Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5.cer
File:                     CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5.cer (raw, json)
Hash identifier:          JPzvrTWemtGwdNJOTr7yZiuZvwLz/uvGI+JLXHT0fY8=
Subject key identifier:   CF:6E:BB:49:C2:AE:6F:92:DE:C6:A1:B3:B2:E2:74:9C:1F:53:9A:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F35EC4C2A58744DFD51B09CC6A589C70EF6806E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 11:40:25 +0000
Certificate not after:    Wed 12 Feb 2025 11:45:25 +0000
Subordinate resources:    AS: 270450
                          IP: 200.50.212.0/22
                          IP: 2804:6c2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:35:ec:4c:2a:58:74:4d:fd:51:b0:9c:c6:a5:89:c7:0e:f6:80:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 11:40:25 2024 GMT
            Not After : Feb 12 11:45:25 2025 GMT
        Subject: CN=CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:c2:11:5e:d8:e4:24:57:41:ee:f7:b9:1e:
                    dd:06:0f:d1:f8:91:00:da:53:57:0d:76:83:bb:ec:
                    4c:90:39:46:7a:1b:1f:dd:66:58:60:97:40:4a:85:
                    b7:a6:3c:8d:bf:16:bd:49:98:f2:b5:3b:8e:36:f8:
                    cb:db:61:bf:7b:9a:01:45:38:52:47:cc:e4:0e:5c:
                    af:e1:51:57:9b:c6:ed:03:58:e4:c4:e1:ee:20:84:
                    3d:ad:7d:08:81:70:f6:2f:ab:ba:89:27:65:d0:69:
                    d9:6a:24:1b:24:2f:36:5c:8f:18:6f:20:5a:c8:0c:
                    93:71:e3:c1:46:1f:68:24:7a:c4:33:f9:8a:04:d4:
                    9e:23:95:80:e1:03:6d:6e:ea:0d:f1:71:a8:c8:ea:
                    97:b7:59:5d:b1:ad:52:2e:dc:64:41:ef:fa:94:35:
                    66:2d:35:de:49:04:54:58:df:05:08:1f:29:6e:c6:
                    2c:6d:5a:a9:b1:98:76:19:b4:07:8c:8a:02:10:3e:
                    0d:bf:31:e1:a3:4e:fc:3b:d4:26:93:7b:b8:6e:a1:
                    68:27:8d:2d:96:84:7b:d6:fe:b1:69:b2:03:00:80:
                    4c:c8:1c:55:86:9b:9c:3e:9f:7a:d1:55:0a:c1:10:
                    8e:1c:d7:65:4c:47:24:3d:3f:d0:98:77:98:ec:89:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:6E:BB:49:C2:AE:6F:92:DE:C6:A1:B3:B2:E2:74:9C:1F:53:9A:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.212.0/22
                IPv6:
                  2804:6c2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270450

    Signature Algorithm: sha256WithRSAEncryption
         65:25:00:f0:b6:2d:6e:ad:7c:e2:84:4a:36:6a:86:54:11:b9:
         48:b5:de:07:8f:90:9d:8d:33:72:6c:82:23:3f:61:b6:da:45:
         d5:0e:73:df:5c:96:a9:a8:1d:f2:b6:a9:c5:f1:51:73:0b:77:
         68:c5:c3:c1:3a:ba:9f:06:7c:82:3a:dc:7f:f1:69:4c:01:66:
         6c:f0:84:cd:da:30:7c:9e:19:97:70:46:c0:04:3e:74:cc:34:
         ff:11:88:e0:ee:ba:56:3b:6b:83:ab:26:91:2c:c4:ad:1a:6f:
         b0:b6:37:fa:31:e8:05:00:98:e6:eb:49:9f:3a:35:4a:40:6c:
         e7:3c:58:45:9a:77:6d:76:e2:6f:e5:d5:a0:d5:ce:85:07:e1:
         88:2f:b3:97:64:91:2d:12:78:d1:92:c5:ad:3f:fe:3f:f7:e7:
         81:8d:5a:db:e9:09:6f:49:24:95:01:ab:03:a5:64:b9:78:79:
         0e:ba:fe:8f:1f:80:54:ed:5a:47:4e:39:a0:61:9e:10:f9:a4:
         2a:a7:9b:5c:52:9c:67:c2:34:1f:b1:f1:5f:f9:67:97:da:b6:
         e6:b8:81:96:db:2a:a0:7b:4a:20:f3:26:60:37:3e:9c:30:34:
         7a:11:b6:9a:2b:41:41:16:95:48:5f:5d:31:6e:b5:4b:64:9b:
         6d:77:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org