Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B6F35E3DC36AD69B86CBDFE73C1F11FE9BA78626.cer
File:                     B6F35E3DC36AD69B86CBDFE73C1F11FE9BA78626.cer (raw, json)
Hash identifier:          pfU/ETigP8VqAECusUUQ6kBonCG/Kp5wi/trLTY/DHY=
Subject key identifier:   B6:F3:5E:3D:C3:6A:D6:9B:86:CB:DF:E7:3C:1F:11:FE:9B:A7:86:26
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       15E07E8B48F77214395DB0249DE11D4DEF8182F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/B6F35E3DC36AD69B86CBDFE73C1F11FE9BA78626.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 May 2023 18:37:45 +0000
Certificate not after:    Fri 24 May 2024 18:42:45 +0000
Subordinate resources:    AS: 53230
                          IP: 45.238.128.0/22
                          IP: 177.10.0.0/20
                          IP: 177.44.208.0/21
                          IP: 2804:2d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e0:7e:8b:48:f7:72:14:39:5d:b0:24:9d:e1:1d:4d:ef:81:82:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 26 18:37:45 2023 GMT
            Not After : May 24 18:42:45 2024 GMT
        Subject: CN=B6F35E3DC36AD69B86CBDFE73C1F11FE9BA78626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:a0:33:68:98:d6:3d:eb:54:3a:6d:62:0c:
                    12:af:c7:e6:85:d0:44:e2:03:4f:9a:d7:ec:a5:81:
                    89:43:fc:23:0c:a7:d2:8d:37:80:c1:92:01:0f:eb:
                    70:a2:a0:cf:9f:b9:bf:6f:d8:81:1b:0c:15:ab:ab:
                    1f:32:99:66:ac:1e:a1:a1:05:46:06:06:64:d7:dc:
                    1a:85:f9:c7:c1:a2:d7:65:76:fa:d5:ec:2e:25:01:
                    b4:a1:01:a3:b7:04:62:cf:42:a3:7e:af:a0:57:eb:
                    8d:dd:5e:a9:4c:d9:20:d4:30:2e:46:28:70:dd:af:
                    ba:3e:39:f8:e7:0d:7e:93:26:b9:bb:a1:8a:27:12:
                    83:97:f5:d0:ba:95:61:0f:c3:b3:0b:f1:88:d9:42:
                    66:2b:97:56:8e:3d:d0:bf:b4:38:8e:53:0a:ba:83:
                    87:2d:69:55:0a:be:aa:ea:3a:1a:04:72:04:53:09:
                    f0:d3:f8:62:46:1d:0c:16:6b:a8:72:99:1e:2b:ab:
                    69:8d:cf:c7:21:ea:87:af:58:f9:71:1c:62:e9:36:
                    00:1b:86:78:33:d1:0c:98:8f:df:31:81:27:58:83:
                    c9:bd:bc:f9:34:8c:c3:61:06:f6:33:ba:d6:03:8e:
                    87:61:b8:c7:39:bb:5d:60:29:11:05:72:f8:21:0a:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:F3:5E:3D:C3:6A:D6:9B:86:CB:DF:E7:3C:1F:11:FE:9B:A7:86:26
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/B6F35E3DC36AD69B86CBDFE73C1F11FE9BA78626.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.128.0/22
                  177.10.0.0/20
                  177.44.208.0/21
                IPv6:
                  2804:2d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53230

    Signature Algorithm: sha256WithRSAEncryption
         68:1b:9f:96:c3:06:4e:c6:51:b2:90:22:bb:29:7a:b4:1f:fd:
         7d:35:5f:22:51:ef:8f:61:b5:be:53:3a:59:b2:c9:5e:44:e1:
         f5:4f:6d:8a:f5:23:75:de:13:11:cf:cb:43:5d:e3:9f:46:d4:
         69:1c:ec:e6:f8:78:1b:04:a8:ab:ca:de:65:36:b7:c0:f7:ef:
         0e:6c:76:4c:88:d4:bd:78:08:24:67:ec:fc:13:f6:f3:54:ef:
         3e:34:d9:9f:de:ac:8a:a9:2a:00:1d:6f:86:ed:bf:6e:61:a3:
         4c:93:fb:65:c8:d5:00:e5:73:20:e0:46:9a:da:62:a5:45:4f:
         41:b1:13:85:d4:6a:93:28:dd:af:06:e0:77:0c:5c:8b:55:b0:
         58:ee:6f:9f:16:6c:2e:55:82:fb:3e:f0:0d:a6:a2:a8:ef:fd:
         52:13:72:75:5d:6e:63:70:f6:2d:05:f9:e2:55:f1:f8:8e:8d:
         fe:89:d5:c5:54:ee:0d:fc:04:54:f6:c3:c3:ed:01:61:1e:6c:
         a0:06:8b:00:ff:88:b9:ee:2b:3f:9b:db:d4:2a:a9:c9:58:ca:
         ea:29:64:ba:b3:84:57:fa:00:1c:ed:64:1f:26:4a:a2:a5:d7:
         80:2b:7d:f7:24:ce:b1:b4:ed:70:ec:64:c2:bc:c4:ad:97:26:
         d9:03:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org