Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer
File:                     766B3041B29318AB99A3A0468D318CA1E0E24276.cer (raw, json)
Hash identifier:          0RmNxvQ4wxbza+XTVNzy69jwd7TMS0nwG1LIY7Ia0zQ=
Subject key identifier:   76:6B:30:41:B2:93:18:AB:99:A3:A0:46:8D:31:8C:A1:E0:E2:42:76
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6BFEB3BD38B77E7502B7E5B0E91C64AD85F6B301
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/766B3041B29318AB99A3A0468D318CA1E0E24276.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:23 +0000
Certificate not after:    Tue 21 May 2024 09:25:23 +0000
Subordinate resources:    AS: 265205
                          IP: 167.250.68.0/22
                          IP: 2804:2c3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fe:b3:bd:38:b7:7e:75:02:b7:e5:b0:e9:1c:64:ad:85:f6:b3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:23 2023 GMT
            Not After : May 21 09:25:23 2024 GMT
        Subject: CN=766B3041B29318AB99A3A0468D318CA1E0E24276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:5f:b5:6e:d6:40:8b:31:c6:25:4e:85:2a:
                    be:c9:6d:d5:9a:21:f7:06:d1:e0:1f:89:de:45:11:
                    70:25:79:bd:3f:25:af:08:2a:ca:cf:da:fe:de:e0:
                    bc:90:d4:5b:d7:44:bb:f5:07:e9:9f:f7:d9:77:35:
                    a0:eb:f4:e1:d9:90:42:15:ab:a9:d7:10:3a:6f:f2:
                    c9:45:8c:4c:8a:7f:c3:f5:f0:ce:3a:a0:04:cf:b1:
                    c4:15:87:f2:a6:14:ba:0d:38:04:6c:95:dc:99:89:
                    eb:3f:fb:c4:bf:43:86:b1:1f:46:0e:ca:4e:93:ec:
                    2d:f5:2d:91:71:3f:4d:18:1c:dd:82:6a:bf:93:72:
                    81:65:a5:d8:41:2d:db:51:b6:d7:54:b5:4c:cf:27:
                    5c:d9:2b:ce:7b:33:0b:87:34:d4:e1:5e:29:06:86:
                    96:56:a7:05:3d:2b:c4:b3:d6:f6:3b:51:a2:c0:1f:
                    d1:61:51:7d:6d:45:06:2f:af:88:99:e4:d0:42:2e:
                    ed:7e:df:30:a6:e3:ec:38:81:9c:66:33:d9:b7:f5:
                    e2:59:68:78:b3:3e:f1:51:c0:33:33:d8:af:cc:1f:
                    fd:f2:6d:2e:84:64:7d:b4:02:78:aa:be:5e:db:dd:
                    ac:d5:d2:8a:69:b7:22:e8:28:83:b3:d2:f5:82:2b:
                    f8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:6B:30:41:B2:93:18:AB:99:A3:A0:46:8D:31:8C:A1:E0:E2:42:76
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/766B3041B29318AB99A3A0468D318CA1E0E24276.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.68.0/22
                IPv6:
                  2804:2c3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265205

    Signature Algorithm: sha256WithRSAEncryption
         aa:2c:53:05:3a:e7:f9:13:f1:9b:6f:8c:a5:1d:c2:19:d0:20:
         f9:93:f0:ee:b0:09:ce:e5:b7:48:be:e1:5e:0b:f7:9e:cb:07:
         6d:69:aa:7f:27:07:8c:1b:f4:f2:47:59:b0:23:54:68:66:45:
         f8:46:ff:f1:03:69:f6:8d:42:bc:32:4f:a4:12:3a:d0:0d:bd:
         a0:4f:cc:12:12:a1:f1:c8:08:a6:df:54:ee:0f:5b:21:d3:90:
         8a:9c:c9:11:5b:9f:16:d1:bc:41:7b:26:eb:2d:95:65:1a:87:
         70:9c:bc:79:37:4e:82:eb:07:e8:f4:47:19:0a:93:c4:2e:15:
         b4:e3:cf:f8:82:fd:5f:57:82:28:2d:b4:a8:c9:2b:a1:cb:19:
         3d:f5:c1:d1:ca:b9:61:d9:fe:3d:db:13:3f:c9:c5:72:51:ec:
         1c:55:e4:d5:77:d0:f9:c1:00:b3:b7:f2:1c:57:1d:ec:31:42:
         c7:a2:b4:3d:01:ca:0e:37:dc:95:e0:2f:0c:fd:5e:a6:7f:43:
         2f:f7:8f:0d:69:96:d6:0c:b8:22:5e:f4:2d:ca:d4:ad:4e:39:
         27:85:94:cb:44:0e:9c:7d:95:87:42:69:5b:40:c2:70:54:42:
         c3:f1:54:19:25:f9:46:ca:36:81:3c:06:87:e6:70:40:c8:0a:
         8e:79:46:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org