Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC.cer
File:                     758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC.cer (raw, json)
Hash identifier:          mPvDPhcycRAIF86m70u8KPgDYpbTjpxkEkkr6ktLIkQ=
Subject key identifier:   75:8B:C6:FB:BB:A9:BB:DA:0A:75:71:23:B6:6C:9A:CE:FA:6F:B0:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E9F69BBAB3BAC56C50836EF70175564CD232A2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 01 Jul 2023 12:24:01 +0000
Certificate not after:    Sat 29 Jun 2024 12:29:01 +0000
Subordinate resources:    AS: 61746
                          IP: 131.100.32.0/22
                          IP: 2804:1bbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9f:69:bb:ab:3b:ac:56:c5:08:36:ef:70:17:55:64:cd:23:2a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  1 12:24:01 2023 GMT
            Not After : Jun 29 12:29:01 2024 GMT
        Subject: CN=758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:05:2f:5d:32:e3:83:e9:aa:ae:dc:b5:3a:
                    57:74:36:b1:2c:95:01:72:63:e0:77:63:6b:ab:fb:
                    e7:e8:4a:56:d6:96:56:54:46:61:9d:c9:84:e9:69:
                    f6:6f:74:ec:30:ff:c5:05:60:27:69:39:2d:2d:23:
                    1c:3d:fc:b1:40:5b:80:a5:a4:de:34:c6:97:19:6f:
                    0d:f2:5c:4b:9c:33:d5:67:a8:d9:c5:5a:09:34:31:
                    13:d5:cc:4a:eb:5a:7f:43:56:81:58:ce:af:3f:e8:
                    5c:86:d3:59:d6:a8:1c:2f:55:86:8b:6a:6b:41:dd:
                    e8:e1:b3:f3:2d:cc:26:93:e9:45:e5:5f:c8:fe:e7:
                    80:8f:ec:65:10:c7:81:84:13:29:a5:97:85:7f:41:
                    f6:42:45:05:ba:f0:ed:f1:c0:55:72:79:74:56:69:
                    13:c1:4b:00:78:85:47:df:b0:a4:f3:fe:a7:5d:50:
                    58:7f:fb:e6:48:ae:38:dd:5f:eb:dd:d1:e5:18:ad:
                    1d:c3:c7:d6:a1:a7:ec:ad:03:98:ae:5a:b1:1a:bc:
                    16:c1:55:3a:9b:d4:f6:16:ef:6d:14:04:09:7e:ba:
                    8f:e5:50:49:01:26:83:c5:f9:d7:5d:0c:c8:52:6b:
                    10:7a:00:a8:a9:3b:c8:49:c6:71:95:23:cc:d4:61:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:8B:C6:FB:BB:A9:BB:DA:0A:75:71:23:B6:6C:9A:CE:FA:6F:B0:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.32.0/22
                IPv6:
                  2804:1bbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61746

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:9c:23:9f:6e:bf:32:a1:25:1a:b1:12:69:b4:6e:eb:3a:
         6d:cc:68:e4:27:8f:d7:a5:b5:cd:f9:12:0f:be:02:35:ca:4b:
         96:54:ca:6b:a8:86:ff:d4:45:b4:23:fc:f4:77:54:73:82:a9:
         ac:ea:0c:04:3a:c0:c2:32:df:38:a8:32:b7:63:18:70:74:b7:
         a2:2c:c7:b1:85:f1:e3:bf:5c:94:2b:7f:f0:91:21:ea:0a:0b:
         1a:a3:e3:dc:79:96:29:99:0f:19:8e:56:59:85:62:89:fd:81:
         58:f0:42:fa:9c:6f:41:a7:67:73:b1:d8:08:ef:e6:38:e6:a0:
         ff:f0:03:0e:06:33:42:c3:a8:db:f5:ae:fa:8a:90:ef:b4:34:
         3f:36:95:6e:b5:76:6e:f0:8b:38:79:ea:b3:e7:37:d4:c0:51:
         04:f1:28:3a:84:44:c3:84:6a:59:02:15:d5:49:57:10:af:38:
         a6:25:13:49:61:f7:bc:38:8b:f7:1e:20:3f:e5:12:2c:da:05:
         c5:46:29:76:eb:f3:fa:18:7c:59:82:ef:47:4c:8f:6f:fc:3b:
         3c:6a:db:29:57:2f:64:8f:6d:33:ad:96:8c:ea:12:f9:1b:f1:
         9d:9e:a0:f5:0c:90:3a:7e:2b:f3:59:47:cc:3d:49:2e:95:ae:
         66:77:17:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org