Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/75EB4782E85658A9CEBD0E1D11D7D80696006B00.cer
File:                     75EB4782E85658A9CEBD0E1D11D7D80696006B00.cer (raw, json)
Hash identifier:          X0tQ+ON0p3lw/pE9xHvdntTbyqPgRsQRx6kI6azkoVM=
Subject key identifier:   75:EB:47:82:E8:56:58:A9:CE:BD:0E:1D:11:D7:D8:06:96:00:6B:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       24D5B08CEBCB8F869DF11C0BDC5B0E47D52E2C75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/75EB4782E85658A9CEBD0E1D11D7D80696006B00.mft
caRepository:             rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 23:00:19 +0000
Certificate not after:    Mon 03 Mar 2025 23:05:19 +0000
Subordinate resources:    AS: 271408
                          IP: 179.0.44.0/22
                          IP: 2804:7b10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d5:b0:8c:eb:cb:8f:86:9d:f1:1c:0b:dc:5b:0e:47:d5:2e:2c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 23:00:19 2024 GMT
            Not After : Mar  3 23:05:19 2025 GMT
        Subject: CN=75EB4782E85658A9CEBD0E1D11D7D80696006B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9a:de:a8:e7:d6:9c:91:02:5f:1c:f1:15:90:
                    ca:fb:de:dc:79:d6:64:8d:65:79:bc:90:54:d2:ab:
                    6f:59:76:03:c8:4f:99:b4:78:b8:26:0f:bf:c1:23:
                    1b:38:6d:9f:ea:b8:87:d2:b5:d5:41:ad:4a:23:93:
                    6a:45:1e:52:1b:32:1a:01:7a:5f:f3:f9:42:d8:69:
                    54:f4:73:5d:ff:7f:94:40:6b:9e:07:63:08:e5:f6:
                    12:ec:ea:54:f1:c4:49:fc:7b:59:25:e4:d8:b7:b3:
                    d0:1f:20:70:76:25:3b:d8:67:44:8a:93:5c:8b:7c:
                    3c:cb:e1:35:85:6e:b7:2a:80:35:0a:b5:55:49:6c:
                    7f:4c:04:6c:1c:95:7e:c7:dd:07:b0:a9:2b:7c:59:
                    8e:75:92:f3:04:47:0e:10:bd:48:06:ea:f4:a7:9e:
                    fe:9b:e3:41:45:aa:df:3c:44:4d:bb:02:e5:27:d4:
                    fb:00:fd:e4:11:a2:12:16:d9:ee:d0:64:95:c8:cc:
                    69:ba:6a:b0:ae:79:59:b3:3a:76:f5:16:1d:07:d3:
                    8f:bf:cd:43:96:46:f4:f5:7a:6f:b9:a2:0c:c0:29:
                    f9:32:1a:93:e4:a6:34:ab:75:51:8e:b7:58:ca:3b:
                    10:5a:29:95:aa:e4:9b:7c:0b:de:c2:20:88:2e:d8:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:EB:47:82:E8:56:58:A9:CE:BD:0E:1D:11:D7:D8:06:96:00:6B:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/75EB4782E85658A9CEBD0E1D11D7D80696006B00.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.44.0/22
                IPv6:
                  2804:7b10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271408

    Signature Algorithm: sha256WithRSAEncryption
         a2:6a:b8:d2:ba:49:0a:66:cf:9c:57:0e:d0:9d:43:f3:c3:94:
         ac:d5:47:01:cc:fc:73:ac:51:d1:b8:e9:41:4f:18:2b:b4:62:
         70:df:89:39:e9:79:b0:d3:d6:89:c0:0a:6f:19:62:02:4d:db:
         8b:7b:89:ed:16:68:ac:ce:6c:ee:49:fb:d7:b7:ad:9a:99:4f:
         db:f7:c9:66:a4:2e:28:8b:36:25:4b:65:f7:ab:f1:78:6d:51:
         e3:6f:a2:e2:4e:98:7d:eb:c4:0e:88:b6:ea:a6:90:ec:fd:43:
         1e:61:43:28:65:1f:48:3e:16:22:cf:9e:e0:b7:04:9f:78:94:
         fb:fa:47:77:50:76:e6:d2:d5:9a:f1:57:de:bd:73:5f:b4:e8:
         18:6b:b3:16:fc:0e:5a:65:bb:93:97:6e:e1:bd:92:8a:56:60:
         29:8f:c7:ce:1b:72:4f:8b:4e:35:58:c2:5f:ef:bc:25:9c:81:
         5d:b9:d1:37:74:e8:60:ab:16:c6:39:88:11:24:68:b1:04:e6:
         b0:cc:58:37:10:92:da:e5:43:43:78:3b:d1:9a:d7:c2:26:09:
         14:93:d2:80:f9:6c:0d:87:a4:cc:11:3a:31:86:6a:d9:2b:1b:
         c5:6f:a5:6f:73:c5:f1:d0:24:6e:ca:b3:92:ac:ce:24:47:5f:
         7f:c9:97:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org