Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/780F596920B023D27CC4D953A13A9C8DAA3CC182.cer
File:                     780F596920B023D27CC4D953A13A9C8DAA3CC182.cer (raw, json)
Hash identifier:          m1AS8ObmWongkMCCh5Hgc1esVXGcVQ7cu2+pSAE388c=
Subject key identifier:   78:0F:59:69:20:B0:23:D2:7C:C4:D9:53:A1:3A:9C:8D:AA:3C:C1:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7A4390D4BDA6C10658742C2FD78B6294120941BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/780F596920B023D27CC4D953A13A9C8DAA3CC182.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 25 Nov 2023 18:42:14 +0000
Certificate not after:    Sat 23 Nov 2024 18:47:14 +0000
Subordinate resources:    AS: 270460
                          IP: 200.50.220.0/22
                          IP: 2804:6c54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:43:90:d4:bd:a6:c1:06:58:74:2c:2f:d7:8b:62:94:12:09:41:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 25 18:42:14 2023 GMT
            Not After : Nov 23 18:47:14 2024 GMT
        Subject: CN=780F596920B023D27CC4D953A13A9C8DAA3CC182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:59:a6:36:5a:2a:a7:0d:17:a3:b6:aa:30:
                    b8:9e:45:34:5d:86:54:ac:e2:cb:95:b3:a4:9d:fe:
                    11:63:70:90:a1:3c:6e:37:29:0f:f8:99:64:05:31:
                    c6:fd:e4:40:21:64:b9:d0:ec:98:40:88:91:54:07:
                    97:74:2f:ac:5f:56:f3:48:2e:d7:9f:f8:e3:99:48:
                    72:f2:2a:65:81:39:be:4c:78:6c:dc:ae:e0:d9:6d:
                    a9:30:0d:38:14:bc:7a:50:22:98:ce:12:f8:ef:ff:
                    3b:fa:78:a6:23:0e:fa:37:ce:ba:aa:fc:3a:a3:ad:
                    da:26:97:02:34:da:05:0d:d1:6b:85:a9:a4:76:91:
                    ef:df:ce:bc:87:16:a6:b8:cd:ac:2f:52:74:a7:b4:
                    16:59:af:4e:2e:b2:08:ce:33:44:d6:5b:89:7e:d4:
                    f9:37:71:fc:f1:88:d3:3b:9f:2e:27:dd:41:bd:7d:
                    ca:2a:50:64:e5:2d:88:a6:eb:38:40:0d:41:8b:cd:
                    61:ad:03:66:08:0e:06:3f:54:1b:85:dc:d4:8c:a6:
                    5f:34:3e:d0:ed:f5:82:42:c6:11:36:73:cb:6b:4f:
                    50:89:51:62:2c:9d:2b:cd:85:ee:3e:8d:43:0f:14:
                    51:6e:5a:e8:c9:24:3a:85:07:2d:84:d1:50:40:d8:
                    03:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:0F:59:69:20:B0:23:D2:7C:C4:D9:53:A1:3A:9C:8D:AA:3C:C1:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/780F596920B023D27CC4D953A13A9C8DAA3CC182.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.220.0/22
                IPv6:
                  2804:6c54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270460

    Signature Algorithm: sha256WithRSAEncryption
         ae:3f:c0:5b:a4:a6:61:5d:91:42:69:05:6b:a2:50:dd:50:d6:
         5a:4a:1d:13:c0:e1:70:10:88:59:ca:d2:2e:a7:eb:26:af:7a:
         5a:f6:ef:1d:f9:30:e1:50:f6:61:5a:5a:51:1c:d0:b1:37:e7:
         cc:fc:da:36:fd:cf:3c:cb:92:2c:93:4b:76:a0:96:c8:81:c5:
         0a:71:d1:93:aa:2a:40:d1:7e:1c:07:a6:e0:d9:4a:0d:04:9f:
         70:39:0d:e2:34:b4:05:32:76:22:df:87:8b:05:a1:4b:8b:d8:
         64:0c:2b:d8:2a:dc:ce:86:12:cf:45:62:45:da:38:4f:14:51:
         bc:0e:67:53:c8:71:9f:f7:87:32:90:1f:71:80:ef:4f:67:9d:
         b8:5f:74:75:0f:72:98:e3:cf:52:34:7a:0b:20:33:30:46:9f:
         5d:68:56:c8:d8:03:e2:85:56:a0:ab:16:a8:86:5d:3d:0f:ce:
         af:e5:f8:0c:9a:7a:ae:94:49:0e:73:d0:9c:1a:73:75:fb:dd:
         5b:1f:87:52:22:bf:3d:07:bb:96:4e:07:29:ff:0e:5b:d9:87:
         92:cc:02:5e:c5:85:42:ec:54:55:f8:c4:d6:94:24:c2:cf:77:
         d9:42:d7:8c:fc:3c:ab:51:96:d5:b0:24:51:24:87:10:2e:f0:
         63:38:0a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org