Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.cer
File:                     C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.cer (raw, json)
Hash identifier:          apYM8tT2SZ1b1hgyanp5NDwATTwLnEWSe7aGXG5pNk8=
Subject key identifier:   C0:6C:9A:92:8E:7D:AE:51:A6:50:3D:DC:A4:B5:F7:97:52:FF:A9:42
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       270950FA025E10A6165FA6C4CC8C4EF7A4D7FE9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 17:18:24 +0000
Certificate not after:    Fri 26 Jul 2024 17:23:24 +0000
Subordinate resources:    AS: 268261
                          IP: 45.236.196.0/22
                          IP: 2804:4e70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:09:50:fa:02:5e:10:a6:16:5f:a6:c4:cc:8c:4e:f7:a4:d7:fe:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 28 17:18:24 2023 GMT
            Not After : Jul 26 17:23:24 2024 GMT
        Subject: CN=C06C9A928E7DAE51A6503DDCA4B5F79752FFA942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:a9:22:49:7c:1c:0b:0f:04:51:b8:d0:75:
                    f4:c1:94:14:22:6e:af:be:66:56:8a:9e:f8:d2:00:
                    81:1e:15:01:7c:a7:84:3f:3d:5c:2a:27:20:5d:bb:
                    a8:47:dd:4f:29:0c:a8:f0:aa:82:76:71:50:29:97:
                    34:cc:fd:66:7e:c7:f1:30:58:73:94:3c:61:16:5e:
                    88:91:4c:b8:d9:54:2e:0d:4b:ce:65:4e:8f:ab:9f:
                    c7:e5:07:7f:ae:60:8a:e1:ea:43:57:b8:03:f8:e2:
                    9b:93:9e:b9:f9:1f:93:e4:14:d1:d4:3b:57:e5:46:
                    78:7f:2b:a4:c5:a5:e8:39:be:7e:11:d0:04:27:4a:
                    75:8d:d9:c4:6d:84:fd:7d:1e:12:c9:9d:31:2b:f0:
                    8b:5d:56:81:51:b8:51:e8:dc:47:0b:2c:78:35:11:
                    3c:4e:08:cd:70:ee:9b:d2:30:55:d2:aa:2d:1e:43:
                    2c:45:3c:3e:aa:12:6e:50:b4:9a:50:8e:cb:1f:df:
                    66:ca:a3:69:5e:bd:6f:90:76:fd:1e:a6:7d:40:a4:
                    a4:25:a1:5d:58:c7:30:0f:a1:2f:3c:65:7c:fe:0a:
                    72:08:a5:51:81:f4:02:60:3f:80:a4:62:7e:f1:74:
                    52:e0:c6:51:e0:64:2f:64:15:3c:81:bc:b6:ca:f6:
                    0b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:6C:9A:92:8E:7D:AE:51:A6:50:3D:DC:A4:B5:F7:97:52:FF:A9:42
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.196.0/22
                IPv6:
                  2804:4e70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268261

    Signature Algorithm: sha256WithRSAEncryption
         6a:da:03:a0:3e:dc:e8:c3:a6:61:c7:1d:b1:78:ac:c4:db:38:
         a2:d6:45:ab:ff:b0:ec:3a:bc:2f:42:3f:15:83:35:c9:fd:18:
         43:7b:3c:60:b7:c3:93:61:6b:e4:ed:34:21:80:66:3d:36:e0:
         38:d0:c9:83:4d:c0:61:e3:f8:bf:8c:b6:ce:2b:b1:01:de:04:
         86:2d:03:9c:2f:55:89:3e:73:4f:10:88:4a:de:e5:6c:26:70:
         ff:7a:6c:26:14:a8:a4:fc:32:5a:ba:71:7c:0f:e9:e6:f3:7f:
         ac:15:57:e0:36:02:7e:41:9e:a6:43:80:08:f1:05:d2:ac:12:
         52:f4:0a:44:c8:70:17:f7:04:81:f3:33:e9:21:d2:5c:e3:ae:
         0a:ec:b4:8d:d8:39:cf:40:df:6f:15:1a:b5:e2:8c:a6:1e:dd:
         d1:35:d1:79:5e:6e:1b:ca:13:5b:23:87:8f:bb:8d:f1:fc:d5:
         56:7b:28:b4:ee:f3:e1:14:6c:6e:06:2d:72:44:5d:86:53:a5:
         4f:cc:3d:88:c3:c6:68:80:44:d3:fd:3f:51:44:45:2a:a1:70:
         55:f3:de:77:2b:89:c3:6d:19:12:7c:15:20:b4:2d:83:07:81:
         82:f7:40:86:d9:16:84:d4:16:02:cd:f3:3e:3d:a2:09:30:42:
         97:98:af:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org