Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.cer
File:                     6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.cer (raw, json)
Hash identifier:          atlQJSs79jw54H12CzWESPyIDDisvP3O6o/iBHnSXNU=
Subject key identifier:   6B:7F:9A:A0:2E:B2:1C:2A:9C:30:90:16:5A:06:36:1C:BE:06:62:CC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B9B65061A08C3006BABA10378A9AB54D4DF8C2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Apr 2024 20:31:43 +0000
Certificate not after:    Wed 09 Apr 2025 20:36:43 +0000
Subordinate resources:    AS: 265066
                          IP: 168.121.200.0/22
                          IP: 170.79.96.0/22
                          IP: 170.231.112.0/22
                          IP: 179.42.148.0/22
                          IP: 179.125.20.0/22
                          IP: 2804:3244::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9b:65:06:1a:08:c3:00:6b:ab:a1:03:78:a9:ab:54:d4:df:8c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 10 20:31:43 2024 GMT
            Not After : Apr  9 20:36:43 2025 GMT
        Subject: CN=6B7F9AA02EB21C2A9C3090165A06361CBE0662CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:f4:2d:8c:0f:df:49:4d:b2:7a:fc:8b:95:
                    90:c9:31:27:2d:48:78:0f:e2:56:57:05:ba:8f:56:
                    f2:86:a1:9d:d4:43:26:5c:84:3b:c7:bf:d8:45:fb:
                    b4:ed:dd:10:a1:83:ab:ef:0c:4d:44:c9:a7:8c:5a:
                    b8:64:36:51:61:4a:de:9a:90:e9:78:fe:fc:79:27:
                    c7:ab:cb:a9:29:ea:23:bd:16:23:26:e8:e1:9d:eb:
                    5b:c2:7b:0b:a6:0c:dc:a1:34:37:fe:9b:81:08:e2:
                    f3:05:fe:58:e3:96:b8:55:60:fe:6d:69:fd:14:e3:
                    d5:1e:07:79:9b:2e:f2:2d:b7:f9:21:e1:e2:8c:93:
                    f8:92:68:f0:d3:65:0e:08:c3:cf:81:e3:ad:bd:dc:
                    60:2d:49:f3:0f:3e:93:f6:35:fe:fe:d9:25:36:06:
                    70:b9:18:e9:1b:5a:6f:c7:d6:64:bc:e6:62:d0:2f:
                    f2:90:7f:37:39:a9:68:e1:1e:df:d5:9e:b1:db:7f:
                    ce:31:d4:5c:85:dc:d8:96:e1:5d:47:51:4f:ba:47:
                    8a:72:ef:7a:2f:ef:cb:9b:5c:ea:c7:27:76:8f:b6:
                    66:98:0d:71:36:1c:9f:6e:57:37:7e:fc:15:fc:a8:
                    46:be:0c:38:69:1c:0e:9a:f0:a5:ab:e3:8d:07:f8:
                    85:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:7F:9A:A0:2E:B2:1C:2A:9C:30:90:16:5A:06:36:1C:BE:06:62:CC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.200.0/22
                  170.79.96.0/22
                  170.231.112.0/22
                  179.42.148.0/22
                  179.125.20.0/22
                IPv6:
                  2804:3244::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265066

    Signature Algorithm: sha256WithRSAEncryption
         40:b8:b1:81:2f:9d:5a:a1:99:f7:d6:ca:74:d6:11:fb:37:23:
         7c:10:75:43:a2:85:76:00:bd:7c:3f:36:97:1f:7b:72:41:fb:
         e0:e2:37:90:89:48:82:3f:5c:7f:bf:06:d9:d0:98:20:8d:42:
         1d:e2:6f:56:b9:56:f3:fc:db:be:19:bf:90:23:37:01:3a:4a:
         0f:ee:4d:80:83:d3:6a:c6:f7:69:79:f9:23:d7:e6:f9:b4:73:
         24:c8:eb:65:3f:48:2f:42:1f:7a:68:de:8c:85:ba:60:62:90:
         d9:99:30:81:94:f7:4a:31:7d:bc:d7:fc:4c:12:82:e1:d9:11:
         df:d2:7d:cf:1d:ae:13:3a:a3:36:5d:d7:86:6b:39:73:18:d0:
         08:9d:db:a7:f5:d2:99:09:c2:47:a5:a3:1f:aa:27:c4:86:63:
         06:5a:7e:01:c7:9f:52:0b:ab:b7:df:00:2d:57:c5:fb:b0:28:
         be:82:22:64:43:62:b7:f4:1a:40:f6:3d:49:d5:1b:be:0b:1c:
         a3:2b:9f:1a:70:2f:f7:29:38:8f:6e:96:cb:1b:c6:f2:78:9a:
         e2:be:b9:68:da:e4:56:c6:09:40:89:10:55:ef:13:bd:16:21:
         cc:1b:80:92:65:05:fb:bd:01:59:d4:44:70:50:e4:f5:cd:be:
         99:7a:72:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org