Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A6F742E539CCCD0D59F3E1BFAEDF3FF342D75D7E.cer
File:                     A6F742E539CCCD0D59F3E1BFAEDF3FF342D75D7E.cer (raw, json)
Hash identifier:          QxFOhyLpWhbtjb7/wrWsF1wOHitrQ6uaW/gOn9J+TuI=
Subject key identifier:   A6:F7:42:E5:39:CC:CD:0D:59:F3:E1:BF:AE:DF:3F:F3:42:D7:5D:7E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BEFBB1EB7EAA8B1BF2316B4389D51A4C08CDA75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/A6F742E539CCCD0D59F3E1BFAEDF3FF342D75D7E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Jan 2023 17:17:13 +0000
Certificate not after:    Fri 05 Jan 2024 17:22:13 +0000
Subordinate resources:    AS: 266297
                          IP: 170.79.204.0/22
                          IP: 2804:35a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ef:bb:1e:b7:ea:a8:b1:bf:23:16:b4:38:9d:51:a4:c0:8c:da:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  6 17:17:13 2023 GMT
            Not After : Jan  5 17:22:13 2024 GMT
        Subject: CN=A6F742E539CCCD0D59F3E1BFAEDF3FF342D75D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:5b:d2:bd:0f:9a:3a:5b:8c:61:32:84:58:
                    a1:c7:d8:f9:ca:4b:f4:a6:fc:a5:0d:fb:15:d3:c4:
                    1c:40:a7:6a:34:65:1a:68:62:c7:4e:42:1b:f8:af:
                    a0:d9:27:63:df:09:e7:72:bc:d3:6f:64:68:fd:50:
                    02:1b:1d:ac:92:b1:62:d6:52:54:43:2d:5a:b6:73:
                    06:f2:66:0b:45:0e:1e:02:d3:5b:41:cc:e9:c9:a2:
                    d3:c7:56:56:92:8a:70:9e:47:6f:a9:b6:0f:e2:0f:
                    0c:1c:8e:2b:71:1a:32:e6:5c:2a:56:cb:64:28:ce:
                    3f:f0:1b:74:d8:8f:9e:fa:95:6f:75:07:dd:3b:7e:
                    04:24:4c:9b:39:c9:81:94:d6:72:fc:17:49:5e:a7:
                    87:20:af:86:8c:9d:1a:a2:4f:02:db:07:b4:7e:a4:
                    35:ab:d8:85:27:40:fb:85:17:cf:95:e8:b0:7a:f8:
                    37:e8:78:a1:0f:f9:c4:b0:c4:af:05:49:e8:bc:ac:
                    84:15:1a:6c:6a:96:e2:33:21:06:77:9e:b2:c6:22:
                    76:72:86:49:9c:46:6f:78:72:8f:48:03:c7:24:73:
                    a6:6f:1d:d9:ae:60:f8:fa:9f:b2:37:9e:50:80:6c:
                    5a:ac:07:61:78:72:6d:3f:2a:3e:59:c8:ef:41:c8:
                    7a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:F7:42:E5:39:CC:CD:0D:59:F3:E1:BF:AE:DF:3F:F3:42:D7:5D:7E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/A6F742E539CCCD0D59F3E1BFAEDF3FF342D75D7E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.204.0/22
                IPv6:
                  2804:35a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266297

    Signature Algorithm: sha256WithRSAEncryption
         b6:3f:c2:a9:cc:b2:33:e8:4e:37:1b:48:04:31:fd:74:a3:56:
         9a:d8:77:31:01:d1:6c:00:a6:6d:a1:04:46:b1:b5:d2:39:b3:
         89:67:00:b3:a7:e5:f2:ef:eb:5b:10:9d:78:44:9e:68:f8:32:
         14:ec:e2:ff:02:cb:58:ce:b7:b2:05:b3:b6:b5:d3:ab:cb:96:
         48:28:64:c3:42:64:e7:6c:af:72:e4:74:08:0d:fc:20:d3:d8:
         27:57:f0:1c:21:66:7d:77:1c:b6:d6:3a:f1:24:4d:4d:c6:c3:
         86:52:fa:ab:60:8e:d7:51:ff:8b:f9:b1:24:0e:cd:75:66:fb:
         74:3f:46:b9:d0:ed:93:3c:2d:d5:38:57:40:14:ba:46:d0:ba:
         0f:95:c8:e8:00:cf:61:9a:fa:0c:b3:64:d8:5e:6c:04:62:79:
         9d:59:58:59:96:56:6e:47:d2:5d:34:c2:44:c2:ed:35:1c:54:
         fe:f8:f5:f6:2e:27:a7:64:05:68:51:2e:39:5b:c8:07:f1:aa:
         a3:b1:18:8f:05:82:f2:b2:2c:b4:cd:99:3a:f8:55:83:8c:c4:
         22:c4:f4:45:1d:c1:16:e4:83:b9:f7:2d:6d:6d:57:56:49:56:
         a0:15:55:8a:dd:01:f7:fb:3a:d3:92:08:e4:de:ad:81:db:35:
         dc:67:78:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:41 2024 by rpki-client on console-ams.rpki-client.org