Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6FFFC3AAE0C46EEE6D36DA5E6FC27E23CA0EEC45.cer
File:                     6FFFC3AAE0C46EEE6D36DA5E6FC27E23CA0EEC45.cer (raw, json)
Hash identifier:          Loz4bxxvuTiASWAjvpTUxqRFVy1lkVdw/5lO4k1PjIk=
Subject key identifier:   6F:FF:C3:AA:E0:C4:6E:EE:6D:36:DA:5E:6F:C2:7E:23:CA:0E:EC:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0BF1AD3C2867AB342049C266EBFB0FE8F636370D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/6FFFC3AAE0C46EEE6D36DA5E6FC27E23CA0EEC45.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Sep 2022 17:28:37 +0000
Certificate not after:    Thu 21 Sep 2023 17:33:37 +0000
Subordinate resources:    AS: 269548
                          IP: 45.189.16.0/22
                          IP: 2804:6650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f1:ad:3c:28:67:ab:34:20:49:c2:66:eb:fb:0f:e8:f6:36:37:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 17:28:37 2022 GMT
            Not After : Sep 21 17:33:37 2023 GMT
        Subject: CN=6FFFC3AAE0C46EEE6D36DA5E6FC27E23CA0EEC45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:5f:9e:34:9d:62:cc:e8:9b:96:5c:ff:70:
                    e1:a3:fd:7e:33:db:ea:b7:7b:11:63:9f:00:a9:89:
                    eb:b7:8e:fd:e1:a2:30:c1:10:98:cc:30:b7:64:2e:
                    7b:29:c4:7d:55:07:5a:b6:38:c2:92:ea:ca:fd:20:
                    03:5d:5d:c9:3b:2d:23:31:8f:fd:ec:c4:7c:69:ed:
                    f7:0e:e3:5e:42:ca:c6:f8:07:65:7d:b8:37:15:a8:
                    5d:ea:30:1f:30:4c:23:46:1d:02:f1:c3:b7:53:e3:
                    4d:e6:2a:a2:82:c4:66:8a:89:93:38:90:c7:13:23:
                    75:6b:fb:bd:8e:79:6c:d6:47:df:8a:0d:3e:b1:fc:
                    ae:87:03:10:a4:76:96:c1:c0:e8:f9:2a:ea:31:92:
                    b5:45:ad:45:57:75:a4:30:c8:74:5d:17:e6:40:1c:
                    3f:34:c0:c6:68:43:27:4b:34:f8:4d:2f:e1:ef:68:
                    aa:eb:25:26:c6:68:f1:a9:44:76:b8:dc:b7:09:a1:
                    a9:58:f3:71:82:4c:67:2f:49:ad:4c:82:f0:85:88:
                    b8:c7:27:2a:54:4c:8b:14:eb:cd:1b:6c:22:e5:fc:
                    f0:01:85:dc:97:5c:22:51:3e:27:e5:d0:48:1c:f6:
                    c8:b7:11:e6:7f:9f:14:10:93:81:ca:32:e7:13:3e:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:FF:C3:AA:E0:C4:6E:EE:6D:36:DA:5E:6F:C2:7E:23:CA:0E:EC:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/6FFFC3AAE0C46EEE6D36DA5E6FC27E23CA0EEC45.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.16.0/22
                IPv6:
                  2804:6650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269548

