Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/755EF99A8BA2C7F836F67C1F5471E77A126358BA.cer
File:                     755EF99A8BA2C7F836F67C1F5471E77A126358BA.cer (raw, json)
Hash identifier:          AoFXlmE/T5V2o8FnUUIgyw32plFbe5VzBudVkwoYxKE=
Subject key identifier:   75:5E:F9:9A:8B:A2:C7:F8:36:F6:7C:1F:54:71:E7:7A:12:63:58:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       443D0DDBD667E2791C71D83309D9C16157C822E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/755EF99A8BA2C7F836F67C1F5471E77A126358BA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 May 2023 20:18:13 +0000
Certificate not after:    Mon 27 May 2024 20:23:13 +0000
Subordinate resources:    AS: 263486
                          IP: 170.79.128.0/22
                          IP: 191.242.248.0/21
                          IP: 2804:1298::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3d:0d:db:d6:67:e2:79:1c:71:d8:33:09:d9:c1:61:57:c8:22:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 29 20:18:13 2023 GMT
            Not After : May 27 20:23:13 2024 GMT
        Subject: CN=755EF99A8BA2C7F836F67C1F5471E77A126358BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:fb:64:10:9a:f6:9a:9f:da:d9:e3:e2:da:
                    03:09:d6:49:dc:ce:27:fc:aa:41:a4:8a:6a:cd:58:
                    97:6c:9c:70:0b:54:64:04:15:ce:67:a8:ce:e1:cc:
                    57:77:93:04:54:9a:a8:ac:35:41:d2:22:8b:34:00:
                    91:31:9a:d2:55:57:20:8c:96:1b:97:33:92:96:95:
                    50:06:89:10:ac:43:1c:9e:d6:e5:e6:c7:02:ee:2a:
                    20:82:8c:36:d7:3c:6e:20:5b:d1:b8:e0:7a:d9:02:
                    f2:aa:aa:cf:a5:7c:07:08:58:30:7c:bd:a8:57:fd:
                    e1:3b:aa:bc:62:b1:2b:dd:34:79:fa:45:33:13:e2:
                    fe:03:45:d8:64:d3:4b:5f:7d:ab:a2:b1:75:8d:9c:
                    4d:82:87:79:e0:c2:63:bc:c4:90:d9:27:db:0c:52:
                    22:7c:36:4b:3d:1c:7c:46:99:0c:19:1b:a6:2b:9d:
                    49:f4:b0:0c:70:31:f5:0f:00:7e:62:a0:f0:96:58:
                    9e:3f:a1:01:49:f4:48:28:bd:e8:8f:8b:0c:19:ac:
                    79:ea:1a:d1:db:2c:77:36:30:a1:b4:3a:1d:0a:9e:
                    00:e8:c0:4f:de:ee:c1:47:79:61:9b:5f:78:1b:a2:
                    f8:74:52:72:34:4b:a6:e8:be:4d:ce:f8:41:5c:d3:
                    15:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:5E:F9:9A:8B:A2:C7:F8:36:F6:7C:1F:54:71:E7:7A:12:63:58:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/755EF99A8BA2C7F836F67C1F5471E77A126358BA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.128.0/22
                  191.242.248.0/21
                IPv6:
                  2804:1298::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263486

    Signature Algorithm: sha256WithRSAEncryption
         55:ca:ae:ed:48:44:95:cc:b2:02:17:7b:90:17:e8:25:c3:49:
         c3:25:35:d2:73:77:ab:9e:44:5d:d0:17:69:f5:f1:18:b8:19:
         39:78:32:9b:8c:fb:03:df:fa:6a:43:47:74:6d:af:27:65:7f:
         ad:d3:44:22:7a:71:f6:e9:eb:6c:ab:5b:b0:9e:86:6d:8a:ad:
         14:4a:5b:47:47:23:d5:6d:ac:29:a4:33:11:d8:c7:72:d6:74:
         18:0c:d7:65:11:c8:96:b3:58:0d:7d:70:88:ee:21:64:3f:41:
         ba:5e:2c:3d:25:36:69:5b:af:b1:13:e3:4c:1b:3d:b9:06:7b:
         e3:f5:df:04:e4:ae:28:f7:f8:1f:2d:91:0f:4c:10:0d:ca:67:
         90:b7:cb:96:97:b9:6d:ed:85:77:8e:e2:bf:38:e6:7d:53:c9:
         3e:e1:b6:5e:80:ab:4b:35:72:e1:7b:3b:d8:fb:93:df:0a:a1:
         0b:d0:18:81:07:f9:5e:50:f1:6b:5c:9e:9d:62:1c:13:ce:e4:
         5b:c6:08:1e:10:1c:61:10:50:fd:ce:60:62:7e:c8:51:fd:85:
         85:71:d6:14:f7:73:f9:7c:99:74:84:ff:aa:06:9f:b6:75:7d:
         30:2d:7a:24:f9:7b:86:0a:bc:90:10:87:87:ca:92:23:22:45:
         70:43:48:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org