Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6C49C6152384FC3120CB5D8C62B8CA1E598B157A.cer
File:                     6C49C6152384FC3120CB5D8C62B8CA1E598B157A.cer (raw, json)
Hash identifier:          7Y9M9tb9SXeOacEnak3ySTnU0mp2GcBUox3qA2GguDI=
Subject key identifier:   6C:49:C6:15:23:84:FC:31:20:CB:5D:8C:62:B8:CA:1E:59:8B:15:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E08A5B7D695649E617B131F8471313712559E33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/6C49C6152384FC3120CB5D8C62B8CA1E598B157A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jan 2024 14:41:05 +0000
Certificate not after:    Mon 06 Jan 2025 14:46:05 +0000
Subordinate resources:    AS: 262676
                          IP: 187.73.224.0/20
                          IP: 2804:e80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:08:a5:b7:d6:95:64:9e:61:7b:13:1f:84:71:31:37:12:55:9e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  8 14:41:05 2024 GMT
            Not After : Jan  6 14:46:05 2025 GMT
        Subject: CN=6C49C6152384FC3120CB5D8C62B8CA1E598B157A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:33:ae:08:62:b7:20:56:94:3d:67:d6:92:bd:
                    2a:8b:dd:c0:3d:65:ba:1d:b5:32:ba:4a:80:6e:c2:
                    f9:07:6f:39:e6:d7:f7:41:e3:3e:8a:b4:e2:db:3c:
                    03:3f:56:a6:8f:ba:fc:d1:47:86:59:51:ab:dd:3f:
                    b7:ed:71:5c:87:ce:d6:49:aa:73:60:1e:17:71:82:
                    d2:14:6f:73:e4:43:d0:1c:67:5a:f5:12:56:07:e8:
                    e9:d8:5f:f2:6f:d7:bf:d4:9b:6a:7a:8a:42:13:0f:
                    b5:84:0f:fa:1e:e2:30:e9:b3:9f:a6:89:7b:ca:c2:
                    09:86:b5:eb:9a:23:28:65:93:d6:3a:e2:13:14:6d:
                    4f:f6:b0:c2:45:ea:f9:01:3a:80:a9:bb:c0:ef:95:
                    72:7c:2b:37:8c:0b:23:fc:dd:58:17:de:0a:1e:d7:
                    01:50:96:fc:e4:1a:d3:5d:09:0a:7a:c1:47:0e:d9:
                    89:34:5c:05:1b:20:6f:17:5f:e9:b4:c9:6b:81:41:
                    b9:49:91:0d:12:7e:d0:29:8b:77:86:79:b4:d2:b1:
                    ee:c3:b0:b7:db:0e:63:95:d8:dc:33:b2:0f:60:3f:
                    66:2e:a5:d5:76:7a:aa:0d:51:a0:6b:18:bb:16:62:
                    ef:43:59:8f:55:7b:43:a8:07:52:d8:37:58:86:15:
                    31:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:49:C6:15:23:84:FC:31:20:CB:5D:8C:62:B8:CA:1E:59:8B:15:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/6C49C6152384FC3120CB5D8C62B8CA1E598B157A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.224.0/20
                IPv6:
                  2804:e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262676

    Signature Algorithm: sha256WithRSAEncryption
         3c:dc:04:08:e7:62:60:7b:6f:f7:de:6e:38:7f:de:8f:6b:2f:
         62:fe:a0:0e:7e:1e:06:f5:63:16:e9:2e:d6:b3:5f:55:50:d8:
         ed:8d:65:9b:41:47:93:b1:ae:3b:f0:b7:28:3a:48:23:c7:c1:
         9c:ce:a0:38:91:5a:96:00:ad:cf:d8:1a:87:4c:0d:56:e3:a2:
         cd:31:13:42:c6:fc:bf:bc:1d:9d:87:44:a2:36:5b:9a:a4:74:
         3a:cd:87:46:0f:97:28:d3:94:25:ab:87:c9:5e:5f:07:af:7c:
         dd:80:34:2e:83:f2:97:72:62:f6:8e:4c:26:f5:b6:f5:c1:8c:
         f8:0b:74:ca:29:c3:88:b5:84:23:91:87:c7:d3:b2:9e:4d:bb:
         e2:8e:76:93:8e:48:3f:6b:32:d8:3f:6c:62:08:75:04:94:30:
         2e:6c:7c:0a:78:0e:5e:02:f3:de:b5:f6:99:40:8f:98:98:da:
         7c:ea:04:2b:c6:7a:26:cc:eb:77:b6:71:4d:6a:9e:72:ac:81:
         af:ed:8d:f7:df:60:39:14:42:d2:c7:14:fe:a4:a4:cf:9a:ca:
         30:5f:6c:f4:d9:5a:66:ed:98:94:b6:f9:b6:6a:3d:26:db:ae:
         9c:7b:62:ab:bc:d7:26:c0:96:f3:fb:cd:81:ab:78:24:88:ff:
         5e:79:fb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org