    Signature Algorithm: sha256WithRSAEncryption
         2f:a4:ac:12:e7:7f:d1:1e:ba:2b:15:dc:77:0f:7d:21:a0:f1:
         20:0c:f6:2c:d5:2e:3c:8f:b3:e3:7e:e7:50:3a:e1:9f:bd:cb:
         a9:09:23:ab:3b:9a:26:d7:13:0d:6e:30:fd:46:f6:7f:f1:1e:
         8d:04:0f:58:b3:7e:24:ca:97:40:20:cd:56:18:6d:27:f6:7e:
         dc:68:9e:a8:a9:83:0f:77:51:40:8b:df:a7:d5:a7:e6:9c:96:
         01:b0:0d:6d:1e:1a:5b:b5:d5:fa:ca:c6:fd:01:38:9a:f4:36:
         56:bf:ec:46:bd:2f:d7:55:7c:90:54:78:3c:8c:51:96:59:c5:
         b2:ac:31:62:83:bc:fe:fb:8c:f7:25:16:ef:13:e5:e4:77:ea:
         19:22:f6:6e:0a:79:50:49:64:6e:ab:87:c5:e5:34:8b:d1:fc:
         db:d5:52:13:9b:81:fd:c4:6a:0b:68:8d:de:8c:c3:c8:6f:4c:
         45:c2:b3:89:29:bf:ce:e7:02:13:42:b3:95:19:3a:e6:c7:fe:
         4b:96:af:7b:82:01:c0:6a:ee:9f:88:06:07:93:0c:aa:ea:ee:
         50:17:ae:9f:52:75:2d:97:2b:cf:26:14:29:6f:d8:14:32:25:
         99:b1:76:b9:3f:96:1a:89:f2:0b:14:2c:13:36:ad:e5:c9:b3:
         73:ad:00:bc
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUC/GtPChnqzQgScJm6/sP6PY2Nw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA5MjIxNzI4MzdaFw0yMzA5MjExNzMzMzdaMDMxMTAvBgNV
BAMTKDZGRkZDM0FBRTBDNDZFRUU2RDM2REE1RTZGQzI3RTIzQ0EwRUVDNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVl+eNJ1izOibllz/cOGj/X4z
2+q3exFjnwCpieu3jv3hojDBEJjMMLdkLnspxH1VB1q2OMKS6sr9IANdXck7LSMx
j/3sxHxp7fcO415Cysb4B2V9uDcVqF3qMB8wTCNGHQLxw7dT403mKqKCxGaKiZM4
kMcTI3Vr+72OeWzWR9+KDT6x/K6HAxCkdpbBwOj5KuoxkrVFrUVXdaQwyHRdF+ZA
HD80wMZoQydLNPhNL+HvaKrrJSbGaPGpRHa43LcJoalY83GCTGcvSa1MgvCFiLjH
JypUTIsU680bbCLl/PABhdyXXCJRPifl0Egc9si3EeZ/nxQQk4HKMucTPpXdAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRv/8Oq4MRu7m02
2l5vwn4jyg7sRTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FamRGdWZDNXpLOGhGdWVQNzlCU2lnTk5xNlhpajlBRE1V
NWdpcWs1b1hKOC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FamRGdWZDNXpLOGhGdWVQNzlCU2lnTk5xNlhpajlBRE1V
NWdpcWs1b1hKOC8wLzZGRkZDM0FBRTBDNDZFRUU2RDM2REE1RTZGQzI3RTIzQ0Ew
RUVDNDUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi29EDANBAIAAjAHAwUA
KARmUDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHOwwDQYJKoZIhvcNAQELBQAD
ggEBAC+krBLnf9EeuisV3HcPfSGg8SAM9izVLjyPs+N+51A64Z+9y6kJI6s7mibX
Ew1uMP1G9n/xHo0ED1izfiTKl0AgzVYYbSf2ftxonqipgw93UUCL36fVp+aclgGw
DW0eGlu11frKxv0BOJr0Nla/7Ea9L9dVfJBUeDyMUZZZxbKsMWKDvP77jPclFu8T
5eR36hki9m4KeVBJZG6rh8XlNIvR/NvVUhObgf3Eagtojd6Mw8hvTEXCs4kpv87n
AhNCs5UZOubH/kuWr3uCAcBq7p+IBgeTDKrq7lAXrp9SdS2XK88mFClv2BQyJZmx
drk/lhqJ8gsULBM2reXJs3OtALw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org