Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/78151C7AED024C90945657A6AA5EC78F610B0D64.cer
File:                     78151C7AED024C90945657A6AA5EC78F610B0D64.cer (raw, json)
Hash identifier:          c2Ki4fqL4DdwyVa6eapQuSq1eiZDmNygEHIiTeTLJBo=
Subject key identifier:   78:15:1C:7A:ED:02:4C:90:94:56:57:A6:AA:5E:C7:8F:61:0B:0D:64
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7CA37B6D75D46F51E4F18CEB5F57335DF7729A0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/78151C7AED024C90945657A6AA5EC78F610B0D64.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:53:58 +0000
Certificate not after:    Sat 10 Aug 2024 02:58:58 +0000
Subordinate resources:    AS: 265935
                          IP: 164.163.20.0/22
                          IP: 2804:401c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a3:7b:6d:75:d4:6f:51:e4:f1:8c:eb:5f:57:33:5d:f7:72:9a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:53:58 2023 GMT
            Not After : Aug 10 02:58:58 2024 GMT
        Subject: CN=78151C7AED024C90945657A6AA5EC78F610B0D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:9e:1b:bd:5f:ea:4a:bd:d0:df:96:6f:87:
                    48:d7:08:e7:d8:24:43:07:2e:d1:22:53:7e:d8:cc:
                    57:3c:e8:ba:73:13:e9:a7:50:53:94:2d:d0:5b:03:
                    28:93:9d:45:d6:d2:65:2b:9e:9a:81:13:25:c2:b1:
                    f6:4e:35:bd:8f:74:d0:16:fe:ae:75:51:9b:b4:07:
                    42:68:f3:c5:99:8c:be:40:64:a2:b2:d0:ce:c2:5a:
                    92:ec:8f:35:31:eb:bb:e9:71:1c:b8:63:78:3a:52:
                    ee:08:be:06:c0:b8:52:87:04:e9:3e:76:36:2c:a6:
                    dc:1b:05:0b:33:27:45:11:ca:4f:66:0e:a1:a0:ec:
                    e4:4f:45:3b:2c:ba:cb:b2:2d:af:75:3d:86:9e:87:
                    43:21:f1:f5:7a:70:37:48:82:9f:10:1f:ff:cc:d8:
                    61:9b:f6:4b:0e:4d:a6:c0:83:f2:0a:38:0e:9d:f3:
                    79:9f:df:08:94:cd:27:91:c7:ed:14:3b:0e:78:c7:
                    95:cc:7a:7d:94:5a:1f:78:50:63:af:63:d8:81:13:
                    a9:58:05:1a:f4:57:d6:ef:a8:fc:60:84:59:29:9d:
                    d9:8a:98:5b:2d:49:ab:33:b0:3f:41:7c:79:12:62:
                    ad:f4:8f:28:58:db:26:d9:4e:34:de:88:4d:ad:19:
                    3b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:15:1C:7A:ED:02:4C:90:94:56:57:A6:AA:5E:C7:8F:61:0B:0D:64
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/78151C7AED024C90945657A6AA5EC78F610B0D64.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.20.0/22
                IPv6:
                  2804:401c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265935

    Signature Algorithm: sha256WithRSAEncryption
         a0:35:be:83:10:d9:42:c6:6e:07:b7:69:da:a7:dd:1c:59:2c:
         78:0a:64:21:44:ce:ea:35:7a:62:25:3a:25:e6:00:9c:ed:1a:
         d5:59:99:af:c6:95:34:2c:0a:ab:38:94:1f:bd:ec:a2:b3:5d:
         5e:92:65:02:80:5b:e0:9b:23:99:3f:50:c0:d2:c2:04:a1:7d:
         4b:0f:d9:23:72:95:13:6c:77:ac:da:79:06:70:4e:74:a1:09:
         88:73:ef:f9:dc:b9:b9:3f:59:28:9a:53:b3:fa:f8:92:23:76:
         e4:dc:ef:c4:fd:52:52:3d:ec:05:be:d2:20:1c:08:2a:08:fb:
         db:7e:40:cd:79:41:e2:55:9c:cd:80:a4:88:50:72:bf:31:bc:
         9b:9d:77:d2:83:b1:b9:a3:ad:1d:fb:fc:e5:d4:97:f9:40:52:
         3b:98:63:83:83:32:75:13:20:1e:a6:1a:a8:b5:7d:3c:e7:56:
         51:4d:80:07:54:61:48:f4:9a:0d:46:8a:7d:11:1a:c5:28:5b:
         56:b5:71:83:60:b8:88:25:ce:9e:eb:9e:0a:18:85:4b:f7:39:
         75:62:d0:a0:59:10:c8:30:ee:8d:24:18:63:99:3b:7b:84:8d:
         bd:61:ec:a9:38:19:60:dd:6b:d6:29:07:e7:4d:2f:42:9e:d2:
         d3:d8:62:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org