Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7416BDE8982661C0715BA0ADF262F83EB49F1381.cer
File:                     7416BDE8982661C0715BA0ADF262F83EB49F1381.cer (raw, json)
Hash identifier:          f0vRcSV+8ri9QNjTc1CBNJIKJLwn168khkCO8k0W/OQ=
Subject key identifier:   74:16:BD:E8:98:26:61:C0:71:5B:A0:AD:F2:62:F8:3E:B4:9F:13:81
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D015A0C2D4F6FBD0D165861B98E4BA1BB5BD916
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/7416BDE8982661C0715BA0ADF262F83EB49F1381.mft
caRepository:             rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Dec 2023 12:31:42 +0000
Certificate not after:    Wed 11 Dec 2024 12:36:42 +0000
Subordinate resources:    AS: 264192
                          IP: 138.97.152.0/22
                          IP: 2804:23f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:01:5a:0c:2d:4f:6f:bd:0d:16:58:61:b9:8e:4b:a1:bb:5b:d9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 13 12:31:42 2023 GMT
            Not After : Dec 11 12:36:42 2024 GMT
        Subject: CN=7416BDE8982661C0715BA0ADF262F83EB49F1381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:ab:2e:63:32:8a:39:fc:cc:84:50:56:7f:
                    0a:3f:2b:0f:c2:c8:d5:85:b7:2b:ec:77:e8:21:01:
                    12:1e:93:9e:a7:1f:b4:73:da:ab:39:71:dc:0b:b9:
                    99:b3:65:76:48:ed:88:9a:0d:11:0d:6f:1a:0b:6b:
                    0c:46:6d:d8:53:41:2a:08:44:8b:05:49:48:ab:b7:
                    76:9b:47:bc:d2:ee:71:dd:98:aa:48:77:20:53:8c:
                    4c:58:0b:18:34:13:0b:3d:e7:be:7c:e1:da:bf:44:
                    3a:e9:57:f2:b1:1f:5b:88:fb:65:07:06:6d:f1:fe:
                    b1:d4:84:3b:0a:0c:03:a3:bc:48:68:26:d4:29:a6:
                    39:eb:ab:54:bb:88:41:7f:e9:dc:10:07:78:d5:70:
                    bd:2b:72:78:8d:db:39:30:d8:33:45:35:90:bd:6e:
                    1c:64:7b:49:7e:87:c2:c5:0f:6e:eb:89:59:c5:a9:
                    75:60:54:23:41:77:68:1b:ee:9e:85:61:d3:34:3f:
                    d2:59:b5:68:fc:b9:b3:1f:2d:c7:70:92:90:fe:34:
                    49:4b:50:97:4f:55:38:3e:eb:0a:08:3d:55:45:a6:
                    53:77:8e:5a:3b:c8:f3:9e:ac:ec:15:76:44:5f:23:
                    03:70:21:58:55:75:83:ba:94:65:be:04:49:1b:68:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:16:BD:E8:98:26:61:C0:71:5B:A0:AD:F2:62:F8:3E:B4:9F:13:81
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/7416BDE8982661C0715BA0ADF262F83EB49F1381.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.152.0/22
                IPv6:
                  2804:23f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264192

    Signature Algorithm: sha256WithRSAEncryption
         1a:a4:75:85:34:0b:e7:15:7c:2d:1b:fc:2f:7a:79:bb:89:69:
         c0:43:b7:7d:cc:08:10:e6:5f:62:c5:e0:5b:75:68:b4:16:e8:
         20:80:04:2d:ea:b3:1c:60:23:90:ea:72:b6:50:e6:c1:0f:d3:
         1f:1a:07:ec:87:5f:5c:a2:5b:24:be:2d:eb:e7:ff:92:0e:6b:
         cb:b5:f0:28:34:82:d4:b9:1d:9f:96:0d:ff:a8:10:28:e2:ba:
         6d:af:c0:aa:ef:ae:e9:d9:44:cb:9c:49:ac:33:54:31:1f:bc:
         62:57:75:a6:5a:65:1a:a2:59:b9:45:eb:c2:de:cb:06:3c:8d:
         1c:45:ad:9b:dc:39:86:bb:8e:6c:76:dc:84:32:37:93:57:e3:
         aa:05:c7:75:d5:f9:11:93:e7:49:c4:17:d7:01:7e:d8:a2:d5:
         cb:0c:46:fc:20:c2:45:0f:37:3c:bd:1d:4a:94:cc:8b:07:63:
         08:5b:15:22:42:5b:99:f4:02:25:ac:f8:1b:d3:fe:dc:7c:ad:
         80:22:7f:fe:ab:99:0d:d8:1c:7b:ab:51:ab:2b:87:c8:d5:ef:
         f3:03:af:86:18:cc:6e:7a:32:54:30:8d:ad:92:82:0f:b8:a2:
         bf:0d:9f:aa:a6:9c:ad:37:c7:a5:12:80:e8:8c:68:44:39:04:
         a2:11:e8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org