Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.cer
File:                     7118DBB6F419AC1957CD203A0BE108FBC95D0C04.cer (raw, json)
Hash identifier:          9w/gWen1E8TitvL9onmlRKd6fazxCm9RK6zydXnMyE0=
Subject key identifier:   71:18:DB:B6:F4:19:AC:19:57:CD:20:3A:0B:E1:08:FB:C9:5D:0C:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       47837DC16E93EED9B3F582B9DC5B73DC5CC886AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Jun 2023 13:11:32 +0000
Certificate not after:    Wed 26 Jun 2024 13:16:32 +0000
Subordinate resources:    AS: 61792
                          IP: 170.247.236.0/22
                          IP: 201.55.196.0/22
                          IP: 2804:1964::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:83:7d:c1:6e:93:ee:d9:b3:f5:82:b9:dc:5b:73:dc:5c:c8:86:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 28 13:11:32 2023 GMT
            Not After : Jun 26 13:16:32 2024 GMT
        Subject: CN=7118DBB6F419AC1957CD203A0BE108FBC95D0C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:1d:34:dd:a9:8a:46:04:3f:fc:ca:23:be:
                    53:03:48:33:f3:3a:b9:5b:14:f8:b3:bf:88:7a:72:
                    9d:54:63:86:e1:ff:ba:42:78:20:18:31:4d:1b:44:
                    6b:85:bc:72:fb:44:39:ff:06:c0:a3:1b:47:e9:2f:
                    d7:35:b6:e0:5c:3a:bf:f1:6b:79:08:7c:76:3e:18:
                    39:b3:71:a4:95:17:c7:05:9b:dd:22:5c:00:e2:78:
                    a6:04:89:0a:f6:3b:ca:b7:ae:1d:88:c3:30:dc:39:
                    54:94:87:9e:55:a9:a5:53:aa:a7:2c:c8:b5:84:d8:
                    dd:b3:85:e7:2a:37:79:1f:ce:d5:2f:ac:cc:0e:8e:
                    a8:15:39:08:ca:68:3a:43:3f:cc:c5:cb:48:57:30:
                    f2:99:a7:01:c5:54:b0:a6:87:5a:a6:fb:d5:9f:00:
                    53:9c:b2:39:31:8a:a4:f5:b2:f3:91:65:c5:12:6d:
                    62:84:0b:ac:38:2a:b1:02:dc:5f:55:9d:a7:06:ad:
                    cf:32:b2:c3:93:b0:cb:ef:3f:66:5d:1b:3e:5c:82:
                    15:67:40:7e:c5:09:26:36:7a:20:d9:9a:10:df:b9:
                    32:4c:a1:f2:1e:97:1b:2e:1b:73:37:c5:c7:8a:99:
                    ae:1c:7f:51:f5:b3:50:c6:a3:68:82:50:df:13:6b:
                    f0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:18:DB:B6:F4:19:AC:19:57:CD:20:3A:0B:E1:08:FB:C9:5D:0C:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.236.0/22
                  201.55.196.0/22
                IPv6:
                  2804:1964::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61792

    Signature Algorithm: sha256WithRSAEncryption
         68:4f:68:28:77:6a:ed:1e:aa:39:60:54:d1:9f:54:40:93:d5:
         5e:84:a9:d0:d7:91:4d:f9:92:30:18:04:f2:8c:cb:e1:07:27:
         94:be:35:23:53:f1:02:83:20:f1:a2:eb:9f:2f:da:25:e9:46:
         66:19:d5:ca:9c:37:ca:e6:04:32:b8:68:30:87:38:03:b8:2f:
         3c:98:9a:f1:1d:7c:ed:5f:88:4d:f8:ad:cf:6a:36:a0:f4:62:
         db:b3:57:fe:d4:01:fe:0b:58:81:e1:f5:ad:1c:1a:ee:98:59:
         01:40:28:9d:3e:bd:95:77:32:2f:f5:af:b8:07:77:f5:de:49:
         88:42:cd:fb:ef:b7:ee:c8:d2:ec:04:6c:69:ca:f6:9b:05:f5:
         45:80:90:24:bf:c4:92:a1:79:53:36:d8:1c:bf:2b:98:40:68:
         39:72:46:e8:ce:eb:31:e0:dd:37:8e:fe:79:ee:89:57:59:44:
         63:cf:ee:df:4d:cc:3f:5c:e1:b4:6e:c5:92:13:a0:19:eb:72:
         b2:88:45:61:94:7d:52:dc:ed:24:2f:6a:aa:e9:fa:c8:b1:41:
         32:bb:a1:2c:9f:0a:b8:63:83:45:34:d6:46:7f:ba:42:90:e9:
         33:74:b7:6d:89:22:77:24:9c:46:e4:e5:0b:e0:e4:d5:30:47:
         d9:25:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org