Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6B63BBA42510D3769660DEC12024878FF11D4859.cer
File:                     6B63BBA42510D3769660DEC12024878FF11D4859.cer (raw, json)
Hash identifier:          FE0xMy3WvaxoMceVhIdQiogVgWQHgem+UZ5OYCd9w9w=
Subject key identifier:   6B:63:BB:A4:25:10:D3:76:96:60:DE:C1:20:24:87:8F:F1:1D:48:59
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       46C1FDB866CFC507EADE4D5CCFC360610A657736
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0/6B63BBA42510D3769660DEC12024878FF11D4859.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 11 Feb 2023 00:55:14 +0000
Certificate not after:    Sat 10 Feb 2024 01:00:14 +0000
Subordinate resources:    AS: 270422
                          IP: 190.89.248.0/22
                          IP: 2804:6bbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c1:fd:b8:66:cf:c5:07:ea:de:4d:5c:cf:c3:60:61:0a:65:77:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 11 00:55:14 2023 GMT
            Not After : Feb 10 01:00:14 2024 GMT
        Subject: CN=6B63BBA42510D3769660DEC12024878FF11D4859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:20:13:ad:b8:bd:c5:6c:48:d7:59:62:81:
                    de:48:bf:2a:27:c6:7d:ae:da:2c:35:c0:c3:4c:90:
                    9d:75:a0:40:81:1b:dc:2e:cd:3c:d3:e3:8d:ba:d5:
                    8d:ef:6f:7a:f0:48:dc:57:fb:47:68:7a:ca:fa:0d:
                    dc:1a:35:61:04:29:86:4f:3b:28:87:8c:93:33:c9:
                    18:04:6f:b0:3e:fa:5f:9a:fd:ca:fe:f9:4b:8b:66:
                    94:91:6d:45:7f:6b:be:0d:46:71:b7:5b:09:22:bc:
                    b4:80:96:c5:72:d8:ca:7b:d8:21:03:8a:e5:36:84:
                    81:00:c5:19:da:9b:3e:da:91:ee:38:b8:fc:06:78:
                    da:d6:0b:f7:c4:65:b4:52:25:bf:ec:13:3e:8a:7b:
                    d5:8a:e6:58:b7:fa:bf:a6:62:91:c6:25:9f:83:63:
                    31:73:d9:9a:60:87:18:5a:2e:97:21:35:e2:bc:2e:
                    84:7d:86:26:ca:f6:65:b4:77:ce:64:2a:5a:c9:34:
                    86:28:17:56:0e:c9:6b:ce:af:8d:cd:6f:73:80:ea:
                    41:d7:1e:f4:39:f3:5b:10:94:e1:d6:5d:07:0b:9c:
                    34:b7:66:22:65:61:35:6b:ed:f4:b8:84:d9:f6:ea:
                    89:be:be:17:ab:f5:4e:a3:96:68:49:05:c1:73:a8:
                    9e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:63:BB:A4:25:10:D3:76:96:60:DE:C1:20:24:87:8F:F1:1D:48:59
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0/6B63BBA42510D3769660DEC12024878FF11D4859.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.248.0/22
                IPv6:
                  2804:6bbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270422

    Signature Algorithm: sha256WithRSAEncryption
         41:cd:69:7c:82:19:f1:46:4d:d4:58:22:74:40:e6:31:91:2e:
         fe:76:cc:b8:a2:de:3f:c5:bf:42:ae:9e:d6:fc:37:60:7b:4c:
         5b:a3:24:f0:77:71:de:d8:41:7e:2d:80:f8:7a:56:2c:e7:17:
         fd:67:68:ef:99:07:d4:e1:81:6f:1e:ad:f0:48:7e:35:89:b3:
         67:fd:87:3d:2f:8b:eb:c0:e5:e0:c7:54:13:00:be:1f:74:3c:
         62:c4:e5:0d:45:c3:e6:78:8f:1c:25:8c:88:59:3a:dc:39:7c:
         7e:9f:dd:e4:2d:c0:3f:b5:ec:66:ae:04:b9:6e:ff:0e:3a:da:
         3c:73:a6:f6:f1:01:5b:b1:01:e6:f3:e0:90:31:31:c0:5c:44:
         9b:3c:fe:fa:6e:4d:46:26:28:f3:17:f8:9d:a2:fe:5e:e1:a1:
         62:77:75:46:a6:ba:8c:8b:d5:45:d8:dc:25:24:a5:ab:b3:3c:
         bb:da:fa:7a:46:b7:f4:bc:1b:7b:22:12:e8:1a:69:c0:86:db:
         53:a4:70:a2:a5:76:b6:f6:8e:27:4c:3c:65:0e:12:8d:75:3c:
         14:5d:54:e7:22:e4:1c:5f:77:4b:50:69:41:c3:16:2d:24:32:
         d1:1c:4b:3c:fc:33:3f:a3:c3:0f:8e:b6:3b:80:78:72:57:8c:
         aa:8c:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org