Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA.cer
File:                     6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA.cer (raw, json)
Hash identifier:          jdYqtsNrITPTxOXbNujOAh/olBEEc1ygVavVTtN0FXk=
Subject key identifier:   6B:8F:D9:13:CF:AA:17:FF:CD:B8:CA:43:F4:34:1E:11:E9:52:B5:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       720DB2FC44F5ED14DA9036FB0A99F93E065968C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 15:19:57 +0000
Certificate not after:    Mon 17 Feb 2025 15:24:57 +0000
Subordinate resources:    AS: 268135
                          IP: 45.170.4.0/22
                          IP: 2804:588c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0d:b2:fc:44:f5:ed:14:da:90:36:fb:0a:99:f9:3e:06:59:68:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 15:19:57 2024 GMT
            Not After : Feb 17 15:24:57 2025 GMT
        Subject: CN=6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:d7:97:cc:aa:e2:a4:f9:ce:a7:27:c2:e8:
                    7e:5d:c8:5d:35:60:3e:5c:8b:be:1a:b9:3c:95:c5:
                    8f:0a:3f:ef:ac:b0:9e:ba:28:4b:f3:8d:7e:d9:b3:
                    c8:8d:1e:d6:2c:10:9c:51:f1:77:0f:39:80:be:7a:
                    8c:7f:a4:50:f6:97:43:36:34:5c:c8:0d:43:9b:a5:
                    d2:62:62:2d:bd:d4:ab:71:1e:6a:91:ac:6f:86:84:
                    40:6f:76:23:dd:bb:a5:37:f7:69:76:d7:89:ad:a2:
                    09:59:6c:83:33:2e:81:77:05:0e:7a:de:3d:a3:b1:
                    44:f8:87:b7:cb:ff:72:fb:12:30:8c:c8:9d:d7:2c:
                    93:49:1b:0a:11:f9:b8:8a:b8:2f:11:f2:79:71:a1:
                    84:63:17:0b:bb:fa:fa:06:b2:f5:85:0a:c3:25:55:
                    55:69:9c:79:b3:b2:40:16:84:17:0f:71:b0:6f:e8:
                    79:21:d9:75:bf:5e:53:c9:3c:86:13:d6:82:0c:c3:
                    95:95:d9:1e:24:dd:ac:6c:e2:66:87:fe:b5:89:88:
                    20:c0:69:96:79:7b:be:3e:6a:ec:92:79:21:0b:3c:
                    dc:86:e2:63:dd:e4:96:db:f2:e8:41:26:d5:5e:da:
                    97:e1:7e:c0:0b:e7:65:44:7f:94:67:de:02:99:7d:
                    4b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:8F:D9:13:CF:AA:17:FF:CD:B8:CA:43:F4:34:1E:11:E9:52:B5:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.4.0/22
                IPv6:
                  2804:588c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268135

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:d9:d8:21:00:00:42:f0:9b:17:68:a6:3e:9a:81:96:fa:
         8e:f1:6e:54:25:af:7e:a4:81:19:e3:2e:c4:d6:88:ba:42:58:
         2c:48:9a:d0:00:e1:d9:7d:c6:74:d3:d1:0f:15:a9:a4:92:82:
         76:0b:5b:69:d3:1c:5f:79:a9:dc:24:d0:e8:c4:14:4f:df:9c:
         eb:7e:2f:65:af:d8:49:25:65:dc:02:99:fb:6f:d2:a7:89:5b:
         90:0c:71:a7:09:4b:27:6f:5d:7d:e5:f3:4e:27:41:e2:8c:c9:
         ea:77:b3:4e:36:3e:76:d5:3a:f6:06:6e:7b:c4:ee:52:a2:9a:
         0f:4f:71:86:b4:81:d5:1b:f4:c3:fb:59:e9:0d:dc:bb:79:53:
         de:e9:a4:a1:fb:d1:cb:e6:7d:9f:07:3b:30:34:50:ef:ff:bf:
         b9:52:13:29:b9:05:32:0d:f8:3d:77:1d:ac:dc:a4:77:d1:38:
         b6:5f:1b:a7:0b:63:5e:25:ab:27:45:e5:d5:4d:da:b2:f6:ed:
         30:ea:70:89:e7:fe:06:d5:3d:cc:a2:ba:56:ad:39:8e:c2:ea:
         93:53:80:71:34:97:9e:5b:4d:b5:b3:b5:f6:a3:87:b4:d3:d8:
         b4:5a:e1:b0:f8:fa:d0:b2:04:4a:19:37:a1:14:c6:97:81:37:
         37:8f:14:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org