b5:40:29:62:
                    51:ea:37:b9:74:d4:93:05:d3:77:59:7e:a8:a4:ff:
                    26:01:ec:a2:96:da:90:55:7c:3c:b8:2c:58:f7:d8:
                    4d:15:a5:26:15:ab:fb:52:4e:10:23:cb:56:77:06:
                    f6:e6:ca:ed:b2:a0:70:73:bb:72:22:06:2f:38:9a:
                    c0:aa:29:c6:dd:94:a9:3e:fa:c7:9a:77:2e:dc:df:
                    9f:f7:bf:52:19:e8:5d:e8:0b:5c:2a:66:1f:19:fd:
                    31:16:a1:08:66:26:c8:75:d7:47:3d:97:d8:a5:c2:
                    85:fc:c0:39:9e:7d:90:f9:d3:63:8e:d9:5b:3c:bb:
                    e1:7b:56:41:2e:a7:2d:2e:ba:a5:db:33:ca:cc:06:
                    14:93:51:68:d5:3c:38:89:9f:a7:0c:ae:3d:01:d3:
                    1e:e4:02:64:df:de:33:95:82:5b:24:7b:fb:1f:cc:
                    38:ca:a5:a6:fc:ba:15:6a:67:ca:71:52:9d:e2:0c:
                    ee:11:5c:b7:54:71:9a:62:5b:4c:06:f9:92:11:71:
                    55:45:fd:66:dd:41:42:9e:19:dd:43:1e:84:6c:b4:
                    98:42:94:91:08:41:d2:83:8a:41:36:64:86:43:6e:
                    4b:ba:6a:08:ec:71:9f:88:be:5e:a8:c3:07:23:de:
                    d0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:27:5A:9F:A8:0E:5C:EB:9D:D5:69:9E:EB:DF:9C:41:2A:2D:4A:25
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/6B275A9FA80E5CEB9DD5699EEBDF9C412A2D4A25.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.252.0/22
                IPv6:
                  2804:5d74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268973

    Signature Algorithm: sha256WithRSAEncryption
         84:c6:62:28:ee:68:f5:9a:75:b2:bd:15:9a:94:f1:44:38:e9:
         34:82:94:e3:14:09:5e:6d:5c:e9:87:df:0f:42:cb:d8:88:26:
         b1:b3:f4:2c:ad:9f:51:d0:86:8a:a8:39:8b:3c:e2:e5:d1:95:
         06:49:f9:d2:4a:6c:e9:30:5c:c0:f5:4d:38:f4:e0:f0:b9:d3:
         21:16:2b:e3:5e:db:ba:66:9b:13:00:fa:f0:7c:cd:8d:c7:c4:
         f5:2a:62:6e:cf:40:62:f2:aa:04:f0:bd:e8:3d:06:d9:eb:77:
         69:31:f2:ee:5f:60:c0:2f:6b:7e:a7:aa:33:bb:ad:fb:bb:de:
         b5:4c:11:32:cb:21:05:b1:a3:83:4b:d0:96:f3:ad:e8:7f:0e:
         85:36:60:f9:d8:10:f8:cd:11:7d:c4:78:5c:95:a3:eb:5e:2c:
         15:86:ed:41:95:80:95:a5:fb:fa:31:ea:bc:5c:09:41:f9:58:
         04:2c:e7:f1:13:50:7e:e7:3e:b9:24:ff:e6:61:87:c8:0c:96:
         6f:15:4e:98:d4:80:da:dd:b0:9f:bc:26:26:b0:d7:46:5f:8d:
         5b:36:1c:24:d2:09:25:3c:72:30:7a:a4:3f:6c:3b:74:4e:da:
         23:d7:5f:08:69:dd:9a:16:57:09:f5:e0:84:b5:77:f6:ad:09:
         b2:ff:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org