Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D6C93E9CAA21C81F5579A3C8BD4B1B9B8A77376B.cer
File:                     D6C93E9CAA21C81F5579A3C8BD4B1B9B8A77376B.cer (raw, json)
Hash identifier:          nG9kIz1Y6jHaRVJMXOOrMqG5yCeMRTWnt7SXP4ZnL3s=
Subject key identifier:   D6:C9:3E:9C:AA:21:C8:1F:55:79:A3:C8:BD:4B:1B:9B:8A:77:37:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D0DE08B8C9F27FBD1C5F3BFD26D7A406856347A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/D6C93E9CAA21C81F5579A3C8BD4B1B9B8A77376B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Aug 2023 21:38:13 +0000
Certificate not after:    Wed 21 Aug 2024 21:43:13 +0000
Subordinate resources:    AS: 263940
                          IP: 138.185.252.0/22
                          IP: 2804:2818::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0d:e0:8b:8c:9f:27:fb:d1:c5:f3:bf:d2:6d:7a:40:68:56:34:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 23 21:38:13 2023 GMT
            Not After : Aug 21 21:43:13 2024 GMT
        Subject: CN=D6C93E9CAA21C81F5579A3C8BD4B1B9B8A77376B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:e7:63:aa:c5:a2:bb:bc:1d:17:7b:d3:69:
                    06:a4:36:8f:fd:77:15:ab:b5:70:d3:90:60:43:c1:
                    70:9f:42:da:e6:60:46:8d:ad:0d:ac:70:b2:4e:dc:
                    8c:94:b0:74:f8:52:1d:23:38:94:d6:0f:9a:58:7f:
                    2b:a5:9b:89:4d:e4:ab:8c:f4:50:00:f4:18:80:c2:
                    2e:68:88:54:bb:39:d9:f5:5e:17:cc:f2:b6:dd:36:
                    ea:1d:82:ed:73:a4:69:c7:68:ed:97:cc:55:66:b9:
                    2b:dd:f0:05:3b:d1:cb:d5:2b:26:ca:86:9f:26:c7:
                    17:04:80:3b:cd:84:97:ac:6c:ac:2c:20:46:9d:46:
                    13:5c:da:52:d6:8b:64:1f:5a:c0:45:27:3b:15:7e:
                    7d:cd:e3:e3:12:95:50:7b:9f:75:98:d2:9b:03:9a:
                    91:81:f5:2b:f9:05:95:01:42:93:bf:21:f0:95:86:
                    4a:5e:4d:85:15:d0:9b:ce:5c:54:f2:b9:ac:e5:d5:
                    26:37:e7:8c:68:fa:9c:3f:28:e2:4d:ce:0c:da:04:
                    04:14:b3:6d:b7:0e:7e:35:ff:07:01:59:d5:09:43:
                    c9:89:93:b0:db:d9:32:0c:74:c0:5f:04:56:c8:82:
                    e0:ef:47:6c:af:d1:43:d6:29:9a:79:67:bf:bc:84:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:C9:3E:9C:AA:21:C8:1F:55:79:A3:C8:BD:4B:1B:9B:8A:77:37:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/D6C93E9CAA21C81F5579A3C8BD4B1B9B8A77376B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.252.0/22
                IPv6:
                  2804:2818::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263940

    Signature Algorithm: sha256WithRSAEncryption
         6a:1c:01:fc:44:f7:2d:bd:a0:e2:22:b6:3a:d2:b9:93:e9:73:
         ed:f7:80:d4:cc:fc:54:b4:de:a4:c7:5f:31:e9:60:8f:bc:34:
         ab:af:29:a9:2e:57:25:92:71:29:d3:eb:33:20:ef:e3:c9:48:
         94:a2:71:e2:5c:25:2a:f7:19:12:d1:91:6e:2c:45:2b:80:5b:
         a0:3d:96:c2:2b:d7:c2:4e:bb:91:b8:8b:d0:d2:cc:91:79:26:
         05:2e:25:e4:bc:ca:a2:a4:38:db:fb:72:b5:63:79:3a:11:a1:
         33:36:3d:41:fe:01:a8:ec:ef:2b:aa:a5:02:05:07:a5:82:50:
         80:da:bd:2a:35:11:83:fe:61:38:11:98:f1:b2:d9:f9:31:59:
         8f:b8:24:da:47:2b:7e:3f:a4:4a:6c:28:4c:e5:95:53:bf:a3:
         a3:46:02:54:a5:ed:e4:27:8b:43:03:71:bf:56:d0:9d:6e:46:
         44:d9:5a:fc:46:81:b2:24:1f:03:de:60:16:fa:ec:6a:60:de:
         df:c8:09:2d:42:8f:7a:08:93:18:d9:e5:ab:f4:56:37:f8:24:
         c2:43:fe:11:72:5b:c0:1e:68:77:c6:11:8f:7d:ec:53:db:db:
         55:85:78:b3:23:9a:68:57:94:02:cc:12:89:42:10:58:18:a9:
         c9:74:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org