Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer
File:                     6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer (raw, json)
Hash identifier:          wJ+mBQsqHV+9iSowERFzemuyUIqwvdRkoOcyHWSdYuA=
Subject key identifier:   6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4056C43B46AB8B37072D547E6AD8F9A41739DC25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 14:07:39 +0000
Certificate not after:    Thu 27 Jun 2024 14:12:39 +0000
Subordinate resources:    AS: 53086
                          IP: 187.33.192.0/20
                          IP: 2804:4fe4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:56:c4:3b:46:ab:8b:37:07:2d:54:7e:6a:d8:f9:a4:17:39:dc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 14:07:39 2023 GMT
            Not After : Jun 27 14:12:39 2024 GMT
        Subject: CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:0d:34:31:ee:ff:a1:a7:7b:50:59:67:61:
                    81:3e:0e:d5:e0:52:1d:ce:0a:8a:aa:35:0c:a2:f6:
                    1e:12:81:73:3d:38:47:6d:9b:40:56:fe:2e:43:22:
                    32:e0:66:a9:86:3e:5e:14:e5:f3:db:d5:dd:61:1d:
                    91:61:f5:f0:02:36:f0:55:91:b7:1d:55:b7:01:a1:
                    29:83:7b:60:16:df:04:12:de:c7:38:fe:54:fa:a9:
                    ca:5c:03:f4:61:f3:ff:b5:ee:ec:e4:ac:20:60:04:
                    6e:fd:62:13:d8:db:c0:3e:10:28:a9:03:43:84:88:
                    7a:5d:87:54:42:9c:4b:fc:ec:be:de:2c:1a:ca:77:
                    01:56:c8:f8:22:ca:56:9c:63:df:ab:3b:ab:ca:9b:
                    6c:de:98:ac:e2:23:88:a0:32:31:4a:a4:47:c0:5b:
                    0c:55:c0:80:b7:b1:3b:5a:4a:84:a9:cd:d5:35:a6:
                    27:43:4b:da:cc:3e:27:91:60:7a:55:dd:e5:4a:2a:
                    3f:4d:19:87:70:a7:6a:24:b0:8b:77:20:b1:3d:22:
                    7b:85:4c:6b:45:94:0f:27:a4:74:17:4d:85:72:b0:
                    4d:7f:2e:98:77:37:ab:65:82:9e:8e:a4:84:c3:3b:
                    8c:d8:d8:39:44:a0:4a:22:e8:93:8f:49:a0:f3:ed:
                    f0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.192.0/20
                IPv6:
                  2804:4fe4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53086

    Signature Algorithm: sha256WithRSAEncryption
         2d:45:f4:58:8f:ab:65:61:a2:c5:20:d8:0e:c0:70:f7:5a:f3:
         fb:12:24:49:37:b9:7f:79:1c:25:8e:99:1b:df:4f:ae:eb:f3:
         56:d4:23:0a:fa:2e:0f:30:b4:29:fb:91:89:9f:e7:e9:de:81:
         19:76:b0:b3:39:b2:9b:a3:80:0c:9c:04:a9:96:f6:de:16:47:
         f2:3c:60:c4:ef:f6:33:df:0c:58:99:b8:cd:73:26:09:d2:35:
         f9:2f:01:36:9e:9f:cc:f2:76:34:68:2a:5b:23:8f:f5:34:4a:
         93:bc:8b:02:9b:11:0d:13:0f:af:27:73:5a:e0:da:7f:54:79:
         9c:57:ff:93:bf:a4:44:d8:70:e3:cc:41:72:d4:06:1c:ac:ab:
         57:d5:73:8c:9c:38:0f:d9:26:26:65:36:d4:7f:ad:95:4e:43:
         7a:27:46:c2:bf:0b:b8:4f:95:b7:2a:29:44:8b:c6:ca:a9:c3:
         c1:d2:1c:cf:d9:b8:00:8d:62:2c:8c:ad:7e:93:06:31:e0:59:
         b4:46:b6:0f:ce:b8:6c:ec:76:0e:21:7e:ad:ae:6a:f6:11:37:
         9f:24:4c:bf:c6:8b:5f:0e:7f:d4:1b:68:1d:6e:ab:15:25:ec:
         8d:36:b6:ad:f6:da:f2:ba:7a:20:4f:88:0f:26:4d:83:35:34:
         f0:b6:e0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org