Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6DC8917D227E7E894EFC1D40BF393EEBD17CD397.cer
File:                     6DC8917D227E7E894EFC1D40BF393EEBD17CD397.cer (raw, json)
Hash identifier:          JZ3k7UeKpd5uzdzBI2My2yGEbm04GxzQoPom/NHUwNk=
Subject key identifier:   6D:C8:91:7D:22:7E:7E:89:4E:FC:1D:40:BF:39:3E:EB:D1:7C:D3:97
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E1FAAB134E257802CDC7B233C8D6F1E9E7C1B52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/6DC8917D227E7E894EFC1D40BF393EEBD17CD397.mft
caRepository:             rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 20:33:01 +0000
Certificate not after:    Wed 25 Dec 2024 20:38:01 +0000
Subordinate resources:    AS: 265356
                          IP: 168.181.124.0/22
                          IP: 2804:2ea0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1f:aa:b1:34:e2:57:80:2c:dc:7b:23:3c:8d:6f:1e:9e:7c:1b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 20:33:01 2023 GMT
            Not After : Dec 25 20:38:01 2024 GMT
        Subject: CN=6DC8917D227E7E894EFC1D40BF393EEBD17CD397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:10:c9:a5:e4:9e:f1:7d:a7:f7:1f:28:18:
                    bd:97:e7:54:f3:04:a1:a8:44:f9:2c:93:5d:fb:c9:
                    20:ee:65:6e:61:8c:16:5a:b2:a1:19:c9:82:54:a6:
                    e2:3e:4a:fc:89:37:d3:23:91:67:a7:53:2e:9d:98:
                    02:51:84:5e:07:44:34:ce:fe:fe:3e:37:8c:d0:4a:
                    99:34:3d:97:b3:ac:52:66:13:a3:6e:cf:0a:fc:6b:
                    fe:a3:47:c0:b2:cd:3b:24:8c:65:36:29:ac:52:1f:
                    2f:64:82:d0:f2:45:d7:cd:be:7b:29:73:b8:e6:1f:
                    9d:7e:7b:e7:02:e2:2e:cb:41:68:8d:09:10:8d:31:
                    29:4b:82:4a:05:25:39:79:a2:bd:56:55:17:dd:d7:
                    b9:93:c1:d6:29:10:f4:e9:7d:1a:1a:8d:33:60:be:
                    94:7c:64:aa:09:a7:bf:f4:08:ab:36:90:af:80:44:
                    b8:fc:c0:42:81:de:b4:67:af:44:9d:69:5a:98:b3:
                    ce:22:4b:bf:0f:55:50:06:15:6d:11:bb:6e:83:91:
                    69:87:e5:1a:31:45:09:48:c4:19:79:30:8d:61:91:
                    1f:65:ba:d5:92:16:c2:b2:6c:cb:ae:38:09:e3:84:
                    01:20:e6:33:69:fd:b7:74:8a:eb:1f:ed:1e:34:e4:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:C8:91:7D:22:7E:7E:89:4E:FC:1D:40:BF:39:3E:EB:D1:7C:D3:97
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/6DC8917D227E7E894EFC1D40BF393EEBD17CD397.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.124.0/22
                IPv6:
                  2804:2ea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265356

    Signature Algorithm: sha256WithRSAEncryption
         57:25:49:0a:33:89:7a:ed:9e:08:d1:df:1b:5b:7f:50:0a:73:
         fa:a3:85:3b:f2:20:2a:e0:c3:80:d6:32:10:d3:00:16:08:4b:
         80:bc:f5:d5:e7:4e:5b:c9:49:fe:0a:86:1e:45:8c:af:46:15:
         23:84:0c:70:67:e1:09:c9:b4:e8:c4:5f:7d:f4:7d:d9:62:26:
         d9:de:16:f3:0a:f7:ae:68:c9:1a:3c:34:e2:ae:e9:a5:22:c7:
         ca:b1:3d:df:24:c2:28:32:61:d9:33:f9:e4:06:88:4a:14:ff:
         75:f3:52:d4:6e:d1:98:7c:9f:5d:27:68:e1:61:8f:d1:04:0f:
         ab:33:ea:47:f1:11:ad:7f:a9:1b:95:fd:8e:bc:9e:0c:06:65:
         ae:e3:d6:6c:5d:c3:71:3c:eb:27:5d:5e:31:fd:2d:12:ef:f9:
         a6:0c:de:b3:f4:e4:dc:31:76:0d:0c:e5:a7:05:14:f5:e4:0e:
         88:c8:9a:33:db:ce:46:80:ba:6e:30:3f:92:f7:e8:bc:87:a6:
         ef:ce:a1:f0:bf:2b:7a:a4:5a:21:64:9b:9e:2f:ec:e0:0d:9b:
         bc:ff:fe:89:28:34:3b:bf:78:ef:bf:dc:72:9e:24:e6:fb:94:
         51:f8:ae:b0:dd:f7:ea:14:a3:ce:9a:77:99:f1:24:21:c0:bb:
         13:17:7c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org