Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6DA84A308BB4C2843AD410FF80B4472A4A8E3463.cer
File:                     6DA84A308BB4C2843AD410FF80B4472A4A8E3463.cer (raw, json)
Hash identifier:          UbdUr/9C2t/Mm9G/icB5gsMGJ2aibX2kenqxdh8Z34A=
Subject key identifier:   6D:A8:4A:30:8B:B4:C2:84:3A:D4:10:FF:80:B4:47:2A:4A:8E:34:63
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C7307D9FD9AC846C2A206C3A02598421E06B698
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8fVSp1TdPasD8cqkns8b7rRhT4vk6ZyCuKcxFpvFVYvj/0/6DA84A308BB4C2843AD410FF80B4472A4A8E3463.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8fVSp1TdPasD8cqkns8b7rRhT4vk6ZyCuKcxFpvFVYvj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Jan 2023 22:54:52 +0000
Certificate not after:    Tue 16 Jan 2024 22:59:52 +0000
Subordinate resources:    AS: 53173
                          IP: 177.44.176.0 -- 177.44.190.255
                          IP: 2804:e4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:73:07:d9:fd:9a:c8:46:c2:a2:06:c3:a0:25:98:42:1e:06:b6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 22:54:52 2023 GMT
            Not After : Jan 16 22:59:52 2024 GMT
        Subject: CN=6DA84A308BB4C2843AD410FF80B4472A4A8E3463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e7:13:d1:80:dc:ec:95:68:7f:93:38:27:68:
                    bf:96:f2:c0:89:ac:19:41:60:21:9c:d2:de:b5:72:
                    36:82:53:f8:fb:67:6e:7a:53:46:2d:d2:39:0e:b3:
                    10:fd:fe:da:5d:f1:3d:cf:03:f1:5d:9e:08:3a:37:
                    17:52:53:87:d0:8d:db:fe:e2:e5:4f:1b:f6:0a:ea:
                    4e:8e:20:3c:db:82:c6:58:c0:60:cf:1c:bc:71:62:
                    a4:65:93:b0:10:fc:f2:0d:d1:3d:42:7b:5b:44:7d:
                    4e:81:66:63:c1:86:53:6a:c4:26:7c:1c:b1:11:f7:
                    3a:02:3d:8a:a7:cb:9f:a4:3a:9b:c2:24:05:dd:99:
                    58:c8:03:73:9d:31:e9:c9:f0:4e:7c:83:e6:2f:f7:
                    9b:67:2c:ba:2d:bf:2d:be:a7:5f:2d:85:b7:21:6f:
                    e5:ee:30:5a:1f:6d:ea:a1:a0:1d:4f:21:76:e0:56:
                    12:96:15:56:7d:20:71:86:b1:b7:63:fe:78:35:5f:
                    b2:1f:09:c4:ab:b9:4e:4c:97:93:64:b3:76:f4:9a:
                    78:bf:7e:66:2a:20:b7:aa:62:02:ed:cc:0d:e0:0c:
                    ea:f3:8c:a4:21:de:83:02:29:d7:56:08:53:12:ac:
                    88:8c:0e:89:f8:98:b8:51:3d:8e:72:cf:ee:3a:5b:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:A8:4A:30:8B:B4:C2:84:3A:D4:10:FF:80:B4:47:2A:4A:8E:34:63
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8fVSp1TdPasD8cqkns8b7rRhT4vk6ZyCuKcxFpvFVYvj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8fVSp1TdPasD8cqkns8b7rRhT4vk6ZyCuKcxFpvFVYvj/0/6DA84A308BB4C2843AD410FF80B4472A4A8E3463.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.176.0-177.44.190.255
