Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6F63D81A17E08120A679427E9F41DB2824A5A256.cer
File:                     6F63D81A17E08120A679427E9F41DB2824A5A256.cer (raw, json)
Hash identifier:          B4LEKX6YNdUqUMxBkYJ+cG1OjWEDp2XvtIAMQ1hsSnA=
Subject key identifier:   6F:63:D8:1A:17:E0:81:20:A6:79:42:7E:9F:41:DB:28:24:A5:A2:56
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       49C2DBF28F34F690F82B36999AAA0B7ABA107BC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/6F63D81A17E08120A679427E9F41DB2824A5A256.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 13:12:07 +0000
Certificate not after:    Fri 28 Feb 2025 13:17:07 +0000
Subordinate resources:    AS: 271437
                          IP: 45.225.80.0/22
                          IP: 2804:7b88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c2:db:f2:8f:34:f6:90:f8:2b:36:99:9a:aa:0b:7a:ba:10:7b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 13:12:07 2024 GMT
            Not After : Feb 28 13:17:07 2025 GMT
        Subject: CN=6F63D81A17E08120A679427E9F41DB2824A5A256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:da:df:01:87:26:4c:b4:5f:53:62:4d:90:74:
                    b0:83:d8:ea:ea:cc:c3:e8:1d:13:67:96:29:8d:cf:
                    4e:1a:1f:21:0e:84:23:9c:c0:cb:5b:5a:c5:76:3f:
                    6d:1d:7f:ae:10:74:28:2d:74:37:b2:7e:f9:a8:31:
                    ef:01:8b:f4:51:77:f6:a4:ea:f9:9c:b1:c2:7c:3c:
                    e6:e2:0c:52:45:cb:3f:25:8b:51:22:2f:5e:07:14:
                    80:26:1c:5d:57:71:87:d0:49:c2:94:df:1d:33:f0:
                    1c:ff:f4:0b:8a:98:0a:6d:cf:40:a2:3f:6f:d0:95:
                    bd:d6:49:7b:e6:96:d3:38:87:07:e2:43:b5:25:ea:
                    54:27:91:9a:66:4d:88:48:50:62:ba:b2:ad:bc:a5:
                    a4:4f:2f:2a:8d:20:e5:27:a0:99:eb:7c:45:3c:3a:
                    98:9c:b0:69:3d:26:50:c4:82:33:87:f9:62:b9:cb:
                    a6:95:cd:51:ae:43:b5:f7:ba:3b:3d:c1:5e:46:8c:
                    62:cc:5c:5e:f1:60:a0:6c:5a:2c:2f:a8:46:02:53:
                    0f:ce:00:bd:63:59:f8:d9:6e:98:2a:c6:d2:6a:ec:
                    e6:42:41:bb:43:24:44:b9:8f:46:bb:1e:69:04:25:
                    cf:b6:c4:c9:32:3f:86:ad:69:59:6b:1b:e4:76:af:
                    86:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:63:D8:1A:17:E0:81:20:A6:79:42:7E:9F:41:DB:28:24:A5:A2:56
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/6F63D81A17E08120A679427E9F41DB2824A5A256.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.80.0/22
                IPv6:
                  2804:7b88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271437

    Signature Algorithm: sha256WithRSAEncryption
         30:9e:86:c9:f5:19:51:f7:ec:d3:58:49:f7:8b:58:77:81:05:
         80:75:f2:e3:5c:db:04:ab:3d:6e:68:23:9a:8c:aa:84:2d:a1:
         4c:0a:35:a9:25:f2:6f:8c:ac:31:ee:49:68:3b:be:dc:b0:06:
         81:b6:9f:89:e1:97:1a:cd:1c:27:87:d2:64:29:e4:bc:50:4b:
         8a:f5:85:c6:1b:d7:ba:66:29:05:2f:62:b7:22:95:99:b9:bf:
         1a:d6:a2:ba:b0:b3:29:f5:18:d2:d4:b0:cc:67:99:a7:23:2f:
         79:ff:47:5c:6d:60:0e:12:f2:a8:8c:6e:42:7c:06:82:da:b0:
         bc:0c:4c:7d:7a:22:84:aa:16:e2:47:89:5e:ec:e3:35:a3:ea:
         50:7e:8e:56:14:5d:d0:d6:b9:c2:48:0e:01:a2:93:16:eb:74:
         36:14:ad:4c:ad:ac:36:22:6d:5a:4d:de:66:51:ff:04:fe:cc:
         7b:bd:eb:38:b4:30:5d:14:56:37:69:ac:fe:98:25:6f:c0:03:
         5e:de:b1:15:2a:fa:a3:76:b6:bf:5f:78:93:e2:96:6e:29:40:
         89:73:87:58:ed:e9:72:1d:31:3c:5c:77:9d:bb:6c:60:96:91:
         ac:79:10:b2:0c:8b:a5:a1:72:b0:1b:36:f8:af:0f:34:cf:a8:
         16:00:c1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org