Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41.cer
File:                     C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41.cer (raw, json)
Hash identifier:          ZUabDcyqaQjC+NbGxhHAr1KiDBmTiCcteAPZ06rPla4=
Subject key identifier:   C0:06:CA:8A:3F:C1:CE:6D:F1:B5:B0:6B:E6:A6:FF:C6:C9:DB:FA:41
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E6C0B16C21AFBE0A032343677CFB9BC9EE48807
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 17:34:10 +0000
Certificate not after:    Thu 07 Nov 2024 17:39:10 +0000
Subordinate resources:    AS: 267008
                          IP: 45.227.20.0/22
                          IP: 2804:46bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6c:0b:16:c2:1a:fb:e0:a0:32:34:36:77:cf:b9:bc:9e:e4:88:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 17:34:10 2023 GMT
            Not After : Nov  7 17:39:10 2024 GMT
        Subject: CN=C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:f5:1f:18:67:2a:a7:42:63:27:6d:7f:e4:
                    1d:be:5e:e3:38:83:21:39:8d:7c:f8:b2:7d:39:c2:
                    3c:83:63:5f:a5:a4:31:f8:d7:35:73:52:89:a0:39:
                    35:1a:36:ed:be:b7:91:af:f2:3f:cc:12:d4:0c:15:
                    c1:fa:67:6c:6c:11:ef:c2:5f:30:96:f8:69:0a:7d:
                    ef:f6:33:f2:31:03:a2:53:53:48:7b:ab:fd:49:00:
                    e6:3f:c5:03:fc:f1:3c:43:4b:fc:57:2d:d3:39:8a:
                    4d:5e:43:0d:33:cd:e3:2b:2b:c7:ca:d5:2e:9b:79:
                    a8:03:c3:81:0e:3a:7f:b9:93:0a:6c:ef:ba:ee:e7:
                    db:7c:7e:29:e5:b8:3c:f3:a7:98:86:f5:ce:2a:47:
                    ab:d1:7e:4b:dc:57:de:8e:ff:38:ab:ca:c8:00:d3:
                    57:e1:a9:a4:08:f8:b5:d7:09:8a:bd:23:f0:3d:71:
                    bf:d1:33:ea:da:0c:5f:c8:05:b7:db:3c:59:6b:60:
                    d3:3c:16:02:87:b1:74:30:ff:a7:d3:dc:b6:46:db:
                    b4:72:18:81:9c:2c:40:61:d0:8a:b2:8d:57:87:09:
                    96:fb:b0:76:72:b0:2c:44:6d:c4:66:81:a2:42:2b:
                    0e:7a:a1:7b:be:7b:62:94:25:67:23:ac:dd:ac:28:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:06:CA:8A:3F:C1:CE:6D:F1:B5:B0:6B:E6:A6:FF:C6:C9:DB:FA:41
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.20.0/22
                IPv6:
                  2804:46bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267008

    Signature Algorithm: sha256WithRSAEncryption
         77:b0:55:b6:42:ba:31:88:bf:42:e1:12:79:eb:3f:5f:37:44:
         b9:c7:dc:e3:5f:31:1d:23:6b:1f:96:d9:34:9e:9f:23:16:c0:
         d3:6c:f5:f8:03:4e:3b:0e:3b:ce:41:ae:0f:83:c9:27:7c:8d:
         a0:da:8f:89:13:9f:6d:ab:66:09:0e:42:43:09:dc:84:06:20:
         72:59:ef:f1:62:6b:1e:52:73:5f:45:4f:0d:ca:14:92:bf:69:
         24:7b:bc:30:41:ef:16:9a:5e:b0:84:97:da:72:63:b2:bb:07:
         06:ec:8c:a7:44:67:18:f8:30:f0:fd:9b:b4:24:c6:ea:3e:17:
         5d:04:bc:9f:22:d6:77:bf:b0:58:92:25:a1:2f:42:08:50:4d:
         c1:98:70:2a:e0:6b:59:1e:24:87:85:58:a7:c1:10:c8:80:9c:
         ce:c7:2e:8e:27:67:13:9e:52:03:aa:6f:61:76:5e:e7:cd:e6:
         3a:f0:82:00:b8:21:9f:c5:5a:30:f0:0c:2d:48:72:40:4c:a3:
         ed:28:b2:52:e4:11:39:51:b0:f7:28:c5:f7:b9:db:99:72:2d:
         5e:eb:ca:68:87:e6:90:74:4d:94:54:cb:5d:e3:61:85:97:8a:
         47:a8:49:6d:de:c2:e4:a6:65:a4:f8:19:0f:f9:03:54:ca:7f:
         34:d1:17:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org