Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87.cer
File:                     F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87.cer (raw, json)
Hash identifier:          yqrjhGeRmy+XxwRjKyMyGRzR/XRE7QSa9JitzfLD068=
Subject key identifier:   F6:FE:6A:E9:BC:7D:26:C5:D8:E1:AB:5E:62:F6:81:1F:19:F8:FF:87
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B8A3140E7945329B74BEF5FA62250FE739622BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CBKGRcbJidkpSCdMFzDf549Q17pzLdGzLrggpSRc6cz6/0/F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CBKGRcbJidkpSCdMFzDf549Q17pzLdGzLrggpSRc6cz6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 16:57:57 +0000
Certificate not after:    Thu 20 Feb 2025 17:02:57 +0000
Subordinate resources:    AS: 268193
                          IP: 45.235.168.0/22
                          IP: 2804:4d64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8a:31:40:e7:94:53:29:b7:4b:ef:5f:a6:22:50:fe:73:96:22:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 16:57:57 2024 GMT
            Not After : Feb 20 17:02:57 2025 GMT
        Subject: CN=F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:75:11:86:1b:34:14:34:72:c7:32:1d:1d:
                    a7:49:ba:47:94:08:a7:f7:ff:d2:c1:39:e8:2a:0f:
                    bf:3b:a1:ea:30:2c:8f:57:74:33:e6:8a:e3:2f:97:
                    93:2f:b6:c7:d5:4c:e6:79:38:b7:ef:33:67:14:7c:
                    e0:5c:04:9e:c6:05:11:65:af:57:ea:29:03:15:12:
                    ab:39:18:bd:e9:b7:ea:45:aa:ad:b8:c4:42:99:32:
                    cb:8e:e1:b6:9e:d0:15:c8:e8:1d:cf:22:5d:e9:bb:
                    3d:4b:46:15:f8:b5:ae:7d:0e:2e:03:3e:fa:fc:f2:
                    3f:38:14:d4:d9:47:22:8b:e4:d7:d1:ce:0b:fe:cf:
                    db:ba:1c:33:86:f3:92:58:41:96:da:b5:04:6f:4e:
                    a3:8f:b7:9e:95:c8:3a:e7:90:17:6b:56:77:bb:e4:
                    f6:0a:72:0d:ad:7c:07:af:44:49:8c:c0:e0:b7:4e:
                    7a:81:fd:ac:e5:02:3a:57:1e:5e:db:b7:3d:a3:76:
                    95:ed:7e:06:4e:5f:e3:ec:be:da:85:e4:1c:ea:c7:
                    03:f4:0d:cd:84:d3:60:f1:65:08:d1:03:c0:62:1c:
                    9f:e0:1f:d8:89:52:f1:1c:9e:cd:9e:63:52:85:31:
                    c5:32:bf:9b:c9:a7:ca:4b:a3:ee:09:e4:84:cb:18:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:FE:6A:E9:BC:7D:26:C5:D8:E1:AB:5E:62:F6:81:1F:19:F8:FF:87
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CBKGRcbJidkpSCdMFzDf549Q17pzLdGzLrggpSRc6cz6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CBKGRcbJidkpSCdMFzDf549Q17pzLdGzLrggpSRc6cz6/0/F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.168.0/22
                IPv6:
                  2804:4d64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268193

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:7f:4d:40:83:e2:fb:58:cb:2b:97:f2:bd:d5:cc:2c:1d:
         58:fa:0d:fe:8a:a3:44:6e:1e:0d:65:1d:39:13:c4:8d:8d:16:
         91:ef:3f:0c:81:9c:df:62:c0:d2:2a:7d:be:c6:45:1a:8f:dc:
         7b:21:a3:8b:0d:5f:3e:f6:46:d5:c5:7f:65:e6:4b:f1:f1:df:
         61:2d:42:1a:a5:63:ed:ce:70:b7:d7:36:7c:f8:42:5d:e8:c7:
         f4:26:24:a1:67:68:62:42:3d:09:cd:4c:8f:1b:24:91:1d:b7:
         39:76:00:ee:25:6f:00:ab:2a:9f:d3:9c:fc:65:2f:3f:b6:04:
         4d:26:d4:7e:ef:62:4d:b1:07:9e:3e:ed:bb:be:40:9a:19:08:
         df:d9:92:38:b1:45:ab:58:6f:c1:bf:55:30:e4:be:78:01:5e:
         05:d6:2f:66:5e:56:b7:3a:41:9b:59:77:a5:31:bb:5c:a7:f9:
         b4:61:65:13:c5:79:b6:3f:ae:37:78:a9:41:96:49:3e:2c:87:
         5f:cd:81:93:cd:dd:9a:1c:05:cd:0c:0a:fc:84:ea:08:f2:0b:
         98:8d:79:47:40:11:1f:fe:b5:02:83:49:44:58:9c:67:9f:08:
         29:0a:8d:1c:35:af:5e:44:2a:ee:e8:74:63:91:7b:84:53:f2:
         16:28:59:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org