Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer
File:                     C6D220159E081BD89DCE356728E04C7EC1441DFB.cer (raw, json)
Hash identifier:          Bt/5k10EjmH2a0Ath1WjoGgsdZlyi5F9ddxH6e2Mzys=
Subject key identifier:   C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F08FCD8FD4C48A252583E063BA28CEE21D0ED91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Nov 2022 21:01:44 +0000
Certificate not after:    Mon 13 Nov 2023 21:06:44 +0000
Subordinate resources:    AS: 267189
                          IP: 45.231.84.0/22
                          IP: 2804:4988::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:08:fc:d8:fd:4c:48:a2:52:58:3e:06:3b:a2:8c:ee:21:d0:ed:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 14 21:01:44 2022 GMT
            Not After : Nov 13 21:06:44 2023 GMT
        Subject: CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:c9:81:fa:3d:c1:7b:8a:63:4a:d5:f6:30:
                    49:e8:f5:1e:fd:42:80:75:ee:30:4c:bf:30:0c:a6:
                    c0:55:34:60:94:09:9a:eb:5c:17:3a:38:83:7c:a5:
                    50:31:17:a9:e5:2e:cb:64:c5:6f:d6:01:51:f8:ba:
                    12:f3:99:e4:5a:ce:21:38:f2:b0:9e:b0:41:6b:8e:
                    d4:b4:ae:ed:34:6c:01:9a:71:3b:4c:79:ce:59:69:
                    58:37:c4:f9:bf:1c:77:cc:38:89:30:8a:84:77:49:
                    1d:1f:dc:09:3c:22:72:c1:62:cb:7f:14:04:1b:d7:
                    b8:7b:32:79:0a:a4:68:41:e6:78:15:9f:05:5f:a8:
                    c3:0c:a2:9d:01:d2:6b:86:f6:7d:80:52:bf:b4:a8:
                    d6:4e:bb:f8:19:c3:a9:2c:66:a5:c2:2b:bf:ce:4f:
                    e3:d2:8b:c9:59:16:a6:c1:be:de:ee:71:f5:fd:37:
                    ab:36:9e:9e:37:f9:b2:4b:82:73:68:ba:b2:41:0d:
                    04:52:e1:2f:22:c9:d2:be:f7:47:7e:d3:ed:4e:17:
                    3d:22:6d:e3:4a:98:10:f8:ab:38:42:70:de:50:e4:
                    3e:1f:cc:d3:89:1f:5a:44:13:c9:0f:33:ab:32:af:
                    e1:74:98:56:4b:09:06:25:cb:fa:00:74:db:3d:7f:
                    93:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.84.0/22
                IPv6:
                  2804:4988::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267189

    Signature Algorithm: sha256WithRSAEncryption
         0c:53:38:d1:c2:52:b4:c9:b7:15:cc:4c:83:02:b6:16:6f:fd:
         e4:e5:7a:20:e3:fe:c0:49:35:7c:68:3f:dc:ce:20:82:7b:ac:
         08:67:f5:1f:96:a9:6b:3f:90:fd:6b:56:c6:47:cc:55:ec:54:
         ae:74:29:33:47:c7:81:e4:01:b2:8e:a0:82:96:71:5d:7a:4a:
         00:64:bf:93:fb:5b:5a:17:b0:07:f6:68:be:c8:15:1c:29:f7:
         c3:f1:b8:96:76:d5:35:9e:be:03:8c:66:24:6a:23:32:cf:ba:
         e6:c8:5e:37:03:ca:fb:2d:37:7e:38:04:47:2a:a0:b1:eb:53:
         b6:77:b3:87:02:99:79:94:7c:b8:6b:0c:2b:9d:df:4c:33:7d:
         2b:be:e3:c2:55:73:0a:90:8f:5d:5f:04:68:25:f7:ed:f1:70:
         6b:4b:1a:33:40:35:fa:2a:a9:eb:c6:34:78:57:1f:cf:67:c1:
         24:65:c0:28:12:de:a3:8a:9c:c3:87:c7:60:6a:ba:bf:29:d1:
         eb:52:c8:d4:38:78:83:71:74:54:a7:d9:c8:8c:03:cd:d5:09:
         05:dc:85:85:50:83:48:94:62:f0:f1:e0:fd:cd:54:a3:7b:4b:
         19:c2:c1:63:71:74:d6:a7:f9:26:66:36:36:e3:3f:79:5a:3f:
         7b:ae:39:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org