Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.cer
File:                     6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.cer (raw, json)
Hash identifier:          ahxDHHtwT8MLOa+vXteyXxAp69c1Xssa6wkyhWWp5lc=
Subject key identifier:   6C:A3:D9:BB:49:D6:D6:6C:52:97:C1:DB:89:7B:FB:BB:35:61:5B:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       110DDC39F7CB8FF4B999A21A612D4F6A0B377BF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Jan 2024 14:04:43 +0000
Certificate not after:    Wed 22 Jan 2025 14:09:43 +0000
Subordinate resources:    AS: 268512
                          IP: 45.161.184.0/22
                          IP: 2804:5258::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0d:dc:39:f7:cb:8f:f4:b9:99:a2:1a:61:2d:4f:6a:0b:37:7b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 24 14:04:43 2024 GMT
            Not After : Jan 22 14:09:43 2025 GMT
        Subject: CN=6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:30:66:87:9c:70:40:92:02:af:a8:b6:2c:12:
                    29:1e:e8:65:70:83:5c:5d:fc:fb:4b:c5:fb:02:b2:
                    89:0d:29:22:b2:fa:77:35:10:48:6a:17:3c:47:7b:
                    a8:68:d4:94:75:1d:dd:fd:2a:0b:c3:17:8f:66:fc:
                    94:1a:7e:97:93:f2:14:8f:ec:2b:50:46:f1:75:ec:
                    c4:a4:38:ad:4f:57:66:3d:29:00:9b:8f:80:bf:31:
                    be:37:5f:c1:b6:1c:a4:0f:f5:a2:f4:77:d0:e6:00:
                    39:22:c7:0c:1b:19:ca:6e:a9:d8:38:fe:46:77:07:
                    10:c7:96:15:88:ae:16:20:0a:62:d6:25:69:6f:41:
                    69:94:26:ac:2d:6a:2a:09:82:88:9f:89:cb:4a:d8:
                    b0:47:b0:37:52:2a:ae:70:e7:ed:97:0e:a4:78:8d:
                    68:01:95:bc:a9:1a:43:f3:31:b6:30:5f:f2:de:b3:
                    fd:28:81:8e:16:17:f9:1c:89:10:3b:fd:bf:57:46:
                    02:47:24:99:15:35:50:44:59:b0:74:34:d7:66:98:
                    fe:b7:0a:fd:1f:df:f1:d9:79:4b:91:0e:d7:3b:ea:
                    42:3b:da:63:c5:e1:c2:12:1a:09:3e:c2:34:3a:92:
                    25:91:00:4b:f1:94:b9:e5:fe:7f:ee:a8:40:f0:c2:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:A3:D9:BB:49:D6:D6:6C:52:97:C1:DB:89:7B:FB:BB:35:61:5B:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.184.0/22
                IPv6:
                  2804:5258::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268512

    Signature Algorithm: sha256WithRSAEncryption
         03:2f:f9:37:5b:68:12:f3:13:99:79:a8:bd:d7:cf:96:ff:c0:
         f7:f7:7c:47:ed:d4:4c:d8:6a:8b:30:c1:0e:35:58:6c:ae:0f:
         a8:e0:38:6e:b1:12:36:30:17:aa:83:2c:10:20:7f:fd:f1:50:
         04:2a:bc:b1:04:13:90:55:fb:01:5e:c5:da:90:dd:00:61:53:
         78:bd:25:13:c8:b3:17:5f:cb:23:01:a3:4d:cc:67:86:ad:89:
         ba:76:00:76:67:3c:84:22:e6:37:2e:b1:4a:57:ce:b8:ab:ca:
         75:37:ee:77:e6:e8:95:4e:da:a6:fe:d5:a8:d3:18:95:4d:1d:
         ac:10:ec:57:85:fc:3e:20:8c:4f:00:2d:08:20:02:53:13:5c:
         af:9e:e7:1b:ab:9e:bb:94:e6:8d:24:4e:b0:ed:81:b1:fd:a0:
         71:1f:c5:16:f1:fc:49:c6:e9:f6:52:7a:7a:b3:bf:28:02:90:
         4d:71:0a:de:99:3c:fa:fa:59:bb:08:d6:da:ba:ff:16:77:eb:
         71:4e:75:65:2e:fa:6d:bb:dd:a2:79:6d:31:06:1c:4f:3e:72:
         b8:34:d7:ce:ee:38:51:7b:60:3b:2b:af:75:4d:e7:f6:9d:e1:
         01:07:96:83:a6:6b:47:d5:94:ef:d0:be:98:0b:80:ce:0d:88:
         4b:2f:65:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org