Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/07CFD40C5EE6CEC18ABC850C9BEDD1EF984949CB.cer
File:                     07CFD40C5EE6CEC18ABC850C9BEDD1EF984949CB.cer (raw, json)
Hash identifier:          o8KlGJw4RGVPsY7uf2/JZAs0ZHdFPyFshW/L+flbdDw=
Subject key identifier:   07:CF:D4:0C:5E:E6:CE:C1:8A:BC:85:0C:9B:ED:D1:EF:98:49:49:CB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       717592AF188EFFAED047CA3DF3A059C82DF22376
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/07CFD40C5EE6CEC18ABC850C9BEDD1EF984949CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Nov 2023 11:38:32 +0000
Certificate not after:    Tue 19 Nov 2024 11:43:32 +0000
Subordinate resources:    AS: 263278
                          IP: 186.227.124.0/22
                          IP: 2804:1648::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:75:92:af:18:8e:ff:ae:d0:47:ca:3d:f3:a0:59:c8:2d:f2:23:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 21 11:38:32 2023 GMT
            Not After : Nov 19 11:43:32 2024 GMT
        Subject: CN=07CFD40C5EE6CEC18ABC850C9BEDD1EF984949CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:b2:ad:23:8a:80:04:ab:45:e2:f4:3d:6c:
                    56:14:db:f6:ad:13:35:aa:49:ab:1e:02:ce:3f:d6:
                    00:99:75:e4:95:eb:8d:a5:ee:96:1f:a1:b0:b1:89:
                    b3:83:a7:ad:15:ab:16:11:76:1e:8b:cc:8d:7a:92:
                    e0:de:40:20:dc:7f:34:5f:aa:a4:7b:a2:a6:74:cf:
                    ea:f9:83:46:48:bf:c8:67:eb:5d:40:ff:34:9e:1e:
                    48:6d:95:dd:58:d9:c8:f1:a6:92:12:6e:28:6a:48:
                    80:79:72:0d:53:a9:7b:42:42:26:8b:6b:1f:cb:85:
                    16:83:09:00:9d:2a:f9:17:f5:7c:4d:c2:e4:92:8d:
                    11:ad:6e:92:0b:a0:c2:68:88:c8:61:6f:f4:71:06:
                    07:86:47:38:22:58:4f:65:79:0e:50:62:15:79:a2:
                    93:88:11:21:e1:94:0d:ba:17:59:c3:aa:95:f5:f3:
                    08:2a:5a:f6:c2:fb:ff:c9:a3:78:4c:ea:c2:85:0a:
                    66:7f:07:f8:16:b7:6d:c1:b4:16:f7:07:2d:89:18:
                    08:bf:06:69:2a:39:58:ba:07:63:ad:75:55:02:03:
                    a5:15:df:d0:e9:1b:3b:21:fb:ce:79:fb:03:3d:88:
                    5d:44:b8:f5:0a:04:3b:06:74:2f:0e:19:91:e4:1b:
                    1c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:CF:D4:0C:5E:E6:CE:C1:8A:BC:85:0C:9B:ED:D1:EF:98:49:49:CB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/07CFD40C5EE6CEC18ABC850C9BEDD1EF984949CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.124.0/22
                IPv6:
                  2804:1648::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263278

    Signature Algorithm: sha256WithRSAEncryption
         79:04:34:67:0b:19:1b:0e:8d:ad:8c:71:4d:92:c0:9f:ce:dc:
         79:28:a8:16:67:e4:a0:7e:11:69:8c:ea:a2:93:07:d5:b4:07:
         a8:bb:59:f4:a3:1e:7c:52:e2:ff:e6:d3:b0:fe:ba:43:2e:d5:
         26:2f:9a:40:14:7c:d9:ed:96:9c:23:4f:9e:6d:2b:bc:12:84:
         58:23:e2:26:8a:ef:6f:42:e1:ca:8d:b6:5e:5a:3b:a9:43:cf:
         61:ff:95:35:44:c7:0a:99:92:49:91:f7:4e:8e:50:02:70:9f:
         0e:ad:28:56:92:ec:5d:c9:10:54:a0:d0:0a:db:fe:b5:b5:df:
         a9:09:d9:28:e1:73:b7:e4:9a:da:ec:67:1d:a0:ec:94:c3:6b:
         4b:44:a9:76:2e:3f:42:c9:b7:e7:06:53:88:11:73:ca:81:d7:
         c1:e5:37:b8:a2:9d:57:7d:7f:da:c4:2d:b3:fe:b4:83:7d:0c:
         35:c9:fe:f8:71:00:0d:ca:6c:60:5d:92:b4:12:61:de:5b:48:
         37:0a:03:ee:a3:a3:77:71:f5:f3:d3:3a:14:12:28:b0:f3:4d:
         41:5b:4c:83:b1:f4:03:7e:e5:a0:3f:4c:09:21:2b:84:8b:29:
         de:6b:03:a9:69:ca:ca:a6:26:e3:af:60:68:60:b3:02:9a:7f:
         e3:30:92:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org