Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2.cer
File:                     6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2.cer (raw, json)
Hash identifier:          K8weMORLiQwIk3B9lg/7e9VmWswrSt8hhnUEXCXEaHA=
Subject key identifier:   6F:6D:FF:0B:38:F4:FB:59:7A:0F:7E:AF:36:3E:DA:37:4F:9F:6E:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       338ADDFAE85C66C1D2A465A53749A49393B74052
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/1/6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Apr 2024 12:13:20 +0000
Certificate not after:    Thu 10 Apr 2025 12:18:20 +0000
Subordinate resources:    AS: 266933
                          IP: 45.225.108.0/22
                          IP: 2804:4588::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8a:dd:fa:e8:5c:66:c1:d2:a4:65:a5:37:49:a4:93:93:b7:40:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 12:13:20 2024 GMT
            Not After : Apr 10 12:18:20 2025 GMT
        Subject: CN=6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:9c:54:a5:64:66:fd:82:82:49:b5:8a:5d:
                    2b:9e:41:ea:13:1d:5e:4a:fc:95:90:04:65:2b:43:
                    82:18:4d:8f:52:1e:dc:ae:f8:73:c9:29:e3:02:ad:
                    28:02:fb:b8:ba:29:84:1b:2f:e7:ee:db:4f:6d:2b:
                    a5:d1:e1:7c:e7:3f:3b:7e:8d:22:e9:85:9b:ff:2f:
                    38:a6:40:95:06:c8:a8:ea:cd:74:44:7d:a6:0f:73:
                    da:93:05:ee:f7:37:32:43:75:cf:1a:65:72:84:fd:
                    5e:81:2b:de:12:93:a9:65:7c:93:96:2d:d0:79:4f:
                    c1:4c:29:de:79:9b:d5:7e:de:fd:e9:b8:7b:9e:9d:
                    6e:90:7b:88:4f:36:47:5d:f9:d6:d3:37:d8:52:36:
                    d7:a6:19:3f:1e:f1:0d:3c:dc:be:92:c5:c6:af:8d:
                    79:bd:91:0b:30:85:1e:67:4e:c5:3c:f2:93:f5:a6:
                    61:8d:fb:3d:f3:07:9f:5b:91:d0:1d:75:d4:c2:2b:
                    19:a4:11:8a:59:dd:b1:81:4b:7a:df:4c:fa:00:49:
                    ed:3e:3a:37:02:c3:c5:8b:bc:01:77:27:11:66:0d:
                    76:f3:60:a9:03:f7:46:8c:a7:07:a3:7a:78:f7:cb:
                    b6:20:e6:10:1e:8f:8a:67:a9:44:8a:9e:f4:02:4c:
                    ff:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:6D:FF:0B:38:F4:FB:59:7A:0F:7E:AF:36:3E:DA:37:4F:9F:6E:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/1/6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.108.0/22
                IPv6:
                  2804:4588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266933

    Signature Algorithm: sha256WithRSAEncryption
         65:7b:fc:4b:4c:d9:4b:b8:09:f3:3e:49:b6:14:b2:5a:03:f5:
         60:6f:2b:44:71:29:6c:80:54:71:5b:76:d0:c1:83:18:e9:b6:
         80:05:1a:39:ec:fc:85:36:9c:62:5b:0f:c5:e9:83:a7:6b:8e:
         b8:37:7c:78:07:af:90:54:96:07:6a:7d:38:38:dc:e9:82:1e:
         2c:dd:4d:b3:17:5d:72:0a:97:f9:28:02:6a:fb:39:67:70:3a:
         c9:2a:6f:cc:bd:fe:19:b9:91:fe:6f:79:5a:2b:7d:9e:1e:a8:
         f5:9c:e6:51:d1:2a:78:53:d8:ac:56:f9:5c:74:08:44:4a:f2:
         f5:1e:95:81:38:34:60:11:df:bd:50:e6:1b:3e:06:c8:96:9c:
         1c:bb:c1:d7:d7:a6:5e:14:b1:fd:3f:7e:b2:4a:df:b6:b3:1e:
         a7:44:64:84:dd:18:06:9f:03:5c:7c:05:7c:62:5b:d7:a5:84:
         e5:d6:07:ba:a6:12:10:3f:d9:05:34:16:53:59:6c:bc:8c:db:
         09:20:1e:68:37:81:66:c6:d8:48:ac:13:94:17:ca:2f:61:8f:
         19:40:0c:bc:d3:50:ca:21:75:c9:e4:bf:ba:e3:24:2c:e7:6b:
         5a:14:12:3a:b1:af:9a:e2:59:f9:50:1f:c7:d3:f7:fa:af:0c:
         ad:d7:37:43
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUM4rd+uhcZsHSpGWlN0mkk5O3QFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MTExMjEzMjBaFw0yNTA0MTAxMjE4MjBaMDMxMTAvBgNV
BAMTKDZGNkRGRjBCMzhGNEZCNTk3QTBGN0VBRjM2M0VEQTM3NEY5RjZFQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53JxUpWRm/YKCSbWKXSueQeoT
HV5K/JWQBGUrQ4IYTY9SHtyu+HPJKeMCrSgC+7i6KYQbL+fu209tK6XR4XznPzt+
jSLphZv/LzimQJUGyKjqzXREfaYPc9qTBe73NzJDdc8aZXKE/V6BK94Sk6llfJOW
LdB5T8FMKd55m9V+3v3puHuenW6Qe4hPNkdd+dbTN9hSNtemGT8e8Q083L6Sxcav
jXm9kQswhR5nTsU88pP1pmGN+z3zB59bkdAdddTCKxmkEYpZ3bGBS3rfTPoASe0+
OjcCw8WLvAF3JxFmDXbzYKkD90aMpwejenj3y7Yg5hAej4pnqUSKnvQCTP85AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRvbf8LOPT7WXoP
fq82Pto3T59uojAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EOWZ2U3c4UjNmaXVSRW9QMkxqbUQxSHBFZ3V6YjNiZTRz
RkR6cXN5OG1vMS8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EOWZ2U3c4UjNmaXVSRW9QMkxqbUQxSHBFZ3V6YjNiZTRz
RkR6cXN5OG1vMS8xLzZGNkRGRjBCMzhGNEZCNTk3QTBGN0VBRjM2M0VEQTM3NEY5
RjZFQTIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3hbDANBAIAAjAHAwUA
KARFiDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEErUwDQYJKoZIhvcNAQELBQAD
ggEBAGV7/EtM2Uu4CfM+SbYUsloD9WBvK0RxKWyAVHFbdtDBgxjptoAFGjns/IU2
nGJbD8Xpg6drjrg3fHgHr5BUlgdqfTg43OmCHizdTbMXXXIKl/koAmr7OWdwOskq
b8y9/hm5kf5veVorfZ4eqPWc5lHRKnhT2KxW+Vx0CERK8vUelYE4NGAR371Q5hs+
BsiWnBy7wdfXpl4Usf0/frJK37azHqdEZITdGAafA1x8BXxiW9elhOXWB7qmEhA/
2QU0FlNZbLyM2wkgHmg3gWbG2EisE5QXyi9hjxlADLzTUMohdcnkv7rjJCzna1oU
Ejqxr5riWflQH8fT9/qvDK3XN0M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org