Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2.cer
File:                     6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2.cer (raw, json)
Hash identifier:          BuqasbOeXZ5ZCS/BbntLSkTOUY8PCnIcP3lsNIoMk3M=
Subject key identifier:   6D:4A:90:70:C4:DB:0A:47:FF:D6:2E:0A:BD:47:B6:70:F8:5F:4B:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       449C03D107549F9353695A11FF488D9841B35B81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 23:29:25 +0000
Certificate not after:    Wed 19 Mar 2025 23:34:25 +0000
Subordinate resources:    AS: 270915
                          IP: 201.140.216.0/22
                          IP: 2804:7370::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9c:03:d1:07:54:9f:93:53:69:5a:11:ff:48:8d:98:41:b3:5b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 23:29:25 2024 GMT
            Not After : Mar 19 23:34:25 2025 GMT
        Subject: CN=6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:7a:40:63:4c:97:50:69:87:8a:71:d3:58:
                    b4:f1:d6:8c:ff:8d:a5:cc:06:eb:c9:3c:2e:09:6a:
                    20:ad:98:29:32:b0:28:91:4d:f7:c4:45:53:c4:53:
                    3b:2b:25:dc:f9:62:87:b0:29:65:61:85:9c:70:92:
                    15:4b:83:68:b6:1f:83:42:ec:f3:90:58:ea:bf:8c:
                    f2:23:b9:94:e2:48:87:78:9e:65:c1:26:74:bb:1c:
                    31:36:a1:a6:fa:fc:d2:12:ee:aa:10:bd:45:89:d8:
                    34:2e:17:76:0d:e1:d5:d8:5f:1f:11:f4:f0:12:c4:
                    06:e5:f6:18:e0:c8:81:eb:62:40:54:a5:bf:e6:92:
                    2d:cf:3a:e6:24:20:d2:5d:aa:7e:3c:5a:d0:79:3f:
                    cf:e6:10:0d:a7:0e:58:46:2e:c4:2d:86:0b:33:07:
                    49:bd:fb:f5:bd:bb:59:db:8b:49:a1:9d:c7:12:27:
                    b1:4a:d1:02:ed:8d:5b:f2:11:d4:05:c3:b0:b9:aa:
                    b9:b4:f1:84:a3:fb:c5:64:fc:d6:af:ea:00:98:6e:
                    be:27:22:bf:ac:d3:7e:ea:92:ba:64:0d:0a:03:b7:
                    23:f0:d2:6f:0d:34:96:dd:fc:c4:ee:54:92:51:fb:
                    2a:ff:34:f1:f7:a9:ec:2f:5d:d2:c8:09:17:ce:71:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:4A:90:70:C4:DB:0A:47:FF:D6:2E:0A:BD:47:B6:70:F8:5F:4B:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.216.0/22
                IPv6:
                  2804:7370::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270915

    Signature Algorithm: sha256WithRSAEncryption
         54:bb:25:e7:01:dc:fd:65:56:ea:e8:39:ba:99:3e:6a:01:37:
         ac:ba:91:8a:f5:5c:33:54:af:83:56:3d:61:6e:7a:48:85:86:
         9d:bf:e5:0c:fb:36:04:bd:20:15:65:ec:41:db:cf:3c:fa:5b:
         0e:65:59:00:7e:88:a1:4f:31:d0:ae:bd:10:6c:a8:dd:e1:73:
         9b:46:e2:04:eb:02:5c:02:24:a0:bb:00:34:8d:b1:97:e9:4b:
         06:ac:de:46:00:36:3a:b3:1c:6f:5e:c9:93:20:46:9d:83:f5:
         1c:9d:2e:7b:2a:2c:47:fd:0d:cb:d7:10:4b:76:b6:69:90:52:
         e9:b4:48:fd:e3:65:91:71:da:30:cd:4c:b0:65:62:90:37:66:
         60:74:7d:5a:d8:7e:69:6f:98:19:60:9a:3b:4c:92:f0:f9:bd:
         48:2a:95:5b:eb:7c:30:82:ec:6e:d4:89:f3:a8:91:78:7f:49:
         40:bb:f6:6f:32:50:84:00:9d:34:9f:4a:6d:23:b2:f1:98:fa:
         d4:a0:f4:ac:c5:ef:cc:b3:f3:66:ba:92:96:55:40:bc:75:6f:
         7b:ac:45:d6:d8:09:43:ab:31:f0:1e:da:13:eb:5d:4e:c6:40:
         86:2a:1c:d5:93:7d:7f:eb:c5:60:3e:8f:5c:85:89:e6:91:b9:
         87:d9:8b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org