Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.cer
File:                     765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.cer (raw, json)
Hash identifier:          NdQ+Hthk0iJ+j/yL9XzrEEvNcCo0ORgkw6Q1OjtbCLg=
Subject key identifier:   76:5F:FC:EF:80:CB:36:00:CD:0E:E5:D2:90:B9:27:46:FD:98:A9:F6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51096998AE9E8CB9A23E1844C54EB61ACB3EE3A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 23:06:20 +0000
Certificate not after:    Wed 05 Feb 2025 23:11:20 +0000
Subordinate resources:    AS: 262380
                          IP: 131.0.240.0/22
                          IP: 138.255.92.0/22
                          IP: 177.128.232.0/22
                          IP: 186.251.28.0/22
                          IP: 2804:898::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:09:69:98:ae:9e:8c:b9:a2:3e:18:44:c5:4e:b6:1a:cb:3e:e3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 23:06:20 2024 GMT
            Not After : Feb  5 23:11:20 2025 GMT
        Subject: CN=765FFCEF80CB3600CD0EE5D290B92746FD98A9F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3b:69:16:1c:a6:37:99:29:30:a7:d1:80:e0:
                    4b:02:69:fe:d8:7c:80:8a:e1:9b:d1:6c:46:e0:a6:
                    0e:05:dd:14:f8:45:ce:18:66:2b:21:e3:14:76:91:
                    a2:68:b2:fc:18:1f:79:8d:16:72:a3:0f:14:e0:37:
                    86:99:25:24:1e:a8:ae:65:cb:26:ee:1f:3a:f4:37:
                    f2:99:d3:0f:23:3d:af:70:4f:42:cb:6c:37:9f:eb:
                    fd:21:2d:42:f0:d7:ed:bc:80:78:92:b1:68:f0:6d:
                    7a:13:c5:1f:b4:02:6d:9b:1d:89:42:e8:a5:59:6f:
                    4a:d2:b4:ef:c3:54:6b:d1:cf:43:52:07:2b:12:c9:
                    bf:be:ba:95:9b:7b:5f:f1:ff:74:f6:42:0a:d2:ef:
                    46:80:45:76:46:dd:3d:9c:0b:47:4f:42:71:a0:d0:
                    17:83:d6:d8:ac:6e:c7:17:4e:c3:0c:f8:9e:02:d3:
                    ec:9a:b5:d3:36:55:3c:2b:af:d0:a4:69:0d:78:cd:
                    f0:ea:39:c5:fa:da:64:26:52:64:e9:a2:c5:3a:1b:
                    c6:3c:50:e7:38:c1:c8:30:d0:f7:93:c9:90:3c:9a:
                    08:8d:52:51:ef:33:3a:5c:0f:bd:81:97:69:3a:b6:
                    05:c9:d1:87:60:ef:5e:be:2d:09:3c:92:dc:15:fd:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:5F:FC:EF:80:CB:36:00:CD:0E:E5:D2:90:B9:27:46:FD:98:A9:F6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.240.0/22
                  138.255.92.0/22
                  177.128.232.0/22
                  186.251.28.0/22
                IPv6:
                  2804:898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262380

    Signature Algorithm: sha256WithRSAEncryption
         82:0e:e1:9c:2a:f9:04:76:4e:85:2e:22:aa:24:21:16:49:62:
         cb:10:d1:8d:09:e5:df:c1:0a:cf:7a:d9:12:77:f2:44:34:86:
         35:7a:16:42:a8:e4:b2:6c:26:3d:48:61:d0:3c:f6:97:79:60:
         95:cb:b1:15:c6:05:8c:89:67:2f:4a:18:20:11:6b:b0:4a:db:
         c6:8c:17:07:9c:e8:00:83:5f:c0:ef:0d:da:9c:2f:bd:5f:18:
         ec:47:96:e5:50:41:47:3f:d1:87:c5:b0:ea:82:d4:bc:e3:7b:
         e1:e1:17:c3:a9:70:a2:67:9c:a8:7a:02:26:05:9c:b5:4d:2f:
         8a:b0:08:74:2e:fb:28:e1:9c:aa:5c:37:e4:a3:85:c2:8e:07:
         6f:38:04:8e:4e:9f:0f:8b:a0:8f:7e:bd:02:c5:7c:cd:bc:be:
         bb:56:50:89:78:df:d5:0d:34:44:1e:79:2e:3c:72:65:18:dc:
         d1:0a:a6:b2:17:54:d1:b4:d6:77:a7:d7:8a:20:e8:3f:d3:9a:
         e8:a6:27:83:0d:8e:0c:10:df:a3:13:7f:87:b0:2b:8b:00:6e:
         ce:b6:4d:35:65:c3:a8:fa:72:69:0d:2d:10:fe:8c:f4:a6:6a:
         3f:49:46:b5:3a:f3:1a:ed:ec:64:fe:78:51:5e:df:ed:d7:a8:
         6a:87:ed:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org