Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94.cer
File:                     6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94.cer (raw, json)
Hash identifier:          ApWhcFgS3vjiWKBl6wRFHDruVwe6gTnP+DzDMOzFw1M=
Subject key identifier:   6D:D9:87:D3:AF:42:05:F3:66:FB:D3:68:8D:8C:0E:A9:5D:DA:6F:94
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C736AE8C5C56540C04D2897225D4EA598EE6938
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 11:27:00 +0000
Certificate not after:    Thu 23 May 2024 11:32:00 +0000
Subordinate resources:    AS: 268977
                          IP: 45.176.248.0/22
                          IP: 2804:5d84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:73:6a:e8:c5:c5:65:40:c0:4d:28:97:22:5d:4e:a5:98:ee:69:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 11:27:00 2023 GMT
            Not After : May 23 11:32:00 2024 GMT
        Subject: CN=6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:70:db:60:4c:42:a3:9e:5b:8c:b0:44:0f:
                    31:5a:e0:47:1e:61:1e:a8:77:9c:b4:08:ee:b9:07:
                    20:56:d6:62:71:37:5b:8c:60:54:9c:e7:41:e9:91:
                    e9:df:e6:5f:36:8a:12:fe:d7:74:3e:b2:57:df:2f:
                    3e:06:80:d1:f3:49:af:17:21:ed:eb:05:42:4e:01:
                    17:d2:b0:17:4d:14:81:04:47:c9:f5:2e:8a:01:98:
                    85:e9:15:83:bf:27:12:a4:e4:6d:6a:a0:a6:09:28:
                    49:61:de:13:e4:bb:52:1a:f6:99:a5:61:4e:47:35:
                    1d:01:36:32:cf:c3:fd:4d:33:38:b4:b6:aa:55:76:
                    7c:cb:60:c8:ee:00:29:21:26:df:68:93:1f:7f:f7:
                    b9:cc:54:45:6d:b9:e4:fb:01:a1:57:64:57:58:28:
                    14:3d:4f:84:1c:e5:97:8f:3d:fe:51:95:63:33:d9:
                    a2:cf:2d:c3:2c:8c:9a:52:29:61:4d:cd:fe:c5:1e:
                    c3:ba:c4:ad:00:5d:f1:28:f0:35:64:0e:7b:52:6f:
                    ba:42:45:28:6f:b3:0f:b8:ab:8c:a1:42:8e:2a:41:
                    a5:43:9a:a6:9a:98:83:f9:81:64:ef:10:13:97:22:
                    4c:9f:3b:a5:74:0e:d5:8d:fa:57:f6:03:7a:ed:7f:
                    2b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:D9:87:D3:AF:42:05:F3:66:FB:D3:68:8D:8C:0E:A9:5D:DA:6F:94
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.248.0/22
                IPv6:
                  2804:5d84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268977

    Signature Algorithm: sha256WithRSAEncryption
         0c:34:d6:7d:57:cc:d8:f6:5c:65:f4:aa:d5:28:9a:53:ed:e3:
         38:02:d7:67:ce:14:a5:ef:04:1b:c8:eb:fa:dd:d6:ec:3d:8d:
         67:85:be:5e:a1:52:d7:7a:b8:7a:46:18:ea:32:83:a4:10:57:
         7c:90:3e:03:da:f5:6f:19:ac:62:cc:36:37:89:ff:76:e3:b9:
         95:e8:e2:9c:c0:6c:28:c7:1f:1e:af:d8:2b:54:fc:13:c8:19:
         d3:09:62:44:70:f7:1b:d6:f6:34:d3:e2:92:eb:0e:6d:33:c9:
         58:2a:3d:a9:cf:dc:df:db:c0:62:3c:df:54:f9:99:82:64:7e:
         99:c6:25:78:cb:c0:ca:c4:b9:9a:cb:59:53:e6:7f:cc:d2:05:
         54:ab:2c:43:cb:6f:67:8a:b0:40:f3:be:16:6f:bf:eb:4c:53:
         76:bb:d1:0d:e3:c0:9f:a0:d8:15:9d:25:15:72:1d:d6:7c:12:
         6a:4b:a4:e6:21:5a:85:9b:b9:4a:9c:b1:fc:8e:d5:ea:79:7c:
         35:d8:07:92:01:5d:cf:42:91:53:a3:15:ff:09:da:c5:42:64:
         a2:3d:b5:4f:49:6e:dd:2a:0c:b4:23:ff:0b:aa:ac:60:ae:c2:
         51:2b:e1:fd:b7:64:59:3f:9d:fd:fb:fc:83:a7:49:3a:6c:12:
         a5:0b:56:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org