Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/781AC5A062EABB611A9D1B0BB056385DCABD6150.cer
File:                     781AC5A062EABB611A9D1B0BB056385DCABD6150.cer (raw, json)
Hash identifier:          icoPqzVos1t2BSbxNW4MYmnDMYIdkVlaxGesJaSEUNE=
Subject key identifier:   78:1A:C5:A0:62:EA:BB:61:1A:9D:1B:0B:B0:56:38:5D:CA:BD:61:50
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       539A1E7FE63B8D6CA3C5A40F6C9F90ED1FE14080
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/781AC5A062EABB611A9D1B0BB056385DCABD6150.mft
caRepository:             rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Jan 2023 21:30:04 +0000
Certificate not after:    Mon 22 Jan 2024 21:35:04 +0000
Subordinate resources:    AS: 264945
                          IP: 168.232.120.0/22
                          IP: 2804:3058::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9a:1e:7f:e6:3b:8d:6c:a3:c5:a4:0f:6c:9f:90:ed:1f:e1:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 21:30:04 2023 GMT
            Not After : Jan 22 21:35:04 2024 GMT
        Subject: CN=781AC5A062EABB611A9D1B0BB056385DCABD6150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:a5:51:70:d1:89:b2:49:da:d6:78:fb:40:
                    0a:7b:cd:7e:0d:86:b7:ce:58:1f:0c:1d:1f:9a:36:
                    da:ea:98:28:dd:ed:24:d8:f9:5d:01:12:50:ff:db:
                    bf:2e:17:48:17:75:b0:10:ca:d8:e7:b3:69:ef:d1:
                    e5:b4:39:09:5b:9e:24:24:44:81:29:f4:fc:dd:50:
                    ad:eb:9d:9f:41:4a:8c:79:92:a9:72:58:74:47:46:
                    4e:a4:a0:42:78:30:53:e3:1f:5b:f3:6a:c8:0f:0b:
                    69:72:76:fb:02:55:4a:88:53:ba:17:64:9d:1c:75:
                    f1:0c:b1:7a:43:f7:15:15:13:52:01:2b:87:0e:2b:
                    21:d0:f9:16:28:27:48:3d:e6:25:d5:59:b3:c9:9e:
                    8f:0b:ba:c2:b9:1a:43:9f:42:25:08:27:80:67:1e:
                    7e:e1:fe:9d:ef:29:f5:74:75:6f:40:b9:b9:5f:1f:
                    4e:ff:2f:7a:44:2b:f4:40:c2:87:6b:79:6b:3e:bc:
                    fd:f2:a9:ba:63:1a:80:63:19:d1:b6:a5:9d:a7:19:
                    b1:92:31:e2:52:f8:32:90:7e:e2:e8:9f:89:b1:a8:
                    ac:28:1f:23:b0:79:e6:fb:83:78:2a:72:4c:d2:1b:
                    10:eb:e0:cb:04:44:42:fb:a4:bf:e7:ee:1a:44:4c:
                    dd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:1A:C5:A0:62:EA:BB:61:1A:9D:1B:0B:B0:56:38:5D:CA:BD:61:50
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/781AC5A062EABB611A9D1B0BB056385DCABD6150.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.120.0/22
                IPv6:
                  2804:3058::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264945

    Signature Algorithm: sha256WithRSAEncryption
         35:65:eb:10:7a:3d:0b:16:87:1b:13:8a:56:dc:3a:c4:26:cb:
         69:2a:18:da:fa:85:77:79:cc:85:f4:9e:96:90:7f:7f:a5:63:
         2a:c6:19:f0:a0:7f:90:ea:16:87:44:1c:cc:87:b5:4d:84:91:
         00:f2:2c:bc:b7:0c:15:36:7d:ac:e1:ef:7e:ea:89:d9:b3:b8:
         57:23:e4:43:a5:eb:dc:03:e7:9b:6d:5f:17:79:8e:fd:05:12:
         ab:26:da:74:be:62:0b:a9:10:7a:7b:92:40:74:5a:90:41:da:
         49:14:1e:d6:1f:da:15:14:d8:86:64:4b:44:66:3d:1d:87:81:
         1f:8d:56:27:ce:c8:65:be:65:ec:d6:e6:27:d2:d1:c2:b4:dc:
         c8:6e:ce:8b:a9:72:1a:b6:40:d7:02:9e:c6:26:ab:f1:78:0f:
         89:59:35:1b:bf:7c:3a:66:74:a5:2d:b4:d7:fd:6c:35:1c:a7:
         c7:90:c1:ea:4e:aa:8b:9d:4a:0a:d1:ee:b8:3d:fa:aa:8a:9e:
         91:93:04:76:5b:7e:dc:bd:63:0c:0b:70:41:9e:24:cb:c1:79:
         09:04:ab:91:2a:31:5e:7a:81:3f:69:bf:cf:e7:e6:a3:90:d6:
         ba:b5:0b:c2:08:04:c7:50:34:a3:58:ef:b9:9a:b0:30:90:0d:
         e6:c0:fe:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org