Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6C7D6141A2B53090CD71852D7A7C0B5EDB9C13C6.cer
File:                     6C7D6141A2B53090CD71852D7A7C0B5EDB9C13C6.cer (raw, json)
Hash identifier:          yrYaBt7WT/8xe3h5KRaEOZPqcbkx7bJ2daZ6uliFHI8=
Subject key identifier:   6C:7D:61:41:A2:B5:30:90:CD:71:85:2D:7A:7C:0B:5E:DB:9C:13:C6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D65487EA0090563C19EE62208F1A218FE5A391B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FhFWnpn6ge4JhHfWnwkqZiFzec4p5UK7rfpGzvZHKLwS/0/6C7D6141A2B53090CD71852D7A7C0B5EDB9C13C6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FhFWnpn6ge4JhHfWnwkqZiFzec4p5UK7rfpGzvZHKLwS/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Dec 2022 12:26:28 +0000
Certificate not after:    Tue 05 Dec 2023 12:31:28 +0000
Subordinate resources:    AS: 266498
                          IP: 170.244.72.0/22
                          IP: 2804:38bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:65:48:7e:a0:09:05:63:c1:9e:e6:22:08:f1:a2:18:fe:5a:39:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 12:26:28 2022 GMT
            Not After : Dec  5 12:31:28 2023 GMT
        Subject: CN=6C7D6141A2B53090CD71852D7A7C0B5EDB9C13C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:48:cd:14:23:23:38:fc:0c:b0:51:cc:2e:cd:
                    90:0e:2f:4f:8f:54:b8:e9:19:a2:9a:67:d3:b7:c4:
                    aa:f5:86:a0:5f:e0:c0:dd:6f:15:22:02:4a:e2:18:
                    ab:21:14:77:fe:bd:e3:ef:13:03:bf:fa:75:bb:56:
                    d9:d7:bc:f1:e7:0a:1c:cf:d6:e2:05:22:9e:b7:8d:
                    bb:b7:03:d4:07:19:a9:86:ca:66:c4:14:a4:c0:f1:
                    43:1b:9b:22:49:ca:8f:80:bf:4c:15:5d:3c:43:c5:
                    ae:14:22:95:3a:e1:df:d9:d1:da:83:2a:e5:bc:7c:
                    4b:8a:69:42:55:9f:c0:c3:9c:fe:29:a9:0a:0b:37:
                    b4:9f:7b:ee:bf:dc:db:66:b8:06:aa:2d:36:c2:ca:
                    ce:a0:2c:e5:cf:c9:ba:7e:3a:ff:e0:45:aa:f6:b6:
                    80:c2:8e:9a:84:52:2f:45:67:04:6e:ee:ff:c3:5c:
                    e9:78:fe:af:e8:a1:91:6b:5d:20:75:a7:1a:fe:a2:
                    1f:d6:d4:fb:c0:48:7b:f7:b1:0b:21:e6:20:66:02:
                    87:bc:73:bd:78:b8:96:d2:87:af:02:ae:74:75:e0:
                    eb:c0:98:51:d6:7b:bb:ae:c1:da:63:73:91:3e:38:
                    bd:5f:2d:31:2f:75:1f:65:ad:af:6a:e4:79:36:87:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:7D:61:41:A2:B5:30:90:CD:71:85:2D:7A:7C:0B:5E:DB:9C:13:C6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FhFWnpn6ge4JhHfWnwkqZiFzec4p5UK7rfpGzvZHKLwS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FhFWnpn6ge4JhHfWnwkqZiFzec4p5UK7rfpGzvZHKLwS/0/6C7D6141A2B53090CD71852D7A7C0B5EDB9C13C6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.72.0/22
