Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6BE8095E6BCE2A5C5D479158084ABC385B17EA38.cer
File:                     6BE8095E6BCE2A5C5D479158084ABC385B17EA38.cer (raw, json)
Hash identifier:          fFPK3HSrAcrCJCCuO7XC9EwZjDEoIWtIkq+U4NxFi7Q=
Subject key identifier:   6B:E8:09:5E:6B:CE:2A:5C:5D:47:91:58:08:4A:BC:38:5B:17:EA:38
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       41FF0AF50EAB38A7C4918B6C11F5FC56E6B49C40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/6BE8095E6BCE2A5C5D479158084ABC385B17EA38.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 18:20:14 +0000
Certificate not after:    Thu 27 Jun 2024 18:25:14 +0000
Subordinate resources:    AS: 263078
                          IP: 170.244.132.0/22
                          IP: 186.233.168.0/22
                          IP: 2804:960::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ff:0a:f5:0e:ab:38:a7:c4:91:8b:6c:11:f5:fc:56:e6:b4:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 18:20:14 2023 GMT
            Not After : Jun 27 18:25:14 2024 GMT
        Subject: CN=6BE8095E6BCE2A5C5D479158084ABC385B17EA38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:df:6c:30:54:fc:17:d2:07:60:aa:f5:8f:
                    f5:b8:06:ed:93:d1:31:3b:90:ae:67:60:73:cb:8f:
                    80:4e:45:34:fb:68:5e:cc:ca:9b:e5:82:86:4a:ae:
                    e2:7d:5c:f8:5a:53:b0:98:d6:eb:0e:bf:1c:bc:46:
                    69:57:00:96:21:1c:63:3a:c2:cb:87:d2:8b:6b:cb:
                    6e:c6:07:fc:5d:3c:75:26:2b:63:5e:07:27:30:03:
                    4e:23:c3:00:94:0c:5c:df:bd:bc:c2:3b:58:a6:fb:
                    f6:da:98:94:ad:2a:f1:cb:5d:08:b5:28:28:c4:5a:
                    2c:93:af:10:4c:81:4c:fa:05:87:e7:cb:b5:f3:5d:
                    44:cd:85:22:67:9b:43:cb:ed:5d:d3:a8:28:b5:78:
                    09:3a:a2:a6:2e:c5:d8:b4:4d:38:29:91:19:20:8f:
                    6b:76:21:09:2c:e6:2e:73:b2:3f:12:30:1b:21:dd:
                    50:c3:a5:12:c7:9c:29:f1:16:57:83:91:86:c7:02:
                    c2:b9:88:54:b5:8e:a3:a5:9e:10:e0:c0:7e:83:a0:
                    e6:d7:27:f0:75:ea:b0:ad:e0:0b:1f:f5:24:99:5c:
                    fb:73:33:82:b2:a4:02:fc:93:91:f4:d5:39:3a:d8:
                    6b:ca:98:5d:c3:40:cd:8d:58:49:3a:5d:88:85:2e:
                    c1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:E8:09:5E:6B:CE:2A:5C:5D:47:91:58:08:4A:BC:38:5B:17:EA:38
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/6BE8095E6BCE2A5C5D479158084ABC385B17EA38.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.132.0/22
                  186.233.168.0/22
                IPv6:
                  2804:960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263078

    Signature Algorithm: sha256WithRSAEncryption
         00:d2:72:9e:a7:19:6a:39:41:4c:93:01:c0:f4:67:bd:0d:e3:
         72:f3:dd:68:c3:53:9e:19:a7:75:a7:26:5d:b1:0e:56:f0:69:
         56:fc:c4:09:b0:0d:b7:2a:a2:ff:b3:f8:bc:68:d6:5b:50:65:
         21:9d:dd:f4:18:74:cc:8a:6a:61:44:3e:a8:94:0a:6b:9d:3c:
         14:58:c3:e0:61:1a:fa:27:4a:83:d8:cc:d8:af:3e:0e:70:31:
         30:d4:16:15:e1:7e:b9:e4:40:91:e3:dd:a5:97:fd:b0:f1:42:
         8a:45:d3:2f:b8:1e:a8:10:9c:44:f7:32:86:61:8e:e3:94:9c:
         ca:74:3d:fb:ee:3d:ff:c4:66:89:8a:b4:ad:de:51:69:30:b7:
         67:11:d5:ae:d9:98:c2:46:9b:f8:c6:f8:71:7b:6c:be:37:06:
         80:0c:d2:1e:35:6d:ba:d0:96:17:87:b2:d9:98:fc:bf:ab:21:
         2b:fa:e6:51:78:df:4d:ee:e4:f0:32:3f:5d:79:4c:b5:22:cb:
         8b:de:13:cd:3b:a5:d3:ae:3c:50:e3:ec:08:79:f9:84:fc:6f:
         cc:8a:f8:63:ad:59:8f:01:96:fa:6f:65:63:3a:dc:11:25:f7:
         28:69:ce:66:e7:6e:f1:8e:24:ed:1e:9e:08:ba:65:61:a4:77:
         3f:ce:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----