Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6B4482CB2527FEC9B0216EA842F0AC1B226E0699.cer
File:                     6B4482CB2527FEC9B0216EA842F0AC1B226E0699.cer (raw, json)
Hash identifier:          6HhAgbosBorZ7y4F38fqj3niVvDOXQLqsjM1Ec6Z9LU=
Subject key identifier:   6B:44:82:CB:25:27:FE:C9:B0:21:6E:A8:42:F0:AC:1B:22:6E:06:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       457F874EB8D0EA9050A2E6ED3424F1D493BD3371
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/6B4482CB2527FEC9B0216EA842F0AC1B226E0699.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 13:01:21 +0000
Certificate not after:    Mon 31 Mar 2025 13:06:21 +0000
Subordinate resources:    AS: 262649
                          IP: 138.219.204.0/22
                          IP: 170.238.92.0/22
                          IP: 177.105.176.0/20
                          IP: 2804:770::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7f:87:4e:b8:d0:ea:90:50:a2:e6:ed:34:24:f1:d4:93:bd:33:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 13:01:21 2024 GMT
            Not After : Mar 31 13:06:21 2025 GMT
        Subject: CN=6B4482CB2527FEC9B0216EA842F0AC1B226E0699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:94:aa:bc:a4:4d:33:d3:8c:ee:eb:9d:c4:
                    bf:9f:1d:aa:33:4e:51:9c:06:f8:c4:9d:b9:ee:b9:
                    4b:0e:1b:c8:1f:9c:7b:21:f7:c2:0b:7e:6d:83:26:
                    3f:af:dc:22:89:75:34:a9:b9:f8:76:24:c8:24:0e:
                    4d:99:89:50:3d:08:ab:c2:9b:8b:07:75:18:fb:04:
                    63:6b:3a:23:2f:e1:18:3a:15:34:16:06:af:75:5a:
                    aa:27:6d:4e:52:ac:ef:71:c4:85:8c:5a:af:fb:a5:
                    8c:f3:2c:1b:89:a5:2f:3e:b2:c4:ca:df:aa:d4:0c:
                    5b:81:ce:05:2d:9f:65:29:65:e1:7a:b5:76:45:4b:
                    2f:87:fa:27:07:b9:28:e1:70:df:3e:4d:7b:ea:5c:
                    a9:1f:7b:a9:dc:0d:cf:5f:52:dc:73:c6:75:77:b0:
                    ac:e7:39:e3:03:25:4f:a2:1b:f1:4c:62:45:af:bd:
                    05:cd:20:d9:54:00:3c:43:77:08:0a:c7:49:5c:ca:
                    40:11:d9:85:e8:7d:4b:62:48:0a:92:31:28:49:07:
                    79:18:17:58:7e:01:89:e9:94:53:cd:52:27:8c:16:
                    6d:9e:07:50:b3:a1:71:7b:ea:94:eb:43:da:a4:f8:
                    c7:e8:29:cc:14:5c:fd:fe:14:1a:35:91:05:be:46:
                    6f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:44:82:CB:25:27:FE:C9:B0:21:6E:A8:42:F0:AC:1B:22:6E:06:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/6B4482CB2527FEC9B0216EA842F0AC1B226E0699.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.204.0/22
                  170.238.92.0/22
                  177.105.176.0/20
                IPv6:
                  2804:770::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262649

    Signature Algorithm: sha256WithRSAEncryption
         9e:6a:bc:38:aa:2e:6c:04:ee:a5:3e:cf:dc:26:f6:57:5f:d3:
         4b:fb:7f:8a:e0:98:9e:20:54:85:4b:5e:73:02:45:dd:8e:64:
         04:7c:40:8c:a5:94:45:f4:d2:f6:82:02:4a:b6:45:a3:2a:d9:
         90:b8:79:3a:73:2a:7d:e7:c2:1d:7b:cf:5e:e1:e6:18:77:dd:
         e6:17:d2:fe:c3:2a:6a:ab:bc:dd:0a:33:e8:79:4a:e4:e1:2d:
         c9:ab:e0:3d:6f:ae:14:17:7f:13:07:a4:c7:35:c4:77:e8:6d:
         7a:1b:a7:e0:15:99:a8:05:f7:da:27:a7:24:c8:22:a7:c7:03:
         d6:b9:44:33:d7:c9:b4:75:f2:10:0f:2b:fb:5d:43:be:fd:98:
         76:d4:ad:73:4b:7b:f2:1b:35:45:f0:26:1c:7c:fc:2e:4c:71:
         a8:1c:de:c1:7e:cd:e8:57:9c:b9:2c:8d:9b:8b:65:3b:50:fc:
         28:11:4e:25:da:f8:d4:de:57:ef:43:ef:f5:47:db:86:80:77:
         b0:0e:5d:51:7d:ff:94:17:37:f0:8a:b5:8f:e9:21:55:55:98:
         c9:55:e8:02:ae:76:fd:06:c5:dd:e1:8a:be:1e:23:33:d8:a4:
         d9:46:45:1c:07:1f:38:10:db:7c:8c:72:23:70:32:59:46:9f:
         72:29:bb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org