Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46.cer
File:                     6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46.cer (raw, json)
Hash identifier:          FO1GLX8nwqvkTs0M1G2LQlugWBh3c6ilZ3iMwrMOUMk=
Subject key identifier:   6F:EA:3B:FA:55:69:1D:A7:FE:08:75:FC:B0:64:9C:3D:7D:5B:9B:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4AE116023615DA23A6371C7D654C1F8DE4120749
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Apr 2022 14:37:38 +0000
Certificate not after:    Tue 18 Apr 2023 14:42:38 +0000
Subordinate resources:    AS: 266202
                          IP: 192.140.36.0/22
                          IP: 2804:3c4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e1:16:02:36:15:da:23:a6:37:1c:7d:65:4c:1f:8d:e4:12:07:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 19 14:37:38 2022 GMT
            Not After : Apr 18 14:42:38 2023 GMT
        Subject: CN=6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:31:f9:f3:a3:52:c2:cf:2a:e2:58:1c:44:d1:
                    47:e8:1c:19:c2:61:12:3d:9c:11:40:c0:4d:b1:c2:
                    d7:3e:76:7f:f0:48:24:91:6c:8a:12:ec:d8:d7:6d:
                    fe:f4:a1:82:c8:8c:e4:e9:1b:99:c7:18:90:ab:4e:
                    09:e7:5e:42:64:ce:39:3b:b8:d3:2f:62:23:18:26:
                    1a:06:72:ce:b8:3e:ec:f3:23:52:fd:63:68:58:f7:
                    51:1e:5a:8e:4b:c3:a7:1e:af:0a:7d:62:58:17:e9:
                    d6:12:b8:2a:89:00:a8:02:7f:6d:5b:5c:f2:a4:7e:
                    b7:2c:6b:f4:dd:7e:e2:b9:78:0b:ad:9e:69:d9:0a:
                    b1:54:67:57:62:89:9d:22:fc:3a:8d:32:15:88:66:
                    a6:74:63:5b:52:02:4a:37:ce:7a:df:98:e1:7f:c1:
                    96:83:1b:ec:17:b7:1d:43:08:da:07:d2:a2:fe:4c:
                    01:68:91:18:c4:6d:76:f1:5d:23:14:d7:f8:46:d0:
                    63:d1:72:79:37:36:4a:f6:a5:34:47:7a:44:da:4e:
                    5c:58:28:ad:9b:bb:0b:f1:1c:9e:8f:94:ca:a6:de:
                    88:91:00:4a:92:dc:f2:8e:4a:39:5c:13:35:2c:69:
                    de:fc:1d:7f:b8:12:6c:3d:c9:3d:50:44:ec:0d:7a:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:EA:3B:FA:55:69:1D:A7:FE:08:75:FC:B0:64:9C:3D:7D:5B:9B:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.36.0/22
                IPv6:
                  2804:3c4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266202

    Signature Algorithm: sha256WithRSAEncryption
         0d:67:ae:ca:f3:aa:03:81:b2:9b:94:d8:ad:25:21:5f:73:e9:
         77:b6:f6:24:11:86:b9:e2:0b:c1:9b:55:36:e5:b2:c7:20:70:
         43:b8:c5:b5:ea:19:0f:c0:f6:f4:5c:e7:0c:88:37:c0:6f:96:
         13:f5:d9:9c:5e:0d:a2:27:63:83:8a:c1:86:39:4e:39:88:09:
         09:df:9f:a1:2a:32:a3:03:8f:47:92:97:c8:c0:78:a3:3d:64:
         53:c7:f6:a9:02:4c:9c:e6:68:89:89:09:91:53:50:7a:2b:94:
         00:50:b6:85:a8:c1:7b:ea:ad:de:e8:78:42:5b:6b:31:aa:f6:
         68:a3:46:cb:d3:1d:8e:b4:3e:e4:04:0f:bf:d1:6d:04:fd:74:
         76:4b:bc:64:a5:ef:f8:2c:6b:75:75:84:78:cf:e5:04:fb:0c:
         71:69:98:6b:15:8b:75:0e:85:62:8e:3f:87:e9:87:f4:2c:57:
         73:23:26:b2:c1:5f:36:da:06:bd:c2:23:b5:df:5f:92:a1:f5:
         df:13:f4:d7:d0:93:bc:17:1b:19:14:01:91:38:2f:cc:8a:14:
         12:cc:9b:c0:85:3a:95:47:ae:3c:d6:3a:55:ba:b5:e2:24:34:
         68:40:16:2f:5b:8f:b8:45:44:10:a4:ad:33:1a:b3:48:6e:70:
         b1:be:25:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org