Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer
File:                     7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer (raw, json)
Hash identifier:          pwW+FhMRY81RIZoGdOCKomTF1ky2xhg3mkhqCrC3dLE=
Subject key identifier:   7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       721616EFCD491633039B4D014AC3C3A7707949B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 18:29:04 +0000
Certificate not after:    Wed 19 Mar 2025 18:34:04 +0000
Subordinate resources:    AS: 269647
                          IP: 45.190.136.0/22
                          IP: 2804:67bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:16:16:ef:cd:49:16:33:03:9b:4d:01:4a:c3:c3:a7:70:79:49:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 18:29:04 2024 GMT
            Not After : Mar 19 18:34:04 2025 GMT
        Subject: CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:eb:ac:3f:e7:d8:8a:4b:59:c8:67:ba:47:
                    8d:fd:0a:8e:cf:b5:a2:e7:d4:61:3b:c2:49:3d:ef:
                    68:4e:3d:83:04:5b:75:99:3c:60:a0:b2:28:91:eb:
                    6f:61:0e:69:37:37:6f:72:36:22:e9:9b:94:78:f9:
                    fe:15:99:7e:8f:38:cf:a2:81:eb:a6:cc:d2:c0:8b:
                    13:60:78:c1:db:1d:12:1b:d1:46:58:de:db:c8:4b:
                    44:17:da:ac:a8:d4:fd:c6:eb:d1:72:51:84:5e:89:
                    e9:6c:28:dc:70:b3:49:21:7f:b9:c3:45:12:57:e7:
                    68:e6:52:2d:67:8e:41:dd:8a:4d:ce:8a:ef:10:41:
                    f7:81:e8:d2:92:c1:7c:23:68:90:0a:ba:b3:12:30:
                    eb:f9:d0:8a:a5:85:62:17:41:d6:14:d9:fb:06:69:
                    8f:51:f5:c3:72:a3:37:7d:bb:e4:c9:04:29:ad:7d:
                    8c:4a:69:7c:c1:4d:18:a3:76:4b:c8:06:74:d0:0a:
                    86:30:d3:4b:d5:bd:d3:6b:d0:2d:ff:ee:2f:68:b2:
                    be:88:ba:f2:75:4b:ee:d4:27:af:6b:8d:50:99:91:
                    60:72:50:c5:90:dc:13:c7:3e:84:56:c5:69:19:38:
                    1d:2f:69:45:9e:30:bc:29:0a:83:ef:de:30:cc:2b:
                    db:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.136.0/22
                IPv6:
                  2804:67bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269647

    Signature Algorithm: sha256WithRSAEncryption
         00:66:99:04:a9:ab:2f:2a:1d:28:8d:1c:98:f9:13:63:e4:a8:
         4c:95:b4:00:9e:f4:5b:4b:23:ce:74:b4:bd:8a:5f:7d:bf:08:
         24:64:b7:f2:1b:15:9e:58:31:25:95:6e:ee:15:ad:ab:5b:ed:
         59:b7:88:98:8e:58:9e:43:c1:93:af:49:5c:07:08:88:14:b5:
         18:86:8f:76:85:60:09:4b:dd:b8:56:e1:4c:3b:b5:07:b1:03:
         e4:90:77:23:0a:8e:c4:5e:41:0b:42:b0:f3:0b:61:a2:f5:11:
         7a:88:64:43:1c:20:6a:91:67:38:e2:14:1d:8e:c7:d0:57:9e:
         d3:ee:2e:25:00:cb:46:2a:ee:e9:64:b7:6f:67:d7:4d:f7:8f:
         a0:2c:b7:bb:0a:d0:f3:72:d6:d6:b2:1d:56:1f:4c:e0:9a:b5:
         4f:3c:20:52:68:8a:d4:ac:57:36:5c:bf:91:4d:48:77:d9:cf:
         95:83:50:25:37:8d:fc:2a:4a:77:c2:f0:24:e7:f2:79:aa:61:
         10:8c:fe:e2:a3:d0:ed:61:90:72:f6:9b:7a:d1:2b:05:a0:a1:
         f7:cb:b8:e1:96:dc:61:19:bb:90:b9:55:59:77:5e:ec:4e:87:
         cd:eb:8a:45:58:e6:b7:87:83:19:a5:d7:56:21:5a:94:0c:b0:
         fd:b3:36:1c
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUchYW781JFjMDm00BSsPDp3B5SbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjAxODI5MDRaFw0yNTAzMTkxODM0MDRaMDMxMTAvBgNV
BAMTKDdGQ0JEN0U1RkJFRTk3NTgxNTE3NjgwNUQwQ0M2RUI3NUEzNkY0MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNeusP+fYiktZyGe6R439Co7P
taLn1GE7wkk972hOPYMEW3WZPGCgsiiR629hDmk3N29yNiLpm5R4+f4VmX6POM+i
geumzNLAixNgeMHbHRIb0UZY3tvIS0QX2qyo1P3G69FyUYReielsKNxws0khf7nD
RRJX52jmUi1njkHdik3Oiu8QQfeB6NKSwXwjaJAKurMSMOv50IqlhWIXQdYU2fsG
aY9R9cNyozd9u+TJBCmtfYxKaXzBTRijdkvIBnTQCoYw00vVvdNr0C3/7i9osr6I
uvJ1S+7UJ69rjVCZkWByUMWQ3BPHPoRWxWkZOB0vaUWeMLwpCoPv3jDMK9vPAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR/y9fl++6XWBUX
aAXQzG63Wjb0CzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84VEY4V1hHSFdlUGR6Rk05QTNqdThUZWc1Q1JQczRMcVVL
Y1d6VmFxcFFMNS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOFRGOFdYR0hXZVBkekZNOUEzanU4VGVnNUNSUHM0THFV
S2NXelZhcXBRTDUvMC83RkNCRDdFNUZCRUU5NzU4MTUxNzY4MDVEMENDNkVCNzVB
MzZGNDBCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItvogwDQQCAAIwBwMF
ACgEZ7wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB1PMA0GCSqGSIb3DQEBCwUA
A4IBAQAAZpkEqasvKh0ojRyY+RNj5KhMlbQAnvRbSyPOdLS9il99vwgkZLfyGxWe
WDEllW7uFa2rW+1Zt4iYjlieQ8GTr0lcBwiIFLUYho92hWAJS924VuFMO7UHsQPk
kHcjCo7EXkELQrDzC2Gi9RF6iGRDHCBqkWc44hQdjsfQV57T7i4lAMtGKu7pZLdv
Z9dN94+gLLe7CtDzctbWsh1WH0zgmrVPPCBSaIrUrFc2XL+RTUh32c+Vg1AlN438
Kkp3wvAk5/J5qmEQjP7io9DtYZBy9pt60SsFoKH3y7jhltxhGbuQuVVZd17sTofN
64pFWOa3h4MZpddWIVqUDLD9szYc
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org