Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6E664DC7D9143D5BDBD1FA9ED7D637D9BA3F87D9.cer
File:                     6E664DC7D9143D5BDBD1FA9ED7D637D9BA3F87D9.cer (raw, json)
Hash identifier:          PqLtHONp/aNbXzd4T4efTApOnZ7DDa7RccMIy25kPek=
Subject key identifier:   6E:66:4D:C7:D9:14:3D:5B:DB:D1:FA:9E:D7:D6:37:D9:BA:3F:87:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4EE43C516AC75E60517B4F5342678A3861A1DCDF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0/6E664DC7D9143D5BDBD1FA9ED7D637D9BA3F87D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Jan 2024 01:00:02 +0000
Certificate not after:    Wed 08 Jan 2025 01:05:02 +0000
Subordinate resources:    AS: 262531
                          IP: 177.55.208.0/20
                          IP: 2804:5a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e4:3c:51:6a:c7:5e:60:51:7b:4f:53:42:67:8a:38:61:a1:dc:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 10 01:00:02 2024 GMT
            Not After : Jan  8 01:05:02 2025 GMT
        Subject: CN=6E664DC7D9143D5BDBD1FA9ED7D637D9BA3F87D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:85:b6:41:c9:1e:97:ab:80:f5:d9:ac:e4:
                    d8:e7:af:a2:83:00:74:d7:14:88:24:73:a9:20:dc:
                    61:ec:5d:a4:d4:11:08:26:18:ae:a7:71:da:8d:9e:
                    4c:97:5c:c8:06:0b:2c:be:35:b0:42:1f:16:25:9a:
                    f4:71:c1:ee:93:8d:da:4c:fe:0d:91:63:50:a0:1a:
                    ca:62:80:6d:5d:0d:c4:f7:0f:47:55:79:d2:05:a1:
                    bd:52:85:ed:d4:23:b0:db:9e:bb:6b:98:3c:7d:4b:
                    d1:32:93:31:99:24:b4:fb:73:a9:a8:4a:10:91:55:
                    c4:c5:56:51:5a:89:31:59:6a:69:85:0a:54:fd:08:
                    c7:0e:af:2e:cd:f4:33:71:16:ca:72:45:86:10:54:
                    af:54:d4:92:42:96:7a:2f:71:d3:47:c7:4c:ce:f6:
                    9c:70:22:b5:b0:42:f2:1b:7a:1d:9e:0f:a2:85:5f:
                    c9:91:a3:cf:90:b4:63:9f:b4:f7:d8:24:ed:d6:1d:
                    69:ac:44:a6:ab:84:9e:12:a4:94:11:c9:3b:88:65:
                    d3:7c:57:b9:d1:b6:24:fa:fc:41:08:68:7b:b1:17:
                    71:f1:ba:42:b8:bf:cc:de:f6:87:f3:11:3b:3f:c0:
                    50:54:0f:30:a5:7b:88:6c:94:74:43:c7:f9:3c:5f:
                    19:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:66:4D:C7:D9:14:3D:5B:DB:D1:FA:9E:D7:D6:37:D9:BA:3F:87:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0/6E664DC7D9143D5BDBD1FA9ED7D637D9BA3F87D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.208.0/20
                IPv6:
                  2804:5a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262531

    Signature Algorithm: sha256WithRSAEncryption
         a4:b8:a9:1f:a9:4c:e4:83:9e:c8:ed:c9:27:df:7a:24:65:a6:
         ed:0b:10:4f:48:40:05:40:90:58:96:fc:02:81:34:93:05:f5:
         57:52:35:97:41:02:80:78:49:f4:b0:ed:25:81:16:40:d9:76:
         ff:07:27:6c:e7:16:80:22:91:f2:0f:0c:84:ac:26:2f:83:f9:
         7c:14:54:21:a7:6f:01:95:3f:1f:bb:63:ed:29:49:ff:54:fd:
         25:63:af:f9:ce:cc:ee:76:07:41:24:0f:14:87:76:ed:ed:78:
         b2:2b:2a:6c:f7:06:ea:9e:9e:b0:6c:80:20:aa:50:bc:24:d8:
         68:d8:90:13:54:7f:c9:c4:53:9d:f0:34:92:50:40:e6:a2:74:
         83:0e:99:92:ff:1b:76:39:b2:07:02:37:82:6f:ab:c8:5c:b9:
         d5:01:75:ef:b3:36:b7:9f:a3:c6:0e:ef:8b:68:d9:84:7e:9a:
         e5:da:0b:0e:96:48:7e:59:26:12:35:8f:c7:5b:44:20:da:66:
         54:8c:a9:a5:f7:bc:0a:4b:f3:3e:5e:09:d5:89:93:c1:5c:f0:
         8b:ae:86:f4:62:a2:40:8f:d1:7f:ba:e0:06:59:8f:bb:74:b8:
         08:38:6e:cf:9b:a7:10:7b:57:dc:70:41:2e:73:cf:ad:bf:23:
         61:a0:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org