Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B6C0FDD6595C6024AE01D3374C8F636E5537AAFC.cer
File:                     B6C0FDD6595C6024AE01D3374C8F636E5537AAFC.cer (raw, json)
Hash identifier:          7N1B3Zu3MnLlquF3ncKvGRfuJs4wW8U1qbX0qkEZXMo=
Subject key identifier:   B6:C0:FD:D6:59:5C:60:24:AE:01:D3:37:4C:8F:63:6E:55:37:AA:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       074936655933869B19F7EA55E553801DB5E7E6DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/B6C0FDD6595C6024AE01D3374C8F636E5537AAFC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 16:05:10 +0000
Certificate not after:    Tue 31 Dec 2024 16:10:10 +0000
Subordinate resources:    AS: 28238
                          IP: 186.216.224.0/20
                          IP: 187.0.128.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:49:36:65:59:33:86:9b:19:f7:ea:55:e5:53:80:1d:b5:e7:e6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 16:05:10 2024 GMT
            Not After : Dec 31 16:10:10 2024 GMT
        Subject: CN=B6C0FDD6595C6024AE01D3374C8F636E5537AAFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:3f:f6:76:aa:89:be:c6:79:be:8a:ec:0c:
                    19:a5:16:6a:2f:28:eb:ef:3d:f3:d7:a0:1c:d5:64:
                    c0:50:f8:4a:dc:a8:94:0c:44:03:27:c7:fe:84:e6:
                    15:bb:e1:4f:f4:b9:9d:dc:ed:ce:68:34:4e:d1:0b:
                    50:0d:8b:60:6b:be:d3:2f:af:a6:16:ca:e0:93:60:
                    ea:71:01:13:46:7a:32:ce:35:ce:2f:9c:fd:e8:1c:
                    0d:4d:7e:99:fd:10:a2:65:f0:0f:48:4e:5e:52:4d:
                    88:b6:9d:75:5a:ff:b3:21:39:d9:1f:fd:c5:62:22:
                    e0:af:e5:2e:69:1d:0b:b4:58:d7:f9:70:db:46:0d:
                    37:09:bc:bf:30:bc:d9:de:a6:8a:9b:5a:f3:76:6f:
                    d8:c5:d2:9c:24:49:4a:45:6f:3e:dc:4e:ab:bd:c0:
                    9c:41:21:be:26:23:e8:cb:01:67:a2:22:b4:e2:13:
                    18:f5:c1:e5:e1:8b:d6:a3:40:54:eb:3e:79:82:c6:
                    21:d4:dd:e9:52:2c:81:62:16:14:21:f6:f4:54:76:
                    03:7c:19:20:ed:64:15:5f:47:e9:2a:9e:c8:07:0e:
                    eb:11:96:18:01:bb:97:f8:45:24:70:b9:c9:0a:c4:
                    d4:73:df:93:43:03:36:f7:71:89:f9:9b:0c:22:1a:
                    b2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:C0:FD:D6:59:5C:60:24:AE:01:D3:37:4C:8F:63:6E:55:37:AA:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/B6C0FDD6595C6024AE01D3374C8F636E5537AAFC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.224.0/20
                  187.0.128.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28238

    Signature Algorithm: sha256WithRSAEncryption
         49:9f:a0:1b:c0:96:c8:54:a4:9d:99:ba:cb:b3:9a:84:47:a0:
         08:f6:45:d7:f2:16:e7:b6:02:41:75:8c:eb:52:89:f5:36:60:
         1b:80:2f:30:c6:4a:a7:e1:3f:78:8c:cd:b6:46:19:d2:0d:dd:
         12:e4:9d:1d:9b:40:40:47:1a:cc:2d:06:cc:ff:aa:bf:de:d0:
         7e:99:29:41:6b:c8:c4:ed:a7:e6:97:58:3e:b3:96:94:71:c9:
         9c:b2:a3:40:2a:50:0b:e4:fe:de:02:a7:0b:39:e1:4c:df:87:
         6c:8a:30:a5:33:f1:f4:cf:f3:64:49:c9:97:a9:a6:25:07:65:
         c3:b8:74:21:6d:26:d6:fd:6c:f7:f0:7b:52:71:65:3c:bc:17:
         9a:ff:43:57:93:e4:42:9b:a5:0d:22:35:72:4f:17:8d:07:81:
         fe:9e:fb:2b:5d:6f:d6:66:55:2a:03:b5:16:c4:24:23:54:97:
         88:c5:22:df:29:e4:27:95:30:d8:d6:03:d8:ad:8b:28:fa:41:
         e2:99:c0:bd:92:6b:93:2e:1a:ba:ab:f3:e6:59:43:71:72:48:
         60:04:28:fd:22:8b:85:fd:0c:8a:9a:66:78:a6:b3:ad:b8:e0:
         04:81:2e:55:21:9d:81:61:4d:09:5b:ff:2d:6f:a2:46:0d:4b:
         5e:16:5b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org