Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688.cer
File:                     6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688.cer (raw, json)
Hash identifier:          9rfW7UOe0aAgEhOIAiu6VSGMgHEfRsyzP/baG7kq7Yk=
Subject key identifier:   6E:4B:E4:A4:A4:11:64:49:B4:E3:8E:F0:9B:2B:E4:37:6E:BF:F6:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       300CD181ADC3094CA8496F2E3F0B90FD3C8F96FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/0/6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Nov 2023 15:35:07 +0000
Certificate not after:    Wed 30 Oct 2024 15:40:07 +0000
Subordinate resources:    AS: 265037
                          IP: 170.84.220.0/22
                          IP: 2804:31c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0c:d1:81:ad:c3:09:4c:a8:49:6f:2e:3f:0b:90:fd:3c:8f:96:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  1 15:35:07 2023 GMT
            Not After : Oct 30 15:40:07 2024 GMT
        Subject: CN=6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:42:e2:21:e2:9e:d1:de:a8:3c:14:15:42:bb:
                    27:bc:7e:d3:a4:4e:aa:58:60:3e:bd:86:6f:34:c5:
                    03:08:a4:a1:49:7a:4f:7c:bf:7b:b7:4b:29:89:8e:
                    7b:a6:ef:1f:08:5a:8e:f0:29:41:7e:d5:c8:84:35:
                    65:d1:dd:88:62:76:23:87:cb:4d:b3:b1:b5:8e:ff:
                    43:5d:cf:6a:46:e3:c4:95:23:71:10:b4:2b:21:e1:
                    11:f9:c2:44:08:db:51:9f:39:36:e0:7c:a9:f7:3d:
                    d0:e8:ec:aa:ff:51:25:55:80:16:60:4f:7f:1b:63:
                    47:6c:f0:af:b1:df:57:a4:15:5e:5a:95:a1:31:54:
                    3b:e9:38:3b:f6:ac:23:d1:b3:8b:62:f3:98:95:1d:
                    b0:0d:70:28:63:ed:eb:7e:7b:fe:dc:50:4f:85:5d:
                    d9:5d:f7:6f:eb:f9:4b:66:53:1b:d7:64:cf:1b:b4:
                    a2:68:43:d9:3c:fd:d0:0f:21:c7:2e:41:44:63:34:
                    6f:df:d9:ad:49:ba:66:bf:1e:12:1a:cf:2a:a9:6b:
                    90:e8:ae:e4:18:70:bb:e2:5e:d9:ed:79:9a:af:00:
                    96:18:0a:83:de:b4:56:20:28:b0:a0:5d:a9:33:06:
                    70:9f:ee:ba:05:c8:66:d1:3c:4a:0f:d1:9a:f2:0f:
                    a1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:4B:E4:A4:A4:11:64:49:B4:E3:8E:F0:9B:2B:E4:37:6E:BF:F6:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/0/6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.220.0/22
                IPv6:
                  2804:31c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265037

    Signature Algorithm: sha256WithRSAEncryption
         6b:fd:c1:c0:f5:58:f6:53:5f:a2:e9:c9:4b:26:c1:63:76:85:
         13:62:56:7c:94:d0:c1:04:09:b1:5c:e3:0b:f4:0a:48:d8:03:
         63:d6:b8:f4:01:95:7a:0d:1b:45:64:ff:4c:03:07:26:3e:6f:
         09:6b:3b:7e:1e:db:0d:4a:09:23:24:eb:17:6f:dc:70:26:1e:
         d0:69:d5:a6:68:4c:02:1a:6a:07:ab:38:ad:b8:9d:07:a8:4b:
         3b:56:07:ae:b5:2d:ad:9e:0b:80:08:3c:89:45:02:6a:40:a0:
         e5:95:79:9c:cb:d1:bd:b4:d9:36:1e:3b:56:37:4d:19:82:aa:
         39:8c:bb:4c:67:58:95:33:ae:27:5a:4f:d5:3b:d0:eb:e4:e0:
         23:04:b9:30:18:ba:68:ab:c9:e4:e5:f0:90:96:07:ed:29:d4:
         10:00:00:c1:07:60:e2:99:0c:5a:fd:78:c1:7e:b7:47:1b:96:
         c8:1d:2a:75:e7:d8:6d:66:3b:4b:c4:de:b0:18:ad:e0:c9:00:
         58:ab:87:3a:ef:2c:e3:84:77:21:19:c1:1a:2f:e1:33:fb:36:
         a8:d4:5b:c3:77:a7:65:07:70:a9:83:3b:51:2c:c9:06:5e:9e:
         6e:a7:ad:8c:61:00:d1:62:55:92:86:da:7c:2c:b0:97:38:8b:
         f6:e9:c0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org