Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.cer
File:                     6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.cer (raw, json)
Hash identifier:          ESzIL5f0JzJCnVpCIpQ3uci+k+fyGSlGS3Gsv1MkJRA=
Subject key identifier:   6C:D5:F4:EB:C3:30:7B:96:EF:5E:ED:66:AC:25:37:EC:E9:77:C9:B7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E0B2EE615FFF12718B1260EBA4EFC1C8256FB44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2024 15:25:08 +0000
Certificate not after:    Tue 18 Mar 2025 15:30:08 +0000
Subordinate resources:    AS: 266965
                          IP: 45.226.60.0/22
                          IP: 2804:460c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0b:2e:e6:15:ff:f1:27:18:b1:26:0e:ba:4e:fc:1c:82:56:fb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 19 15:25:08 2024 GMT
            Not After : Mar 18 15:30:08 2025 GMT
        Subject: CN=6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:1a:59:73:73:80:06:8d:c1:f1:a9:de:68:
                    3e:af:c7:67:f6:f2:2b:5c:13:17:44:39:59:42:78:
                    a6:9d:88:0a:d7:77:fa:3c:b1:92:d7:71:ae:a2:49:
                    eb:2e:26:b3:b3:26:11:9b:32:69:3f:03:37:b8:30:
                    9b:d8:5e:e6:18:a3:73:75:96:fa:5a:1b:1b:97:35:
                    41:16:5d:b8:f6:8e:c1:a6:ac:89:a1:44:34:94:32:
                    66:a9:f2:51:7f:34:34:1d:00:48:60:00:ee:17:dc:
                    9d:25:0f:0a:05:fd:b1:69:72:79:8d:1a:21:b8:01:
                    00:58:62:48:e6:05:ef:e5:a0:4f:4d:20:ec:d0:07:
                    1c:53:43:f7:4a:db:f4:02:01:67:b7:55:c3:00:d4:
                    f9:00:28:bf:32:73:e8:72:44:7f:c4:58:b1:35:48:
                    29:c8:18:10:7c:79:69:da:e1:8e:9d:31:bb:33:67:
                    c5:bd:28:37:36:9e:78:ca:07:81:d3:5e:1a:78:25:
                    29:61:b9:af:8f:ef:d1:eb:0e:1c:02:60:8b:8c:99:
                    fb:93:ed:5c:95:ef:51:43:c5:17:e0:f9:3f:0d:9a:
                    8f:d7:43:7b:ed:db:d8:eb:a4:ca:5e:b2:b6:0b:bf:
                    75:aa:db:56:4b:63:5b:09:9d:5b:67:e6:06:32:4f:
                    d0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:D5:F4:EB:C3:30:7B:96:EF:5E:ED:66:AC:25:37:EC:E9:77:C9:B7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.60.0/22
                IPv6:
                  2804:460c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266965

    Signature Algorithm: sha256WithRSAEncryption
         02:ee:0b:9d:67:7d:16:c3:8c:4b:03:2e:c2:14:c5:58:f5:67:
         44:32:51:cf:01:c4:c5:8a:9d:7d:73:43:7e:b9:4f:ac:55:22:
         09:81:40:76:ab:a1:73:38:c1:75:eb:c4:af:0d:f4:46:9b:99:
         35:a9:d0:27:b5:f8:6c:e3:0b:56:44:b7:77:35:10:8e:9e:0b:
         db:dd:5b:e0:17:c3:ca:92:41:65:0c:e8:ae:a2:57:fa:06:9b:
         0a:a1:81:5f:23:77:65:15:53:e9:61:8a:19:65:b6:7e:31:d1:
         88:3c:e3:da:8d:c9:a8:f7:15:68:79:3e:de:83:2c:bf:07:48:
         4f:cd:2d:ce:41:4a:73:29:7b:2f:04:0e:58:d5:a0:11:b0:9a:
         60:a3:17:70:0d:a1:27:fd:97:a3:f9:5b:37:16:72:35:e9:fb:
         60:f1:7f:aa:de:7c:5f:7d:f2:e9:3d:34:40:1b:e2:31:5e:41:
         27:e8:ca:0a:fa:0e:a2:10:a8:60:a6:ee:b1:d1:2e:75:7e:4b:
         59:e8:27:65:74:6e:dd:f3:09:a1:bd:f5:68:63:e2:d2:0c:29:
         71:c4:69:7d:5b:10:c1:10:d3:48:bd:1c:35:5d:d0:94:91:76:
         ab:f4:2e:f7:ed:0a:ff:17:d5:b0:fc:23:d0:8f:54:f4:cb:1f:
         6b:27:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org