Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.cer
File:                     6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.cer (raw, json)
Hash identifier:          ZcO718adDwUNjdzZZQgo0GC1OAmbI8U6niLlRLLn1Kw=
Subject key identifier:   6C:1B:CF:E2:17:EE:8D:EA:99:2D:9A:29:67:5B:9B:04:EC:C1:AC:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       263AFE92A1984C184EFA951C7BCE4455E9C629C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Dec 2023 14:57:25 +0000
Certificate not after:    Tue 10 Dec 2024 15:02:25 +0000
Subordinate resources:    AS: 269713
                          IP: 187.62.76.0/22
                          IP: 2804:68c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3a:fe:92:a1:98:4c:18:4e:fa:95:1c:7b:ce:44:55:e9:c6:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 12 14:57:25 2023 GMT
            Not After : Dec 10 15:02:25 2024 GMT
        Subject: CN=6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b0:fa:f4:fb:40:21:3c:a0:82:d5:10:b1:95:
                    b0:02:dc:b3:ef:1a:0d:3c:b8:29:8b:ec:df:a2:ce:
                    fb:40:ea:d6:b4:44:4e:57:d7:de:af:80:b2:60:16:
                    c0:0e:37:30:a2:25:fd:28:57:13:9e:90:5c:77:7a:
                    04:d5:3e:7a:b0:b4:91:12:6e:f6:7d:43:48:7d:b5:
                    c9:40:9a:23:db:f9:a8:c3:fb:00:f6:49:95:d9:ba:
                    62:ca:89:f4:7b:4a:1f:52:a2:40:59:42:d8:f8:eb:
                    75:ea:d6:d0:9f:5b:05:fa:e0:2d:50:a6:8d:56:33:
                    42:1f:5f:9a:fe:61:66:60:d0:ee:7a:df:ff:9d:df:
                    26:3d:cb:2c:35:90:90:0e:3c:78:da:1e:0c:14:20:
                    00:2b:21:77:bc:4c:ad:9e:2d:b2:6d:d9:d0:2b:de:
                    27:5d:02:f4:0f:44:21:5a:fd:04:9f:4e:21:ab:d7:
                    62:2e:80:b0:8e:dd:aa:cf:27:17:47:d1:af:31:f4:
                    3f:27:fc:b9:3a:16:5d:4d:0a:a1:3f:99:eb:d0:e3:
                    72:b9:f9:2f:08:42:76:07:db:fb:e3:28:3e:dc:79:
                    62:67:97:10:25:5e:46:2e:06:8a:4f:db:92:e6:d1:
                    56:c3:95:d4:36:0c:2c:31:8c:79:00:78:70:10:67:
                    9f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:1B:CF:E2:17:EE:8D:EA:99:2D:9A:29:67:5B:9B:04:EC:C1:AC:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.76.0/22
                IPv6:
                  2804:68c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269713

    Signature Algorithm: sha256WithRSAEncryption
         8c:73:99:94:14:86:cf:14:a6:70:67:30:ff:64:89:a0:99:3e:
         e9:aa:27:83:b3:1e:02:db:22:43:6a:28:b5:27:b8:c3:d0:82:
         49:21:f0:0d:82:ce:60:5d:bc:b2:c0:95:f3:4d:0b:2e:5b:e3:
         43:c3:e1:74:7b:7c:ae:90:38:71:d6:3b:41:d6:a7:18:e1:56:
         16:1a:46:d4:65:32:d8:d2:a6:43:93:df:30:40:68:f0:a1:0d:
         48:6a:08:cb:0a:15:a4:48:6a:e0:4b:b0:28:3e:17:79:d8:e7:
         30:79:23:e4:dc:17:9a:0f:e1:7d:cf:2e:06:81:48:5a:7d:88:
         01:bc:13:8c:70:4d:91:63:30:c3:3f:65:ec:a2:25:ee:e0:aa:
         79:23:c3:c5:63:21:d9:da:f1:5f:56:32:a0:80:24:22:98:f5:
         a2:87:1b:25:63:7d:c5:84:bf:b7:ea:5e:a9:75:15:79:e7:85:
         85:e3:35:f1:c2:dc:77:1f:18:52:b9:73:66:08:79:af:bc:01:
         3b:64:97:9d:9a:0f:93:1b:15:51:1c:ea:1b:57:d5:83:3c:d3:
         96:75:d9:01:3c:2b:57:7a:5a:b8:27:1e:30:e7:2d:44:50:47:
         4c:bd:b8:b0:29:c8:4f:f1:0a:fd:b9:67:be:be:83:2a:47:eb:
         3e:7c:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org