Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7CEFF9F2E335DD8182979A1A8415EDA8724E79A1.cer
File:                     7CEFF9F2E335DD8182979A1A8415EDA8724E79A1.cer (raw, json)
Hash identifier:          JGFIFtEcG/ev7N1JgVsMps7M8aRFf0EWqfQBJUheuIA=
Subject key identifier:   7C:EF:F9:F2:E3:35:DD:81:82:97:9A:1A:84:15:ED:A8:72:4E:79:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D925B93A3B7CB68DA633375F74A7921B4126033
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/7CEFF9F2E335DD8182979A1A8415EDA8724E79A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Oct 2023 19:07:35 +0000
Certificate not after:    Thu 17 Oct 2024 19:12:35 +0000
Subordinate resources:    AS: 52612
                          IP: 138.94.116.0/22
                          IP: 170.79.248.0/22
                          IP: 177.124.20.0/22
                          IP: 2804:22fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:92:5b:93:a3:b7:cb:68:da:63:33:75:f7:4a:79:21:b4:12:60:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 19 19:07:35 2023 GMT
            Not After : Oct 17 19:12:35 2024 GMT
        Subject: CN=7CEFF9F2E335DD8182979A1A8415EDA8724E79A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:dc:35:32:98:b7:0c:ca:50:37:f1:d0:cd:
                    27:ca:73:18:20:57:d5:2a:3f:06:06:7f:bf:e3:7f:
                    ce:d3:ea:2e:95:a2:6d:58:37:36:80:e4:12:08:d4:
                    3e:b1:cf:df:ec:95:31:b1:4c:24:52:98:64:63:4b:
                    1f:10:76:31:37:d7:49:ff:83:56:d1:28:4d:bb:3a:
                    38:81:39:14:6a:e3:c8:09:47:ac:2a:95:6e:af:11:
                    d0:41:b2:a9:3a:39:ed:65:8c:54:17:8c:1e:65:d7:
                    e8:de:b7:80:c9:42:ce:c3:7d:5e:4e:3d:96:74:ac:
                    28:af:8f:23:a8:a0:4b:9d:81:3d:06:3c:7f:3d:22:
                    0b:31:c8:c2:b5:16:bf:ee:fd:8a:b7:b9:64:c9:d2:
                    c7:b3:5d:14:95:6c:86:24:84:dc:ad:5d:6a:5b:6a:
                    73:cb:00:5b:70:83:bb:74:6b:b0:4d:e2:63:aa:f8:
                    5d:33:e6:4d:ff:06:f4:e3:fa:15:86:1e:48:05:e3:
                    bb:2a:c2:62:4a:93:87:f1:ab:c0:a6:8d:b6:5c:9c:
                    63:d4:c8:97:81:64:8b:77:53:ea:66:e4:da:64:54:
                    ab:17:d1:b7:60:59:3a:70:07:9c:87:cf:57:72:b1:
                    35:19:47:af:45:6c:d8:99:fa:d5:48:67:40:9f:b9:
                    7a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:EF:F9:F2:E3:35:DD:81:82:97:9A:1A:84:15:ED:A8:72:4E:79:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/7CEFF9F2E335DD8182979A1A8415EDA8724E79A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.116.0/22
                  170.79.248.0/22
                  177.124.20.0/22
                IPv6:
                  2804:22fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52612

    Signature Algorithm: sha256WithRSAEncryption
         10:58:ed:67:0a:b6:9d:e8:6a:66:83:cb:35:a8:ce:66:76:b2:
         8e:0d:3d:6f:03:dc:76:4a:f0:d2:9b:47:9e:3c:94:44:69:2c:
         0a:a0:c3:c6:3c:f6:bd:23:22:e6:91:72:a1:d6:91:08:31:eb:
         ca:39:81:12:d6:31:4e:1d:80:99:c8:5a:73:1f:e3:47:49:4f:
         18:c2:50:77:7d:2d:be:54:3b:10:c4:88:52:aa:7a:9e:06:f3:
         7c:db:ad:63:09:04:dc:ca:04:f5:7e:eb:70:e2:c9:46:d6:4f:
         0d:05:91:a5:8b:d8:3f:49:5a:ff:30:ac:56:6e:21:4c:fa:c0:
         5e:2d:c5:5a:9e:14:e2:0d:f6:fb:1e:1e:9c:c4:26:93:93:fb:
         02:68:66:3a:4d:7d:01:b7:68:b8:e3:c2:04:a2:e8:10:16:7b:
         41:bc:7d:ef:7e:3e:2f:bb:33:79:e3:ac:75:f0:54:f2:51:2d:
         14:7d:06:23:db:fb:be:74:02:ef:20:23:4d:dc:a6:c3:98:91:
         5c:1f:c9:59:19:b1:4b:2b:e6:7d:7d:ce:20:4c:4f:40:d0:98:
         d6:5b:c0:5a:ea:04:75:18:5d:15:1c:cd:29:1c:00:46:06:ad:
         01:4e:22:20:72:a0:63:12:38:44:9a:92:9b:06:36:e4:74:2d:
         8b:8c:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:40 2024 by rpki-client on console-ams.rpki-client.org