Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.cer
File:                     B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.cer (raw, json)
Hash identifier:          fZi7WuHqc62mDgkFLYQGS2F2xgdagtYBhIeNFdAtXPk=
Subject key identifier:   B6:BD:74:F4:A1:DF:60:FC:C3:DB:48:67:CA:1C:E8:4E:F6:43:88:9D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       376D11D8C5DFFE2F38C6524089DD6A5A369EA528
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 18:06:47 +0000
Certificate not after:    Tue 16 Apr 2024 18:11:47 +0000
Subordinate resources:    AS: 267336
                          IP: 45.234.16.0/22
                          IP: 2804:4be8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6d:11:d8:c5:df:fe:2f:38:c6:52:40:89:dd:6a:5a:36:9e:a5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 18 18:06:47 2023 GMT
            Not After : Apr 16 18:11:47 2024 GMT
        Subject: CN=B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:0a:fc:f8:fb:3f:c4:89:94:b9:30:5c:d3:
                    d9:fc:d5:53:5b:e7:f0:43:b4:3a:8b:25:eb:00:11:
                    bb:dd:ca:d6:3d:5f:e5:6c:dd:7b:1a:76:cd:60:1b:
                    e2:8e:af:1c:14:7a:cf:aa:a2:95:48:69:86:34:a7:
                    2a:7a:14:a4:5e:80:95:2d:e0:3d:8b:3c:ca:f4:09:
                    7c:38:e4:c4:21:75:26:af:00:03:4f:4e:c4:b6:f4:
                    0e:ed:1a:7c:7b:17:15:6f:a4:8b:43:1a:5a:dd:85:
                    86:91:39:b9:f9:9c:eb:02:5e:52:d0:b0:d0:c1:8f:
                    2f:08:12:9a:1a:28:c2:3a:80:2a:18:ab:5d:54:84:
                    08:28:eb:15:fc:53:fd:24:6a:d1:02:85:31:fb:ee:
                    c9:c1:c5:f8:72:95:4c:1c:ce:87:32:1b:b8:1f:df:
                    e0:ef:34:38:b1:fe:c1:66:97:45:3b:58:83:c0:31:
                    60:60:a4:b8:29:27:cb:1d:ed:fa:d1:bf:03:bb:b3:
                    ca:ed:87:c3:6b:40:d3:42:5e:59:97:55:3f:d0:16:
                    7f:0c:99:69:1f:a2:5a:b7:fd:18:e2:5a:43:8a:49:
                    e6:e2:43:4d:29:74:8d:e3:d7:94:e9:df:33:22:1b:
                    4f:bd:b6:51:49:d7:11:ee:ec:86:41:d8:ed:f6:20:
                    f4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:BD:74:F4:A1:DF:60:FC:C3:DB:48:67:CA:1C:E8:4E:F6:43:88:9D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.16.0/22
                IPv6:
                  2804:4be8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267336

    Signature Algorithm: sha256WithRSAEncryption
         46:a8:c7:94:6a:dd:fd:68:5b:33:01:69:5c:b6:e4:7c:7b:e7:
         a5:71:ce:86:d6:ba:90:35:68:13:74:c0:64:1d:ac:21:7d:f6:
         fa:ba:33:e6:b6:2e:c3:91:41:b4:7d:89:83:08:5b:f8:a6:88:
         ce:6d:64:7a:d3:58:26:34:80:f8:f3:ea:0a:39:ac:fd:72:b3:
         af:31:bf:ca:32:ad:79:76:db:39:6f:cd:2d:2e:eb:d7:49:b9:
         7a:01:0d:4e:8b:5a:7d:2b:32:04:aa:6d:05:6a:dc:54:3e:7a:
         f5:ef:25:74:a6:2b:af:79:af:aa:69:fc:12:b0:36:6b:ee:c5:
         71:e7:e6:40:59:15:b6:d9:a9:5d:3d:0b:ae:4a:45:b7:41:26:
         7c:09:ad:e0:c0:f9:b2:dc:aa:87:5c:58:91:58:3b:04:c3:dc:
         23:09:da:6b:a2:44:88:bf:99:44:94:3a:30:2b:29:4b:c7:b4:
         fb:e6:48:25:bc:47:5d:ce:96:77:73:52:2e:42:66:ab:6e:08:
         22:33:4b:80:d3:0b:6b:00:8b:cf:a6:02:95:7e:c5:04:c8:8d:
         d6:90:f2:32:05:50:c3:00:15:2d:c4:c7:3b:24:e2:09:ab:90:
         31:ab:77:74:cb:83:5e:71:fc:47:c7:a7:f1:09:74:61:74:f6:
         34:c5:76:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org