Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84.cer
File:                     6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84.cer (raw, json)
Hash identifier:          GN7i1X+rQ0iRf4haWBNuuUpb9/v8QYZgmerMRYbVuwM=
Subject key identifier:   6F:3C:B5:D7:68:70:1F:AF:EA:70:64:BE:F7:BD:95:14:1D:F9:CA:84
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01429E4B43BD23819926800315BC3EF94DE78362
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0/6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 28 Oct 2023 01:40:54 +0000
Certificate not after:    Sat 26 Oct 2024 01:45:54 +0000
Subordinate resources:    AS: 268200
                          IP: 45.235.44.0/22
                          IP: 177.39.104.0/22
                          IP: 2804:4d80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:42:9e:4b:43:bd:23:81:99:26:80:03:15:bc:3e:f9:4d:e7:83:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 28 01:40:54 2023 GMT
            Not After : Oct 26 01:45:54 2024 GMT
        Subject: CN=6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1e:3c:d9:34:b1:47:4b:d0:64:b7:aa:b5:d7:
                    62:28:ef:71:3c:59:cf:42:b3:e1:21:f0:97:69:2d:
                    97:f9:db:c0:3e:e2:12:5e:5f:05:6d:69:40:87:10:
                    a5:3c:97:52:27:9b:db:30:41:05:ec:fc:9a:54:d4:
                    91:b6:05:28:5b:0d:a7:c8:4c:32:7c:60:91:ad:b2:
                    b0:1d:35:36:eb:93:dd:e6:b5:1e:ce:7c:89:97:fe:
                    58:51:43:d6:f0:be:5b:a8:77:cc:34:2f:20:a5:ea:
                    08:a7:5e:0f:80:95:4c:72:3d:60:ce:b8:21:8c:ea:
                    a1:09:1c:0b:29:d3:84:e8:b9:8b:8b:1a:32:4d:53:
                    a1:3b:3a:8a:ee:21:1f:e2:eb:ef:17:e1:af:ac:43:
                    85:e1:d2:9b:49:59:ed:29:b4:76:e6:2c:bb:8b:9c:
                    4e:87:d2:b8:f4:1d:06:4f:d9:2c:0c:4b:9d:bb:ea:
                    11:bf:61:50:b3:b4:4b:10:db:65:4f:fa:0f:e7:03:
                    f0:7c:d1:bb:29:79:6c:72:0b:6e:75:09:6b:c1:15:
                    88:ef:27:5e:7e:7c:2d:2d:a9:21:f4:99:4f:d8:57:
                    74:e7:c4:6c:01:41:b0:b0:b4:dd:ee:2a:80:c3:e3:
                    56:db:11:7f:03:4e:3c:89:b0:d5:6d:8c:cc:e0:28:
                    13:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:3C:B5:D7:68:70:1F:AF:EA:70:64:BE:F7:BD:95:14:1D:F9:CA:84
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0/6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.44.0/22
                  177.39.104.0/22
                IPv6:
                  2804:4d80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268200

    Signature Algorithm: sha256WithRSAEncryption
         b0:d0:16:13:79:20:29:c7:29:90:e2:59:a3:31:29:26:d8:1b:
         c3:33:ec:09:72:e4:07:a7:2a:eb:b6:49:20:1a:e9:2e:bf:8e:
         f8:a9:bb:93:10:aa:35:fb:48:fb:72:38:7f:da:41:10:c5:93:
         93:1d:5c:4a:cb:65:40:79:7a:7b:d8:13:1b:81:21:07:44:8f:
         97:ad:4e:c7:63:58:85:ab:7b:4a:99:2e:9b:90:5c:b2:a1:4b:
         ef:82:32:d7:9b:75:78:62:22:e0:51:ba:03:52:04:f6:2e:94:
         49:3c:c1:3f:0d:54:8d:df:d4:14:ba:17:7b:f3:82:b3:52:a6:
         35:a0:7f:79:11:bb:d3:1e:94:9d:1a:af:b0:82:85:94:ba:3c:
         ae:18:fe:42:e2:57:03:19:96:20:54:ed:27:7b:31:17:0e:f9:
         d5:9d:b3:63:db:49:39:01:9c:43:17:c1:6c:92:9b:a7:93:79:
         12:80:65:21:9f:cd:57:21:f2:87:ae:bb:51:71:68:dc:7e:c3:
         17:d7:36:83:fd:9e:6d:48:e5:e3:84:55:6d:f5:e9:8d:83:d1:
         0c:85:59:10:8a:b0:68:4f:1f:f2:8f:7d:f8:39:3e:b5:66:f7:
         d8:7d:b9:5e:21:68:05:56:71:e4:79:44:19:d8:0a:9d:26:69:
         78:a7:3e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org