Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.cer
File:                     B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.cer (raw, json)
Hash identifier:          Enj/bkHfph80hDDZTetM6VsOo+yRjg3tGLILj+yjQu0=
Subject key identifier:   B6:E5:CD:0A:C3:33:BA:9A:23:48:AA:91:26:13:E3:0B:2E:69:9A:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B070F5F692CF279426C8464DB917381EB652253
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 21:09:23 +0000
Certificate not after:    Mon 10 Mar 2025 21:14:23 +0000
Subordinate resources:    AS: 270705
                          IP: 189.127.148.0/22
                          IP: 2804:7018::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:07:0f:5f:69:2c:f2:79:42:6c:84:64:db:91:73:81:eb:65:22:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 21:09:23 2024 GMT
            Not After : Mar 10 21:14:23 2025 GMT
        Subject: CN=B6E5CD0AC333BA9A2348AA912613E30B2E699A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:17:37:14:5d:1f:6f:d3:1a:c6:b9:bc:f6:
                    94:83:da:a1:00:74:4f:02:d6:fd:f7:6b:cc:7e:9b:
                    ac:f3:e6:74:96:db:59:4c:fc:7d:5b:6d:50:40:d6:
                    85:83:a0:95:23:f6:8f:ab:cb:70:ba:c6:70:66:f6:
                    63:85:95:ed:55:91:91:e1:7b:c4:0e:b8:bf:6f:bc:
                    35:6e:26:18:03:e2:63:35:16:07:ae:07:24:ba:a0:
                    1d:97:a5:93:db:c4:08:06:21:21:8c:bc:2b:be:8f:
                    52:60:f9:b3:1d:1a:7d:dd:51:ec:fd:35:5a:06:ca:
                    d3:84:8c:2c:4a:6e:57:b2:84:90:de:92:b9:48:23:
                    89:b4:92:e8:ae:75:91:5f:59:2b:92:89:a1:5c:bb:
                    04:02:c6:f4:3a:26:3b:4a:0d:fa:ed:fc:be:3e:23:
                    7a:ba:7b:83:f9:4c:41:6e:8f:f9:c4:c4:f8:4b:e0:
                    af:41:51:99:f5:90:4f:40:97:b6:a7:6e:36:24:fc:
                    5e:bf:83:c3:2d:3b:18:82:aa:21:fc:5c:84:a1:26:
                    2e:3b:d9:ae:be:1c:85:11:8d:1b:21:38:46:d9:a2:
                    4e:26:1e:c6:c0:a3:1e:c9:a1:0f:ab:6a:8c:96:a8:
                    62:6e:16:e0:00:75:33:e3:b9:36:a9:5b:ea:08:75:
                    c2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:E5:CD:0A:C3:33:BA:9A:23:48:AA:91:26:13:E3:0B:2E:69:9A:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.148.0/22
                IPv6:
                  2804:7018::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270705

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:b3:16:e6:aa:f4:50:ca:c6:eb:82:9d:35:73:7c:34:c8:
         59:86:52:72:d8:d0:98:bb:3f:83:ea:1d:73:31:41:cf:a2:1f:
         2e:1a:fb:d8:0e:b8:ab:52:0e:fd:8c:f0:22:d2:5a:af:0e:af:
         4b:d7:a8:40:24:17:2a:a4:c8:fa:ff:1e:91:3c:83:3d:11:98:
         93:2d:7b:3b:ff:3a:6d:a7:5b:f4:a4:74:a5:10:0e:ed:f5:7d:
         6a:7f:26:06:db:d8:8f:7e:00:ed:86:22:9c:14:07:ec:10:ba:
         3b:fc:51:20:d7:83:cd:7b:4b:ec:80:e5:9d:5f:53:9b:f1:8c:
         fe:11:b4:e2:3e:d7:1a:f0:ae:55:db:c8:5d:24:e4:23:61:54:
         dd:22:6e:b4:67:1b:05:8e:71:8f:1e:ff:d9:9e:38:d3:d8:e4:
         4c:51:c3:49:fc:5d:f4:ca:5c:db:ad:61:5f:8f:b0:44:97:36:
         cd:37:b0:eb:e1:4f:76:80:ca:2d:d6:2a:f1:04:74:b5:92:2f:
         16:94:c3:0d:37:0a:fe:ca:09:78:82:19:c8:90:c7:e9:40:a1:
         c4:52:a0:8b:5d:36:a2:0e:db:52:ce:48:4c:3c:39:02:b5:41:
         49:dc:5c:6a:b4:c1:98:03:fd:f6:d4:e0:65:8c:6e:2b:1b:93:
         c9:b1:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org