Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6F94A77003B05A3AABF4148B7031094EAC378573.cer
File:                     6F94A77003B05A3AABF4148B7031094EAC378573.cer (raw, json)
Hash identifier:          K9978UpnSn6nl1uRQrJQLPTjkONXBJGh0Gwf9sHsmXU=
Subject key identifier:   6F:94:A7:70:03:B0:5A:3A:AB:F4:14:8B:70:31:09:4E:AC:37:85:73
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       76E520DA49BD040750E27AB3D28CEB1F3BDB2689
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/6F94A77003B05A3AABF4148B7031094EAC378573.mft
caRepository:             rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 17 Feb 2024 14:34:10 +0000
Certificate not after:    Sat 15 Feb 2025 14:39:10 +0000
Subordinate resources:    AS: 262569
                          IP: 143.137.60.0/22
                          IP: 170.82.72.0/22
                          IP: 177.73.112.0/21
                          IP: 2804:62c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e5:20:da:49:bd:04:07:50:e2:7a:b3:d2:8c:eb:1f:3b:db:26:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 17 14:34:10 2024 GMT
            Not After : Feb 15 14:39:10 2025 GMT
        Subject: CN=6F94A77003B05A3AABF4148B7031094EAC378573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:4b:d4:ef:09:77:cc:1e:80:30:0c:b8:ab:
                    83:05:e3:27:c2:44:2a:03:61:67:03:74:db:4a:aa:
                    4b:d0:4b:e8:55:77:57:0f:d8:16:1e:75:89:7f:c3:
                    ba:ec:fa:48:9e:f5:76:34:c3:a0:b5:82:9f:6c:c7:
                    b5:7c:8e:73:03:32:82:8a:24:e0:28:93:96:61:59:
                    7d:70:6a:a3:26:10:1c:c6:e1:6b:ff:41:57:b9:e3:
                    79:2f:de:a4:fb:d8:a9:e2:cf:7d:a0:b6:c9:f5:47:
                    4e:f0:f5:03:cb:d5:d4:29:59:ea:55:86:5a:70:2a:
                    4d:af:d5:f7:35:75:83:50:65:51:5d:04:fb:76:55:
                    0a:a2:1e:02:d6:7a:3d:ab:f9:77:19:d1:fc:6d:ae:
                    11:57:18:a1:fe:1c:1c:85:5f:32:0b:17:2f:f3:16:
                    6e:5b:50:eb:85:c1:e1:98:22:5f:aa:1a:1b:6c:07:
                    33:12:eb:de:7b:9a:e7:d6:cf:5d:a2:8a:9e:27:0f:
                    1a:17:fb:04:ba:41:cc:0a:ce:ec:4f:28:21:c7:a9:
                    09:c7:69:73:39:ec:3f:5b:76:94:53:1d:7c:a0:2b:
                    11:de:2c:32:d4:09:37:ee:1c:88:7c:fd:d7:0c:70:
                    a1:78:08:5a:fd:bb:9c:90:76:2d:2f:bd:ad:da:7f:
                    b9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:94:A7:70:03:B0:5A:3A:AB:F4:14:8B:70:31:09:4E:AC:37:85:73
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/6F94A77003B05A3AABF4148B7031094EAC378573.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.60.0/22
                  170.82.72.0/22
                  177.73.112.0/21
                IPv6:
                  2804:62c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262569

    Signature Algorithm: sha256WithRSAEncryption
         50:5e:a2:92:39:b8:fa:7c:31:fb:cb:02:f8:c2:a5:93:0f:a7:
         b8:c2:c2:92:ee:a0:a8:7e:a1:f5:99:92:45:aa:68:db:b6:d2:
         27:fa:ac:06:73:33:ec:29:e0:55:9b:da:f9:03:d3:35:47:db:
         64:1d:e4:1c:c4:ed:80:08:a8:f5:5a:d6:8d:0b:72:fd:62:e2:
         6a:d3:c8:ed:0c:ff:3f:3f:1b:df:15:a4:af:75:2f:f7:94:39:
         96:5a:cd:29:d6:2a:46:a8:60:38:22:ae:bf:7c:58:0d:06:52:
         da:cb:2e:eb:a2:af:7b:20:b8:59:64:27:bd:f4:f7:90:0d:d7:
         c0:f6:66:48:c7:19:10:c0:ee:70:7d:01:a8:f9:e3:f7:27:16:
         4e:ef:0f:54:b0:8c:9d:b2:9b:48:94:32:8c:8b:f8:45:4f:d7:
         3d:51:3a:cf:28:a2:c7:ce:82:f8:1c:8a:58:5d:bc:24:fe:20:
         af:e9:ea:ae:1b:0c:a3:e4:b8:4d:06:0c:45:91:f5:bd:e2:cc:
         ff:02:f0:78:bc:24:ab:a7:a4:ea:5d:7d:63:ae:11:57:74:1f:
         d9:16:50:8a:2f:b1:ac:5f:a3:aa:f3:55:92:81:76:00:40:ee:
         f4:b8:b4:3d:1c:ce:77:27:00:a3:0f:2a:b8:c0:6a:bc:80:0a:
         f6:44:e6:be
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIUduUg2km9BAdQ4nqz0ozrHzvbJokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTcxNDM0MTBaFw0yNTAyMTUxNDM5MTBaMDMxMTAvBgNV
BAMTKDZGOTRBNzcwMDNCMDVBM0FBQkY0MTQ4QjcwMzEwOTRFQUMzNzg1NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFnkvU7wl3zB6AMAy4q4MF4yfC
RCoDYWcDdNtKqkvQS+hVd1cP2BYedYl/w7rs+kie9XY0w6C1gp9sx7V8jnMDMoKK
JOAok5ZhWX1waqMmEBzG4Wv/QVe543kv3qT72Kniz32gtsn1R07w9QPL1dQpWepV
hlpwKk2v1fc1dYNQZVFdBPt2VQqiHgLWej2r+XcZ0fxtrhFXGKH+HByFXzILFy/z
Fm5bUOuFweGYIl+qGhtsBzMS6957mufWz12iip4nDxoX+wS6QcwKzuxPKCHHqQnH
aXM57D9bdpRTHXygKxHeLDLUCTfuHIh8/dcMcKF4CFr9u5yQdi0vva3af7lvAgMB
AAGjggMlMIIDITAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRvlKdwA7BaOqv0
FItwMQlOrDeFczAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9SS21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25I
VGVYYkVxRjNiLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9SS21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25I
VGVYYkVxRjNiLzAvNkY5NEE3NzAwM0IwNUEzQUFCRjQxNDhCNzAzMTA5NEVBQzM3
ODU3My5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCj4k8AwQCqlJIAwQDsUlw
MA0EAgACMAcDBQAoBAYsMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQBqTANBgkq
hkiG9w0BAQsFAAOCAQEAUF6ikjm4+nwx+8sC+MKlkw+nuMLCku6gqH6h9ZmSRapo
27bSJ/qsBnMz7CngVZva+QPTNUfbZB3kHMTtgAio9VrWjQty/WLiatPI7Qz/Pz8b
3xWkr3Uv95Q5llrNKdYqRqhgOCKuv3xYDQZS2ssu66KveyC4WWQnvfT3kA3XwPZm
SMcZEMDucH0BqPnj9ycWTu8PVLCMnbKbSJQyjIv4RU/XPVE6zyiix86C+ByKWF28
JP4gr+nqrhsMo+S4TQYMRZH1veLM/wLweLwkq6ek6l19Y64RV3Qf2RZQii+xrF+j
qvNVkoF2AEDu9Li0PRzOdycAow8quMBqvIAK9kTmvg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org