Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.cer
File:                     C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.cer (raw, json)
Hash identifier:          hhdrykrOrDaBH65gMrUHXcjaTCqS9iffxW2p7u+rpl8=
Subject key identifier:   C6:FD:89:54:9D:5B:EF:0C:2C:05:BB:4F:5E:25:3D:1C:02:EE:FD:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4FCE01A65F7BA95F64E83D3CA5810CAC933FDD00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 18:15:04 +0000
Certificate not after:    Mon 21 Oct 2024 18:20:04 +0000
Subordinate resources:    AS: 28334
                          IP: 168.227.240.0/22
                          IP: 177.87.88.0/22
                          IP: 186.194.64.0/20
                          IP: 189.50.224.0/19
                          IP: 2804:1b5c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ce:01:a6:5f:7b:a9:5f:64:e8:3d:3c:a5:81:0c:ac:93:3f:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 18:15:04 2023 GMT
            Not After : Oct 21 18:20:04 2024 GMT
        Subject: CN=C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:43:d4:8d:04:04:bf:b8:45:9e:f0:87:d9:
                    c4:2c:7f:d4:9a:2b:89:47:ff:92:b7:c5:bc:1a:5a:
                    9b:28:3f:44:55:ff:3a:7c:3b:c5:7c:b7:a0:70:12:
                    a0:9d:25:c1:f0:6d:41:ff:fa:f4:a4:8a:28:50:5d:
                    01:4d:87:37:2a:34:33:61:29:a4:14:0a:db:9e:dd:
                    da:db:bc:b7:6e:1d:47:74:1f:86:0a:82:53:55:5d:
                    51:25:df:81:8f:36:80:6f:07:91:20:8e:c6:3b:a9:
                    20:a9:6e:62:f8:8d:22:46:1e:5d:e3:97:f5:91:06:
                    18:0d:51:ad:c9:32:aa:56:8b:01:15:5a:4f:ac:94:
                    7c:b4:ec:4d:e0:ab:e6:0b:cd:99:e0:68:e0:56:73:
                    b5:ca:b2:c3:9b:0a:cc:44:db:53:ad:02:07:dc:76:
                    27:35:fb:5c:5a:69:c0:63:db:d4:74:10:dd:f0:16:
                    f0:10:13:ae:5e:6c:f4:07:48:4a:93:65:1c:d5:93:
                    5c:30:3a:3b:62:b1:96:44:66:82:3e:0f:2b:b7:22:
                    f1:cb:3a:c6:b3:90:78:82:d0:fb:1a:2f:f8:40:dc:
                    27:68:fa:a8:15:e4:1d:fa:c1:12:7c:23:cd:01:9a:
                    6b:d5:db:ce:e7:51:e8:3d:ab:3a:04:d6:97:f1:96:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:FD:89:54:9D:5B:EF:0C:2C:05:BB:4F:5E:25:3D:1C:02:EE:FD:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.240.0/22
                  177.87.88.0/22
                  186.194.64.0/20
                  189.50.224.0/19
                IPv6:
                  2804:1b5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28334

    Signature Algorithm: sha256WithRSAEncryption
         26:aa:e3:30:8d:0f:38:4f:0f:ba:96:a3:eb:39:d2:fa:5d:7a:
         f2:9b:54:81:52:3a:4a:78:31:1b:45:4a:12:33:d6:8d:be:cf:
         d9:bf:44:4a:a1:d1:0c:43:6e:ad:d6:7c:5b:13:20:a7:d4:37:
         14:29:9f:fc:5a:a0:91:ec:ec:18:6c:8c:e7:76:a9:62:89:04:
         d4:20:1f:12:dd:c6:2e:3e:9f:81:40:9a:26:16:e3:e0:92:b7:
         69:1a:19:c3:ca:c8:a2:0f:51:64:e4:d7:3a:13:4f:c9:e4:05:
         18:6e:68:98:60:e0:0f:cb:5a:a0:e6:7b:d6:d1:6a:90:e5:ff:
         02:27:97:05:6d:c6:fe:c2:1e:fc:e3:5d:bb:29:34:88:42:7c:
         1d:fa:fa:fa:dd:8b:5b:1c:67:64:cf:07:2c:d3:12:c8:c2:f2:
         55:df:b4:4f:54:69:ca:c9:ec:71:d5:09:9f:43:c3:ed:2e:cc:
         43:4d:f3:73:2d:e2:9c:b9:98:fc:bb:59:53:14:f9:e9:79:48:
         0c:98:6a:72:30:54:39:1a:f8:90:eb:79:77:ea:a7:b2:95:25:
         ad:4d:be:4c:ed:10:0f:3f:52:00:24:a0:f1:14:fd:c5:9c:40:
         68:4e:67:5c:0f:39:7e:2d:2b:c0:5f:a7:83:a5:49:78:7c:98:
         58:f5:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org