Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6C7714879DB88F012D04ABD8ABF967D315877966.cer
File:                     6C7714879DB88F012D04ABD8ABF967D315877966.cer (raw, json)
Hash identifier:          LiZD8u542/ygAG4KuRPGwvi+Jajm/7Z8KLPfEJ4yy3E=
Subject key identifier:   6C:77:14:87:9D:B8:8F:01:2D:04:AB:D8:AB:F9:67:D3:15:87:79:66
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5FCE410F9CB605FB5A90B256316F3FF01398D09C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/6C7714879DB88F012D04ABD8ABF967D315877966.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Jan 2024 22:49:14 +0000
Certificate not after:    Thu 02 Jan 2025 22:54:14 +0000
Subordinate resources:    AS: 264107
                          IP: 138.94.36.0/22
                          IP: 2804:228c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ce:41:0f:9c:b6:05:fb:5a:90:b2:56:31:6f:3f:f0:13:98:d0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  4 22:49:14 2024 GMT
            Not After : Jan  2 22:54:14 2025 GMT
        Subject: CN=6C7714879DB88F012D04ABD8ABF967D315877966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:c7:1d:fe:7d:94:09:93:be:77:81:b3:81:
                    c4:38:13:c5:04:c4:4a:f8:ae:26:3f:66:ee:fb:35:
                    54:13:2e:29:5d:dc:80:c2:29:41:84:26:34:05:c9:
                    79:5b:25:9f:67:f0:41:96:5b:bc:a1:b9:6d:ab:31:
                    11:c7:1b:e4:ef:26:71:d1:de:20:87:cc:6d:82:71:
                    fa:c6:6d:4f:9a:a6:81:fc:b4:35:05:36:a4:38:4e:
                    ae:c6:fc:84:2e:43:1b:20:22:ab:29:57:ec:77:62:
                    26:aa:38:7d:58:e2:3f:da:ce:fe:b7:bd:5f:0d:79:
                    cb:a8:82:43:27:58:43:a5:3c:a1:04:74:02:56:60:
                    7b:18:df:fd:c5:fd:eb:39:a8:8c:55:71:44:b7:82:
                    5a:7d:a9:62:7a:4d:b5:f9:4b:54:86:5f:2e:cd:80:
                    3e:b1:34:5c:ee:5d:10:64:7a:02:86:3c:05:8d:7f:
                    e5:3e:67:ad:bb:09:e4:30:ac:4a:e5:13:cc:5d:89:
                    9d:5b:6e:3a:5f:e2:67:c5:8a:76:ca:7e:00:66:49:
                    3f:3b:42:9b:0b:c3:2a:1f:15:cc:38:12:83:76:6a:
                    09:9e:91:26:ee:78:3c:81:9f:0e:96:80:00:95:72:
                    d2:83:3e:be:15:97:03:7a:97:02:e2:b4:c7:ee:3d:
                    f5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:77:14:87:9D:B8:8F:01:2D:04:AB:D8:AB:F9:67:D3:15:87:79:66
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/6C7714879DB88F012D04ABD8ABF967D315877966.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.36.0/22
                IPv6:
                  2804:228c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264107

    Signature Algorithm: sha256WithRSAEncryption
         b7:c0:2e:21:11:6f:23:ee:30:d7:7a:37:e8:86:98:a2:49:59:
         4e:13:05:1b:29:77:65:78:20:06:1a:38:72:a8:37:6d:e7:68:
         b1:06:b4:05:0f:f5:21:e3:cd:93:d1:58:85:49:9a:a3:30:5b:
         52:3e:26:83:a9:74:3a:7d:d4:67:b5:75:17:70:80:05:96:f8:
         3a:d8:36:3c:31:cd:94:35:a6:d0:e7:a4:52:e9:f8:8e:f4:bd:
         21:c3:ce:b6:58:49:6d:21:87:03:6c:f1:7a:ef:52:83:2d:ff:
         3a:f1:f9:26:ff:54:36:0f:af:c1:e5:a0:0c:39:4c:b2:dc:cb:
         1a:3e:e3:e4:c8:43:d8:12:55:e4:83:1e:7f:f0:cd:a8:29:09:
         31:32:b6:be:4c:3a:ae:f7:47:ba:e8:b8:54:36:28:77:4b:96:
         df:55:88:bb:87:e0:07:cc:65:9b:38:f2:d5:c4:fe:a3:9c:19:
         54:65:cb:58:80:46:a1:eb:c9:c8:72:2a:5e:c0:87:d3:71:39:
         53:b5:f9:87:c5:e0:04:ca:ea:f3:cb:a9:cd:b3:f4:d6:e2:eb:
         39:64:31:18:29:49:d4:3b:a9:35:f8:a6:8f:7a:7c:0e:55:88:
         51:b2:d7:e0:c3:e8:4c:1a:28:dc:d0:5a:1e:b6:e3:6e:15:c6:
         0b:2b:d1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org