                IPv6:
                  2804:e4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53173

    Signature Algorithm: sha256WithRSAEncryption
         44:49:9b:d6:23:f0:30:47:f4:56:ff:0d:5a:2c:f3:3a:37:9b:
         5c:8d:52:9b:70:09:f8:c1:54:b4:9c:49:33:60:94:ba:ce:be:
         ec:88:88:d3:13:f8:bf:08:a0:b4:42:37:5d:c1:d6:ce:35:39:
         05:93:1c:00:ef:dd:b0:b0:08:12:7f:78:19:8f:fa:a5:74:3e:
         db:6f:d0:06:c3:a7:72:a4:29:fd:b6:ef:76:e7:a3:b0:18:2b:
         4a:a6:3e:55:d8:4a:46:69:cf:4d:c7:d1:d3:f5:7a:a0:a7:c5:
         73:86:4a:3c:ce:e7:df:bf:be:f8:53:61:6c:1a:09:22:ba:de:
         eb:10:81:42:bc:b6:b5:39:7d:1e:25:ee:90:df:ff:51:93:28:
         f0:2d:42:6e:7f:09:0e:6d:3f:d2:fc:dd:5e:b7:70:07:80:5d:
         5c:cd:91:38:13:d6:f1:67:1f:ec:30:c0:13:21:04:3c:e3:d5:
         38:ac:c0:e1:5b:11:34:cf:42:5c:c3:cd:e2:48:79:16:b7:66:
         53:30:34:cb:c9:da:1a:1e:bb:b2:4c:3f:3b:b5:fe:bd:4e:16:
         d9:00:0f:ca:1f:42:0a:4a:f6:99:76:29:d0:9a:6d:ba:ff:e4:
         1f:2e:15:41:12:03:69:18:36:60:1e:0b:3d:e8:1c:10:30:60:
         45:e8:86:c0
-----BEGIN CERTIFICATE-----
MIIGGDCCBQCgAwIBAgIUPHMH2f2ayEbCogbDoCWYQh4GtpgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMTcyMjU0NTJaFw0yNDAxMTYyMjU5NTJaMDMxMTAvBgNV
BAMTKDZEQTg0QTMwOEJCNEMyODQzQUQ0MTBGRjgwQjQ0NzJBNEE4RTM0NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75xPRgNzslWh/kzgnaL+W8sCJ
rBlBYCGc0t61cjaCU/j7Z256U0Yt0jkOsxD9/tpd8T3PA/Fdngg6NxdSU4fQjdv+
4uVPG/YK6k6OIDzbgsZYwGDPHLxxYqRlk7AQ/PIN0T1Ce1tEfU6BZmPBhlNqxCZ8
HLER9zoCPYqny5+kOpvCJAXdmVjIA3OdMenJ8E58g+Yv95tnLLotvy2+p18thbch
b+XuMFofbeqhoB1PIXbgVhKWFVZ9IHGGsbdj/ng1X7IfCcSruU5Ml5Nks3b0mni/
fmYqILeqYgLtzA3gDOrzjKQh3oMCKddWCFMSrIiMDon4mLhRPY5yz+46WzslAgMB
AAGjggMiMIIDHjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRtqEowi7TChDrU
EP+AtEcqSo40YzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84ZlZTcDFUZFBhc0Q4Y3FrbnM4YjdyUmhUNHZrNlp5Q3VL
Y3hGcHZGVll2ai8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84ZlZTcDFUZFBhc0Q4Y3FrbnM4YjdyUmhUNHZrNlp5Q3VL
Y3hGcHZGVll2ai8wLzZEQTg0QTMwOEJCNEMyODQzQUQ0MTBGRjgwQjQ0NzJBNEE4
RTM0NjMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA2BggrBgEFBQcBBwEB/wQnMCUwFAQCAAEwDjAMAwQEsSywAwQAsSy+MA0E
AgACMAcDBQAoBA5MMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDPtTANBgkqhkiG
9w0BAQsFAAOCAQEAREmb1iPwMEf0Vv8NWizzOjebXI1Sm3AJ+MFUtJxJM2CUus6+
7IiI0xP4vwigtEI3XcHWzjU5BZMcAO/dsLAIEn94GY/6pXQ+22/QBsOncqQp/bbv
duejsBgrSqY+VdhKRmnPTcfR0/V6oKfFc4ZKPM7n37+++FNhbBoJIrre6xCBQry2
tTl9HiXukN//UZMo8C1Cbn8JDm0/0vzdXrdwB4BdXM2ROBPW8Wcf7DDAEyEEPOPV
OKzA4VsRNM9CXMPN4kh5FrdmUzA0y8naGh67skw/O7X+vU4W2QAPyh9CCkr2mXYp
0Jptuv/kHy4VQRIDaRg2YB4LPegcEDBgReiGwA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org