Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.cer
File:                     6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.cer (raw, json)
Hash identifier:          vBJmq7xw8NIU/vMIe4Oj6dpjXv+yPe3olqxoCSNYX5Q=
Subject key identifier:   6B:FE:4C:13:23:7B:DB:8F:DD:E5:06:CE:A7:34:B9:89:B3:DC:91:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       02EA1082B1B0BE7B9C72C153C5468F8C6F042301
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 12:56:15 +0000
Certificate not after:    Tue 28 May 2024 13:01:15 +0000
Subordinate resources:    AS: 270370
                          IP: 190.89.148.0/22
                          IP: 2804:6afc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ea:10:82:b1:b0:be:7b:9c:72:c1:53:c5:46:8f:8c:6f:04:23:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 12:56:15 2023 GMT
            Not After : May 28 13:01:15 2024 GMT
        Subject: CN=6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:84:7b:25:79:1d:fa:8c:08:ac:3a:0b:35:a1:
                    e6:6a:44:37:44:e7:b6:0b:cd:87:11:a3:6c:57:e5:
                    df:1a:88:a7:ae:13:bd:bb:eb:1a:69:27:50:15:e6:
                    31:b6:34:77:1b:06:87:6d:fb:28:13:9c:c2:f4:43:
                    67:a6:31:d0:f4:3c:07:e6:ef:4e:1c:46:57:58:54:
                    e9:8e:16:8e:a4:d0:0a:ca:f6:e2:ee:6c:f6:29:0f:
                    a1:6f:e3:8b:57:78:24:60:52:f0:5f:5b:63:0b:3e:
                    df:7e:c8:52:a5:a1:7d:c0:7f:8a:27:ce:cc:57:66:
                    ed:97:66:8f:40:19:c7:7c:e0:d7:aa:f4:8f:83:5a:
                    69:8f:d3:51:11:59:35:b9:40:f1:96:0e:37:31:39:
                    12:81:e4:01:8b:13:3a:07:79:a8:51:c5:19:74:c5:
                    7c:e0:01:af:ae:ff:7a:1c:04:bb:52:85:f6:d4:09:
                    31:a3:9b:50:d4:6e:28:a0:7f:60:82:f1:4b:ca:a2:
                    09:b8:ee:ad:11:f2:7a:c6:a7:18:d9:06:7d:73:4e:
                    d3:97:3a:16:e6:36:63:c0:ef:6d:53:61:9d:16:e4:
                    1a:9e:86:cd:e3:23:7e:70:58:f1:15:36:6b:1a:fd:
                    ad:15:7f:93:ad:fa:96:df:5f:cb:d1:92:95:d6:37:
                    ab:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:FE:4C:13:23:7B:DB:8F:DD:E5:06:CE:A7:34:B9:89:B3:DC:91:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.148.0/22
                IPv6:
                  2804:6afc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270370

    Signature Algorithm: sha256WithRSAEncryption
         12:c7:5e:f6:16:69:66:bd:f8:c2:70:a8:2f:bf:b3:de:d6:21:
         28:5d:c9:47:4c:73:f3:9e:9c:4b:4e:fd:56:c5:c4:44:0b:90:
         86:61:2a:51:c5:d1:a6:ba:f0:38:2f:03:94:53:2f:57:1d:11:
         8c:b2:b5:c6:76:c2:e0:8d:62:77:11:a0:43:56:fd:38:fe:01:
         2a:80:26:4d:61:de:f6:8d:f6:29:da:65:6d:c9:a9:bb:49:08:
         cc:68:32:6b:9e:25:17:f2:ab:99:83:4c:4b:7d:04:4b:74:01:
         ec:b7:89:ab:7e:9a:54:a9:0c:e9:8e:5b:97:a8:0e:f6:86:8c:
         80:67:ac:74:4b:4b:98:80:35:9e:25:4d:ba:9f:6c:74:2a:8e:
         b8:21:da:af:1a:f6:fe:e1:1f:8d:94:64:ea:43:74:d4:e8:1d:
         f1:50:b0:d9:18:3a:99:71:6f:51:1a:ea:8f:83:07:f3:f9:b5:
         a1:67:65:3a:9a:7f:3e:30:7f:62:0a:a0:48:d6:3f:fc:0a:3c:
         fa:62:36:f7:1b:48:8c:cc:c3:08:f1:0b:6f:de:a0:99:5a:0a:
         77:8d:4f:66:17:c4:da:e7:72:7d:d7:cc:a3:d0:64:d6:70:e5:
         7a:4f:b2:99:f2:0c:d5:8c:71:8e:53:59:3d:05:fa:84:2d:e1:
         8b:63:a4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org