Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6FF2AA165EB00C50F933B4B39D094326BCBDFCF4.cer
File:                     6FF2AA165EB00C50F933B4B39D094326BCBDFCF4.cer (raw, json)
Hash identifier:          QdRL/VVvwtXhir+6tlMjvd1gm0aN5gwA8BDm8ldZVOU=
Subject key identifier:   6F:F2:AA:16:5E:B0:0C:50:F9:33:B4:B3:9D:09:43:26:BC:BD:FC:F4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       37B795658CB77BB425EA8697F3CC7603171F8576
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/6FF2AA165EB00C50F933B4B39D094326BCBDFCF4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 31 Jul 2022 12:16:21 +0000
Certificate not after:    Sun 30 Jul 2023 12:21:21 +0000
Subordinate resources:    AS: 265463
                          IP: 168.197.12.0/22
                          IP: 2804:3484::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b7:95:65:8c:b7:7b:b4:25:ea:86:97:f3:cc:76:03:17:1f:85:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 31 12:16:21 2022 GMT
            Not After : Jul 30 12:21:21 2023 GMT
        Subject: CN=6FF2AA165EB00C50F933B4B39D094326BCBDFCF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:4d:f1:9d:92:61:a9:2b:c2:b0:de:7d:d6:
                    bd:d0:1a:dd:e6:97:ac:4e:7a:45:0b:99:fa:0b:b2:
                    45:da:24:19:6e:68:a1:e5:d1:4d:70:d3:91:15:5f:
                    7f:fd:77:9d:69:fb:c9:30:9c:16:78:7d:43:38:bd:
                    59:12:4e:e2:c5:f0:03:41:7f:cd:20:20:c7:1c:18:
                    e7:82:3d:bd:83:34:e0:f8:17:38:0a:06:b4:33:85:
                    d4:e1:09:a1:53:0f:d5:b5:a0:3a:1b:66:08:2f:49:
                    43:5a:04:54:7f:c7:01:29:22:f7:27:11:1e:53:d7:
                    0e:82:5a:a0:51:bd:05:02:e7:8a:df:0c:93:61:e3:
                    27:03:af:31:cb:e8:8c:6a:aa:06:9e:4d:a7:c6:06:
                    00:1f:97:e0:05:2a:0f:9e:58:6e:e6:cd:9c:7f:fe:
                    e0:ce:13:56:0a:8c:e0:8d:54:d4:0b:42:74:1a:17:
                    67:82:09:0b:ad:ab:3f:ae:35:23:e7:31:3c:72:fa:
                    d0:6f:64:46:82:8b:f1:70:20:1c:40:5f:70:56:50:
                    9d:6b:92:b6:d9:37:5b:ca:24:43:a5:be:02:a7:92:
                    58:5a:c3:c2:17:29:49:41:8d:f4:df:3a:41:c4:36:
                    23:27:ce:c3:25:32:4f:6b:0d:92:c5:46:49:e7:30:
                    15:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:F2:AA:16:5E:B0:0C:50:F9:33:B4:B3:9D:09:43:26:BC:BD:FC:F4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/6FF2AA165EB00C50F933B4B39D094326BCBDFCF4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/22
                IPv6:
                  2804:3484::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265463

    Signature Algorithm: sha256WithRSAEncryption
         36:ed:36:54:01:34:6e:d8:59:ee:d2:f4:3d:9e:38:05:9b:c9:
         19:c5:67:3c:25:bf:cb:23:91:56:85:26:3e:89:a7:fc:7f:7b:
         3a:f6:92:32:d8:ee:26:fc:ed:08:21:29:94:7d:bf:14:de:c6:
         73:70:43:7d:b6:9f:3d:bd:4a:ef:65:3e:28:ad:2f:97:a0:a5:
         16:40:b2:d1:d0:55:81:5a:7b:88:ba:bc:ed:d6:26:b5:f8:6b:
         ad:1a:69:2a:a9:e3:4b:1e:fe:dd:00:b0:55:08:4b:5b:df:fd:
         0e:cc:1f:59:49:18:77:5c:4e:64:3f:18:d1:77:59:d9:56:94:
         e3:ca:7e:8d:48:c0:63:2a:9d:ed:b3:8d:f1:84:98:69:bb:d9:
         7b:9a:dc:cb:3b:2a:ea:99:71:37:25:17:a7:3e:75:10:d6:67:
         fe:83:b4:59:e5:e4:4e:9c:b0:f5:01:4b:44:05:21:ab:76:48:
         6a:d5:12:b4:d3:27:1c:f8:f5:e7:74:0b:f0:15:99:03:43:9d:
         69:fc:d9:8e:37:5c:4c:af:78:42:61:74:84:d9:93:b3:a0:bd:
         c1:d9:b1:7f:95:ab:04:6d:90:9c:8c:dc:f1:cf:a6:32:76:3e:
         9f:0f:34:a0:9e:43:d6:bd:56:f9:8f:e6:79:2c:24:d7:78:6d:
         e7:37:46:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org