Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6BE04AFAB38F8D99CE4780126F7A2626BCD5488C.cer
File:                     6BE04AFAB38F8D99CE4780126F7A2626BCD5488C.cer (raw, json)
Hash identifier:          954bwq7SP8vcrDFyZhQpPu+++aqGmDJI6/IlbMep5q8=
Subject key identifier:   6B:E0:4A:FA:B3:8F:8D:99:CE:47:80:12:6F:7A:26:26:BC:D5:48:8C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5CF539762CE793272EBB894A85A4BEB50DE3DF0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/6BE04AFAB38F8D99CE4780126F7A2626BCD5488C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 17:13:30 +0000
Certificate not after:    Mon 17 Feb 2025 17:18:30 +0000
Subordinate resources:    AS: 270304
                          IP: 201.216.124.0/22
                          IP: 2804:69fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f5:39:76:2c:e7:93:27:2e:bb:89:4a:85:a4:be:b5:0d:e3:df:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 17:13:30 2024 GMT
            Not After : Feb 17 17:18:30 2025 GMT
        Subject: CN=6BE04AFAB38F8D99CE4780126F7A2626BCD5488C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:39:09:ab:7c:56:ce:cd:08:e6:90:27:91:
                    07:5c:d5:4c:34:07:a0:68:87:07:e0:0d:7f:3b:5f:
                    80:ae:29:61:9c:e3:1a:4e:94:ec:73:0f:8e:c9:96:
                    26:87:9f:03:7f:8c:46:47:5a:7d:77:2f:93:b4:0d:
                    cd:a0:f9:86:c5:39:b5:4f:7f:a9:d9:6c:8c:18:25:
                    d1:2e:31:bf:4e:fd:8f:b3:ef:79:1e:34:b6:58:87:
                    f2:fc:0d:43:e3:16:bd:dc:fa:5f:0c:23:42:95:a6:
                    e0:fa:14:d9:fb:50:a6:39:a1:27:0a:51:d6:04:23:
                    e0:4e:42:b8:a2:15:36:42:6c:af:70:05:bc:f6:3e:
                    a1:6d:85:ff:33:c4:de:12:41:48:cb:62:69:3a:a8:
                    85:18:96:c4:37:92:2e:89:6b:42:a8:81:f1:c1:35:
                    b1:d4:9a:62:9d:f5:32:ed:38:d2:26:72:4e:4c:67:
                    ce:01:db:40:c1:e6:f0:c0:e5:6f:68:3f:8d:07:59:
                    d5:b4:f9:47:2c:f8:d4:0b:16:49:dc:2a:8c:59:f2:
                    19:72:ba:af:6a:64:41:bb:02:3b:f9:e5:5a:4b:98:
                    21:fe:2f:fb:19:09:5f:42:a9:d3:b1:76:f1:eb:6c:
                    2c:d1:9e:1a:5b:59:07:97:bb:68:e5:e1:64:b5:d1:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:E0:4A:FA:B3:8F:8D:99:CE:47:80:12:6F:7A:26:26:BC:D5:48:8C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/6BE04AFAB38F8D99CE4780126F7A2626BCD5488C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.124.0/22
                IPv6:
                  2804:69fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270304

    Signature Algorithm: sha256WithRSAEncryption
         71:6c:00:e9:76:9a:af:a3:c5:84:09:1b:ca:9d:d7:7d:5d:ff:
         85:b0:6f:74:43:e9:fa:00:0e:a8:24:c4:91:21:db:1d:e9:0d:
         d8:e6:63:5a:55:5b:bb:26:ec:2e:2a:44:0a:24:20:f3:69:05:
         8f:3d:f3:87:04:2f:72:fd:d7:c8:54:fb:ee:09:47:0e:8d:1f:
         97:e0:77:bb:0c:f1:e7:ad:10:6a:e7:73:72:a1:c6:85:ce:70:
         2a:e4:0c:43:c2:68:cd:d5:02:90:7f:de:f5:1f:fd:cd:2c:59:
         1d:67:6e:38:80:f9:86:88:09:91:71:67:db:7e:95:19:2b:52:
         2d:4c:5e:0b:37:79:33:a4:f8:6e:f4:6e:c2:27:07:3b:17:3b:
         cb:9e:f8:65:95:3e:31:33:b9:ab:f7:d8:41:2f:e9:61:4a:f7:
         48:d0:e0:18:d4:55:29:83:a7:3f:1b:f7:d8:0b:6c:0c:f5:48:
         ab:83:42:92:c0:b9:14:8d:ce:1d:b1:a1:45:28:72:7a:06:99:
         90:f1:44:ce:08:a3:90:aa:53:e2:92:fe:b4:06:dc:00:b2:60:
         1d:d8:7a:32:1c:4e:5c:6f:d0:6e:27:eb:c2:f6:4c:41:c7:7e:
         a8:40:08:62:b3:16:de:95:84:a0:05:31:83:19:4a:fe:85:77:
         1e:6d:65:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org