Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6D10BF8C72B51E8748269CFB0F70C72D345AB1C9.cer
File:                     6D10BF8C72B51E8748269CFB0F70C72D345AB1C9.cer (raw, json)
Hash identifier:          X9qVxIst0KoXHaEAS62dcrMDBgWeGstlFT4VwOAZ+b0=
Subject key identifier:   6D:10:BF:8C:72:B5:1E:87:48:26:9C:FB:0F:70:C7:2D:34:5A:B1:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23AED4B169863C3D2F8E1E1AA567A2E5CD593C0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/6D10BF8C72B51E8748269CFB0F70C72D345AB1C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Aug 2023 12:07:03 +0000
Certificate not after:    Fri 23 Aug 2024 12:12:03 +0000
Subordinate resources:    AS: 266166
                          IP: 72.44.20.0/22
                          IP: 2804:3bb4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ae:d4:b1:69:86:3c:3d:2f:8e:1e:1a:a5:67:a2:e5:cd:59:3c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 25 12:07:03 2023 GMT
            Not After : Aug 23 12:12:03 2024 GMT
        Subject: CN=6D10BF8C72B51E8748269CFB0F70C72D345AB1C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7f:0c:8a:6e:ba:15:d7:30:5c:1b:a1:11:f7:
                    8e:8b:9f:23:72:6e:38:5e:5b:b0:07:a0:58:a1:5d:
                    98:d7:27:b9:7f:06:b7:b3:4d:1e:70:a0:de:fa:36:
                    dc:ec:29:97:68:d2:3f:2e:96:1b:c6:b0:31:79:d5:
                    14:83:ed:91:2d:3f:59:1c:32:8e:fb:e2:87:ff:a3:
                    0b:8e:9f:4f:63:fe:d3:63:31:6a:dd:56:89:ae:32:
                    05:cd:2a:1f:31:c4:1d:f8:f3:8c:cd:b3:52:5a:66:
                    99:c5:6b:c8:a6:8b:ac:4b:cb:91:dd:f5:a9:17:94:
                    46:2a:59:10:df:ec:dd:0c:6b:3f:12:c5:a1:df:c8:
                    aa:a7:a0:94:f4:73:83:68:52:75:e9:44:6c:55:92:
                    d0:15:8a:9e:4d:55:f0:26:c8:3e:c2:6b:fd:f6:30:
                    dd:28:97:99:1f:46:37:d0:47:25:4f:45:ae:77:4a:
                    6b:00:57:1f:60:56:33:04:31:1d:23:ab:29:73:c9:
                    98:e5:c7:d8:41:cf:3d:81:0b:47:b9:04:79:24:e5:
                    46:53:b5:a1:fa:8d:82:8d:d8:eb:78:aa:53:a2:cf:
                    a9:c6:75:b1:07:7e:8c:51:95:e7:2d:8e:75:21:ac:
                    e7:e1:35:0d:3e:24:51:ff:1d:16:c5:bd:69:b5:b3:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:10:BF:8C:72:B5:1E:87:48:26:9C:FB:0F:70:C7:2D:34:5A:B1:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/6D10BF8C72B51E8748269CFB0F70C72D345AB1C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.20.0/22
                IPv6:
                  2804:3bb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266166

    Signature Algorithm: sha256WithRSAEncryption
         0b:16:89:1e:07:0f:a7:a3:85:95:37:84:f9:e9:be:05:6f:70:
         62:97:b4:3a:68:19:a6:37:11:42:82:c3:39:45:44:71:a5:c2:
         66:00:98:4b:70:02:5f:06:34:aa:fe:91:18:1c:41:dc:c5:04:
         95:d2:bb:09:c6:bb:de:79:4e:5a:cf:e2:58:84:b0:0e:dd:1f:
         93:8c:27:35:36:84:e0:95:33:c1:cd:5a:9e:07:6a:62:34:ee:
         6a:b2:af:28:df:9f:e6:77:a7:41:2e:e4:52:d3:a4:10:88:3f:
         46:31:a0:a6:0d:30:9f:c0:8b:e3:7a:c6:a2:c0:e0:67:27:20:
         90:59:ab:cd:a8:0d:bb:86:e3:09:f4:1f:de:8f:0f:9f:1f:b7:
         28:56:da:13:00:3a:25:9d:b8:e7:97:01:23:ef:9f:08:75:be:
         99:a5:6b:1d:be:c3:ee:b6:a0:c8:7d:4f:8e:2c:ab:4e:23:b8:
         14:ab:6b:02:86:61:15:51:71:c9:b7:c0:96:21:3f:da:2e:58:
         97:69:bc:e1:a0:55:59:5f:48:80:37:52:f2:fe:18:43:6c:04:
         ea:84:86:83:88:e7:ea:2b:7e:08:f6:0a:3b:74:f2:ab:e8:1a:
         7a:97:83:9e:15:47:8f:fa:30:98:61:10:ff:7a:bd:23:cb:ae:
         63:5b:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org