Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer
File:                     07501325F0AA30B8DCFF069CB118104776E788A8.cer (raw, json)
Hash identifier:          9qmYeJCasxK7MUCDmD0B/RRhZtd/AtxhxF0ep/rRuAw=
Subject key identifier:   07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53A27C90CC3BD7DCCED954CCC95E33CB989CD61F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/07501325F0AA30B8DCFF069CB118104776E788A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 12:45:10 +0000
Certificate not after:    Wed 18 Sep 2024 12:50:10 +0000
Subordinate resources:    AS: 262309
                          IP: 177.87.224.0/21
                          IP: 2804:7a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a2:7c:90:cc:3b:d7:dc:ce:d9:54:cc:c9:5e:33:cb:98:9c:d6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 12:45:10 2023 GMT
            Not After : Sep 18 12:50:10 2024 GMT
        Subject: CN=07501325F0AA30B8DCFF069CB118104776E788A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:f8:4f:64:78:29:dd:a7:be:aa:0f:38:04:
                    1c:50:1a:e6:3e:4d:38:df:d2:ed:88:bc:5e:35:7e:
                    0f:70:aa:64:6f:d5:3d:e2:61:34:ba:aa:7d:39:a4:
                    83:83:be:5e:e7:ef:72:66:18:c5:1d:7c:6f:6b:ff:
                    92:cf:04:c0:f1:d9:6f:df:e0:30:75:6c:22:ee:05:
                    b2:65:81:a4:4a:9d:37:94:a0:c1:fa:38:ed:21:56:
                    a7:ab:3b:85:69:71:9c:c0:3d:68:ba:91:7e:57:78:
                    ce:0c:f9:df:86:cb:37:db:cf:47:e5:90:6e:fb:70:
                    d2:d4:6a:ef:5c:a8:51:60:90:cc:f5:2d:da:3f:2d:
                    c1:dc:ac:f6:f2:31:37:b7:35:27:42:99:9f:72:30:
                    47:6f:db:8c:e2:5a:c2:68:82:70:21:0a:da:11:29:
                    8a:cd:02:87:f1:6d:b5:2c:fa:38:b2:18:73:28:d6:
                    0c:64:61:f5:f5:8d:91:b3:26:24:b2:f0:10:f7:41:
                    92:b5:ec:3d:42:d8:6b:f7:6a:48:7a:42:00:f3:13:
                    eb:e9:b1:4c:08:e9:92:7b:85:3b:90:8b:52:89:13:
                    00:39:d4:08:61:a1:b3:1d:2e:62:77:b7:56:8f:2f:
                    a1:b6:c4:66:d2:36:8a:b4:dc:0b:5f:a4:60:23:12:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/07501325F0AA30B8DCFF069CB118104776E788A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.224.0/21
                IPv6:
                  2804:7a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262309

    Signature Algorithm: sha256WithRSAEncryption
         12:71:c9:aa:b2:96:99:16:86:dc:03:bf:4a:2a:f0:3d:cf:da:
         45:b1:96:14:5f:00:10:db:0e:fe:1d:e1:f1:1a:96:fc:a7:1e:
         d7:94:33:8e:5d:3f:ca:de:f9:f4:63:52:5e:01:f3:86:de:50:
         cf:43:21:d2:ee:06:48:1b:c7:49:ce:68:78:aa:41:3a:c6:ac:
         f3:b8:92:41:87:f9:08:a7:72:37:14:74:25:8c:c1:21:3e:d6:
         fb:09:3e:cc:d2:b7:21:59:c6:cb:87:75:d9:e7:8e:5e:c3:d1:
         21:17:2e:20:aa:29:41:be:48:d0:d8:45:4b:51:c8:fa:f3:de:
         58:5b:06:cd:33:85:69:31:36:f1:5f:99:f5:5f:6b:dd:bf:99:
         8a:04:da:9e:f6:6e:9d:4c:ef:78:78:66:ec:c8:7c:4f:79:4b:
         3f:a2:d1:a1:02:c1:43:56:13:7e:08:9d:43:d5:e8:eb:45:fe:
         7c:2d:e6:6f:ab:20:ec:48:ec:8b:bb:5f:a8:22:9a:8c:d5:07:
         bf:7c:48:20:dc:2b:96:e1:eb:90:93:03:55:c0:ae:f0:19:54:
         de:c9:35:ac:2f:3d:31:bc:12:ec:e6:a1:90:21:37:f8:b7:2c:
         78:c3:88:00:67:6c:49:67:f3:59:58:52:80:57:c4:42:b0:3f:
         d1:91:26:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org