Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6BD4739E1EF64752F6C47E6066F4EE428D519B9D.cer
File:                     6BD4739E1EF64752F6C47E6066F4EE428D519B9D.cer (raw, json)
Hash identifier:          cWEZjqTpxkKcp2Q5VF/XYY6Uhq7c9s9PQzoSqQ16wLA=
Subject key identifier:   6B:D4:73:9E:1E:F6:47:52:F6:C4:7E:60:66:F4:EE:42:8D:51:9B:9D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3CB798B40295F57BCF7C768F030BF82D298DD141
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/6BD4739E1EF64752F6C47E6066F4EE428D519B9D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 23:40:40 +0000
Certificate not after:    Thu 13 Feb 2025 23:45:40 +0000
Subordinate resources:    AS: 266615
                          IP: 45.7.224.0/22
                          IP: 2804:3eb0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b7:98:b4:02:95:f5:7b:cf:7c:76:8f:03:0b:f8:2d:29:8d:d1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 23:40:40 2024 GMT
            Not After : Feb 13 23:45:40 2025 GMT
        Subject: CN=6BD4739E1EF64752F6C47E6066F4EE428D519B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:14:36:96:15:66:11:90:cb:55:da:04:42:
                    1d:61:8e:54:65:8e:8d:7c:e6:48:6e:0c:88:17:dd:
                    70:b4:23:ad:0a:1f:00:58:86:94:d7:dd:7e:a3:a4:
                    85:d3:e0:1c:01:29:e1:58:38:eb:db:c9:0a:65:e7:
                    75:46:80:d4:b9:7b:f6:7d:f4:40:c0:4b:18:ce:bd:
                    c0:43:99:0a:a7:dc:45:b3:b6:25:29:7b:b6:0f:cf:
                    cb:3a:49:2c:87:77:c3:96:5a:07:6c:97:c3:07:e8:
                    fa:2a:39:71:1e:65:5a:be:c8:88:5c:e9:d8:e2:cc:
                    2b:38:2b:39:f1:0a:0c:1f:10:a9:37:2d:74:c6:74:
                    c5:af:0f:68:ba:bb:37:8b:5d:e6:23:ca:0b:fc:0f:
                    b5:ae:6c:95:d9:bb:58:5b:b9:34:98:eb:dd:b4:fc:
                    94:7b:fd:27:88:0f:f0:2f:95:ff:d6:23:57:d1:50:
                    e2:c5:fc:e7:16:9f:29:04:17:bf:c3:f9:0a:9d:91:
                    cb:fb:4f:98:9e:79:88:20:27:2e:80:07:d0:d4:67:
                    3e:75:9c:84:c3:2f:d3:05:b3:d3:6d:d5:ff:c5:6b:
                    03:ac:9c:68:9f:82:68:08:0a:46:f5:75:49:45:aa:
                    7b:58:db:16:2d:8a:c9:a3:30:56:b4:32:ce:c0:47:
                    f1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:D4:73:9E:1E:F6:47:52:F6:C4:7E:60:66:F4:EE:42:8D:51:9B:9D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/6BD4739E1EF64752F6C47E6066F4EE428D519B9D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.224.0/22
                IPv6:
                  2804:3eb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266615

    Signature Algorithm: sha256WithRSAEncryption
         30:18:e7:e7:16:ef:a6:f0:cd:ed:9e:b6:12:9d:ee:3f:43:7d:
         2f:d3:77:ee:99:1e:e4:4d:41:e7:d2:d8:6d:57:0f:bc:4b:70:
         b6:55:4c:41:29:5e:a2:16:9a:6a:32:e0:fe:c1:f2:ce:35:17:
         c9:6a:0e:98:2c:4f:c8:f1:8c:03:98:7b:cd:ed:77:11:97:42:
         71:c5:ec:49:39:96:9f:fe:06:76:7d:75:5e:8d:70:cb:18:ce:
         ce:2c:78:ec:71:df:3b:b2:38:87:10:b8:5b:66:82:2d:84:7c:
         12:a9:48:44:89:f7:ba:fe:cc:62:7a:17:b2:3f:2b:83:0e:32:
         3d:5a:b8:a4:9c:b7:90:16:1c:76:93:9d:cf:eb:59:d5:df:ba:
         64:dd:d1:8d:9f:b0:28:e1:8d:0a:03:bf:25:74:18:61:83:f2:
         4d:ee:a1:f6:b4:1a:17:30:fd:1b:77:ce:ff:df:aa:8e:8d:94:
         df:9e:45:8d:d5:34:c8:c6:fb:19:3a:c7:e4:34:ea:b1:a6:ad:
         4e:1f:e5:90:83:cf:65:ac:2e:b0:fe:d6:ed:de:e3:c9:2f:73:
         22:b2:6d:04:93:3a:06:be:43:d1:2b:5c:9c:33:13:40:2b:c2:
         96:12:44:3a:2c:47:ef:fe:7f:b3:38:d9:8b:b9:cd:78:eb:e2:
         8d:66:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org