Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.cer
File:                     6D4B6DB3E809FEF682676786BBDD422E949AA068.cer (raw, json)
Hash identifier:          zwnRAWGmqs/CQo5xsAu0FrEQt3qxMhGR+fGmveLOuC4=
Subject key identifier:   6D:4B:6D:B3:E8:09:FE:F6:82:67:67:86:BB:DD:42:2E:94:9A:A0:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       09F34D99C793F18B32FD192093F7D2E25CAB6814
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Nov 2023 00:18:57 +0000
Certificate not after:    Wed 06 Nov 2024 00:23:57 +0000
Subordinate resources:    AS: 264349
                          IP: 131.108.88.0/22
                          IP: 168.194.208.0/22
                          IP: 2804:1d20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f3:4d:99:c7:93:f1:8b:32:fd:19:20:93:f7:d2:e2:5c:ab:68:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  8 00:18:57 2023 GMT
            Not After : Nov  6 00:23:57 2024 GMT
        Subject: CN=6D4B6DB3E809FEF682676786BBDD422E949AA068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:7a:1b:af:6f:ab:ed:c5:68:12:9e:a7:18:
                    14:33:7c:12:65:54:b9:fb:46:f3:6f:f2:59:35:83:
                    96:b8:89:7d:28:3b:45:01:87:d1:94:0e:a7:29:47:
                    48:e6:54:d1:98:b2:5d:57:a6:fc:6d:b9:67:f0:66:
                    df:08:d1:e2:ef:e3:07:b2:7f:ff:49:2e:c3:86:f3:
                    f6:c9:14:c9:09:ae:f8:25:60:43:8a:c9:5a:83:a2:
                    f2:3f:53:10:04:8a:2d:77:ab:e1:f6:19:88:c8:09:
                    c7:1e:69:5a:42:ef:2c:7f:00:cf:cb:8d:0f:31:e0:
                    14:35:50:87:5c:4a:a7:08:50:da:ab:fd:4a:67:d0:
                    55:fb:85:76:22:75:12:cb:28:a5:ba:c2:2c:db:10:
                    23:a6:cc:72:19:3c:20:c8:14:55:6d:d7:68:b4:78:
                    6c:c9:9b:6c:70:a1:e6:92:08:f1:f7:ec:03:9e:a7:
                    e6:6a:66:c4:55:5a:fc:6d:a4:43:a3:7f:0c:a7:e8:
                    8a:92:26:e0:9a:82:e9:ab:d6:58:33:f6:9a:1c:1e:
                    88:3e:5b:0f:5e:f0:86:93:47:bd:75:42:e2:06:a0:
                    12:b5:90:eb:9b:ce:72:32:8a:2e:f1:f9:04:bc:64:
                    51:d7:0d:f5:92:ba:c9:db:5c:9b:27:f1:e4:aa:cf:
                    88:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:4B:6D:B3:E8:09:FE:F6:82:67:67:86:BB:DD:42:2E:94:9A:A0:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.88.0/22
                  168.194.208.0/22
                IPv6:
                  2804:1d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264349

    Signature Algorithm: sha256WithRSAEncryption
         82:80:3a:40:14:a2:60:cf:c8:ca:6d:f4:15:4f:34:c8:47:27:
         ac:5a:83:3c:03:1e:f0:a4:b9:10:c1:97:0b:c2:59:70:8e:34:
         de:d5:11:47:35:cb:60:71:c9:98:b1:7b:89:93:29:df:ae:63:
         e4:ec:2f:e9:21:ee:e8:fd:01:63:22:46:9b:db:66:67:f3:5c:
         f2:a5:7e:b8:94:3e:df:2a:89:aa:18:5b:24:38:70:b4:30:9e:
         23:c8:f9:5e:f9:5e:d3:f1:d5:4a:c1:f0:39:37:69:e6:1b:7a:
         67:54:12:da:80:b4:a8:09:c0:fc:57:85:94:e8:19:f0:79:a5:
         6e:ba:a8:48:4c:a4:64:a0:25:56:c1:83:d1:56:ba:61:14:12:
         94:fb:fd:bc:7c:19:b5:d7:67:b3:dc:a7:e9:c7:7f:21:e4:f9:
         fd:77:93:ab:a8:ca:33:01:b5:45:c6:f8:25:7e:ff:ec:82:ec:
         0d:0c:be:9c:93:33:0d:e8:cf:ee:1b:c1:c1:89:8a:eb:a5:4f:
         3a:cb:6a:d9:b0:9d:68:9a:cf:8f:3a:f7:d1:8f:63:b7:3a:fc:
         41:ae:bf:56:73:8b:e9:fe:e3:ca:af:29:d6:5d:74:47:e7:b7:
         d9:95:c4:17:3d:e9:fb:75:4f:a9:a6:ef:84:8a:5f:aa:2b:d8:
         e9:3c:08:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org