Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.cer
File:                     A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.cer (raw, json)
Hash identifier:          WxqHynVP3SaxRMbjYOR/hRctByH1wbMyYL+wZ+gekSU=
Subject key identifier:   A6:F2:42:08:45:A6:DE:64:6D:E9:5F:4F:23:DF:21:A1:8A:4E:D0:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DA6C924E6B1519BB9109F67FDFD21EC9E03BAB7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Aug 2022 19:51:11 +0000
Certificate not after:    Wed 09 Aug 2023 19:56:11 +0000
Subordinate resources:    AS: 268151
                          IP: 45.170.76.0/22
                          IP: 2804:58d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a6:c9:24:e6:b1:51:9b:b9:10:9f:67:fd:fd:21:ec:9e:03:ba:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 10 19:51:11 2022 GMT
            Not After : Aug  9 19:56:11 2023 GMT
        Subject: CN=A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:57:58:d2:42:3e:b9:28:08:0b:f4:5b:55:
                    e2:85:cc:d0:3f:5b:81:07:8a:cf:f8:44:61:ac:b9:
                    7f:2e:6f:3f:1e:73:f0:df:a6:75:02:0b:8b:8d:01:
                    1a:23:93:09:e1:75:24:21:0d:fc:2e:0f:b7:20:d9:
                    d0:17:51:8f:21:1f:19:7d:b9:02:ce:80:03:0c:45:
                    66:d4:09:33:33:01:a0:61:66:25:e7:34:7b:73:b5:
                    2b:59:83:fa:26:ea:dd:d7:8c:27:5f:8d:79:e3:fb:
                    52:57:04:34:ae:f3:8f:3c:c5:e7:ba:77:0e:a2:67:
                    33:1c:9c:e6:ab:93:e1:56:6f:06:12:e2:7d:b0:c1:
                    63:ee:2f:29:5a:fb:26:13:92:71:01:92:74:8a:a0:
                    d2:a9:05:16:e7:22:19:ca:61:a5:56:55:ff:2e:66:
                    bb:68:d2:ce:70:e4:5d:51:4c:6d:99:a7:6e:7e:b4:
                    95:c5:da:d1:0f:6b:4b:30:47:27:c9:b1:ec:3c:26:
                    62:eb:f4:59:61:95:4d:a2:a5:72:8e:88:36:b2:c7:
                    fb:2e:98:00:4b:6c:37:8b:f7:65:43:10:72:1d:43:
                    68:23:b5:06:9c:c7:d7:7b:9b:0a:5b:fc:a8:eb:ea:
                    46:da:a9:0f:ef:94:0f:b9:39:36:46:c3:ec:80:c1:
                    ce:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:F2:42:08:45:A6:DE:64:6D:E9:5F:4F:23:DF:21:A1:8A:4E:D0:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.76.0/22
                IPv6:
                  2804:58d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268151

    Signature Algorithm: sha256WithRSAEncryption
         6a:09:f7:d7:e0:b3:5c:ff:51:43:ac:cf:02:8e:df:6c:62:e0:
         3a:26:8c:7e:44:12:3e:ba:bd:1a:e7:5f:dc:b0:2c:ca:ef:66:
         47:a5:34:c3:27:df:40:f3:e0:ae:55:09:8b:85:f3:47:96:a9:
         46:f8:ed:d2:48:35:1b:41:35:44:b1:5c:4e:bd:8e:e4:0f:a1:
         8e:ae:ba:96:a9:5e:f6:da:20:95:e1:6b:9c:cf:6b:04:d1:68:
         c9:1b:75:29:86:6d:71:4d:88:27:d1:19:c1:8d:cb:2b:d3:54:
         74:c9:3c:7e:72:10:a2:d7:eb:ae:52:0f:37:f4:68:78:33:1e:
         96:bc:c8:fa:88:e0:77:78:55:c7:4d:bf:34:5b:09:20:e0:f4:
         5a:41:f7:f6:22:0a:1a:f7:9a:51:93:b8:b2:ba:2e:5b:37:9c:
         28:a9:f9:42:61:e8:27:85:8e:59:e2:aa:f1:1e:2e:dd:8c:60:
         bc:13:c5:50:23:67:c7:7a:98:05:f9:e1:31:1f:66:63:f4:e5:
         fb:36:da:54:1f:5c:23:1b:c9:59:2f:d0:33:8a:0f:59:7b:ac:
         f6:10:7e:93:19:a0:e4:56:ff:52:32:3a:df:86:78:42:b1:70:
         20:26:00:8b:6a:f4:c8:ec:6f:2e:09:6e:42:21:d0:b8:2a:9d:
         94:d0:98:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org