                IPv6:
                  2804:38bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266498

    Signature Algorithm: sha256WithRSAEncryption
         87:40:db:8f:bf:37:b6:d6:17:24:fc:40:fe:c0:d8:ff:ba:4b:
         d6:54:18:a0:4d:ce:b8:62:b5:c3:69:f4:c8:fc:48:96:ba:e2:
         a3:15:b7:7c:ef:31:59:06:4d:ac:e0:1a:d0:2a:64:55:b1:51:
         04:c4:e3:22:84:fc:83:4d:81:43:1a:f9:ab:78:82:b4:ed:db:
         05:b4:b3:05:7c:cd:e5:92:90:13:75:94:e1:8e:e0:fc:52:48:
         55:6b:59:ca:3e:07:b7:d0:66:7e:63:73:2f:9a:63:5e:43:26:
         1d:6e:7d:ff:fb:0f:4e:a7:d1:ba:8a:de:35:6c:5a:81:52:40:
         39:85:0f:49:41:88:41:ef:b5:47:f4:2f:10:0f:6b:06:f9:75:
         71:0e:1b:b7:23:1f:d0:5d:0e:0b:f4:f0:33:ba:0a:bf:70:43:
         eb:64:5c:bc:64:f8:fd:88:1c:05:12:08:77:3d:89:86:97:1b:
         03:ff:2a:f7:d5:f7:0a:9c:f2:6c:62:a4:a5:7c:59:dc:ba:32:
         18:f9:cb:4c:55:d5:8b:51:07:08:5c:ec:83:8b:3d:7f:e8:43:
         10:83:9a:f5:59:9a:ca:6e:15:9b:6c:05:4d:db:50:a7:d2:37:
         4e:e2:df:d1:47:88:63:3a:f1:24:93:3d:eb:1f:72:89:77:78:
         d0:33:de:67
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUXWVIfqAJBWPBnuYiCPGiGP5aORswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEyMDYxMjI2MjhaFw0yMzEyMDUxMjMxMjhaMDMxMTAvBgNV
BAMTKDZDN0Q2MTQxQTJCNTMwOTBDRDcxODUyRDdBN0MwQjVFREI5QzEzQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASM0UIyM4/AywUcwuzZAOL0+P
VLjpGaKaZ9O3xKr1hqBf4MDdbxUiAkriGKshFHf+vePvEwO/+nW7VtnXvPHnChzP
1uIFIp63jbu3A9QHGamGymbEFKTA8UMbmyJJyo+Av0wVXTxDxa4UIpU64d/Z0dqD
KuW8fEuKaUJVn8DDnP4pqQoLN7Sfe+6/3NtmuAaqLTbCys6gLOXPybp+Ov/gRar2
toDCjpqEUi9FZwRu7v/DXOl4/q/ooZFrXSB1pxr+oh/W1PvASHv3sQsh5iBmAoe8
c714uJbSh68CrnR14OvAmFHWe7uuwdpjc5E+OL1fLTEvdR9lra9q5Hk2h5mDAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRsfWFBorUwkM1x
hS16fAte25wTxjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GaEZXbnBuNmdlNEpoSGZXbndrcVppRnplYzRwNVVLN3Jm
cEd6dlpIS0x3Uy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GaEZXbnBuNmdlNEpoSGZXbndrcVppRnplYzRwNVVLN3Jm
cEd6dlpIS0x3Uy8wLzZDN0Q2MTQxQTJCNTMwOTBDRDcxODUyRDdBN0MwQjVFREI5
QzEzQzYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqr0SDANBAIAAjAHAwUA
KAQ4vDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEQIwDQYJKoZIhvcNAQELBQAD
ggEBAIdA24+/N7bWFyT8QP7A2P+6S9ZUGKBNzrhitcNp9Mj8SJa64qMVt3zvMVkG
TazgGtAqZFWxUQTE4yKE/INNgUMa+at4grTt2wW0swV8zeWSkBN1lOGO4PxSSFVr
Wco+B7fQZn5jcy+aY15DJh1uff/7D06n0bqK3jVsWoFSQDmFD0lBiEHvtUf0LxAP
awb5dXEOG7cjH9BdDgv08DO6Cr9wQ+tkXLxk+P2IHAUSCHc9iYaXGwP/KvfV9wqc
8mxipKV8Wdy6Mhj5y0xV1YtRBwhc7IOLPX/oQxCDmvVZmspuFZtsBU3bUKfSN07i
39FHiGM68SSTPesfcol3eNAz3mc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org