Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/787B33A6F56C87694312588DB1C965482FE21F46.cer
File:                     787B33A6F56C87694312588DB1C965482FE21F46.cer (raw, json)
Hash identifier:          iMLthe1Rsu14Ih+TKd4OdDxZNtHdwPxIZVZ9ZbsODE8=
Subject key identifier:   78:7B:33:A6:F5:6C:87:69:43:12:58:8D:B1:C9:65:48:2F:E2:1F:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       364E884C8B9003616272C2B86629CCCD4AA5CF17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/2/787B33A6F56C87694312588DB1C965482FE21F46.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/2
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Feb 2023 17:59:56 +0000
Certificate not after:    Tue 06 Feb 2024 18:04:56 +0000
Subordinate resources:    AS: 266072
                          IP: 45.4.140.0/22
                          IP: 2804:3a20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4e:88:4c:8b:90:03:61:62:72:c2:b8:66:29:cc:cd:4a:a5:cf:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 17:59:56 2023 GMT
            Not After : Feb  6 18:04:56 2024 GMT
        Subject: CN=787B33A6F56C87694312588DB1C965482FE21F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f4:cc:ed:97:e3:72:06:e8:d0:5e:51:d2:c8:
                    89:ce:59:cf:d7:55:be:34:7c:60:61:bc:c0:8e:18:
                    ad:58:76:8c:02:dd:ef:f5:13:6a:ff:80:8a:cd:da:
                    5e:c2:45:4d:54:6f:6f:4a:ff:4b:13:20:a4:95:70:
                    b9:b4:c0:fa:50:a1:50:10:d8:d2:bb:3d:3f:fd:62:
                    07:44:35:26:df:69:1c:cb:20:f9:38:63:0b:ab:2b:
                    4d:78:3c:44:70:ba:3d:2d:a2:d2:8d:53:e2:f0:fe:
                    1d:04:68:19:de:a2:eb:51:3a:f0:a7:6a:ea:58:79:
                    4c:2a:ce:69:37:dd:73:99:0d:7e:9f:c3:96:5e:e6:
                    bd:42:c5:20:88:9e:6f:57:f3:e5:4b:34:e7:43:a2:
                    56:58:75:b4:48:32:3c:0d:21:25:62:48:fd:1c:93:
                    52:97:47:01:19:26:2a:46:1b:e8:b2:7f:b1:c2:eb:
                    b1:7c:cc:50:c9:bf:bd:94:77:d5:fd:9c:4c:0d:4d:
                    3e:ea:f0:67:34:cb:be:a6:90:5d:59:ff:76:7e:e1:
                    fe:26:c9:9a:81:a8:9c:c7:6d:2a:ca:76:b3:8c:9d:
                    72:62:fb:96:09:3a:67:a7:23:26:20:0a:20:fa:40:
                    df:86:9a:99:9d:0f:eb:7e:04:6f:56:11:d3:4b:c3:
                    e5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:7B:33:A6:F5:6C:87:69:43:12:58:8D:B1:C9:65:48:2F:E2:1F:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/2/787B33A6F56C87694312588DB1C965482FE21F46.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.140.0/22
                IPv6:
                  2804:3a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266072

    Signature Algorithm: sha256WithRSAEncryption
         75:6a:91:bf:7d:d8:86:6a:a8:a9:07:23:ff:79:a5:13:e4:b4:
         e1:2a:a3:0c:e2:71:78:ae:d6:42:38:8c:60:11:66:c4:b4:9e:
         e2:e5:ce:53:69:e6:62:6c:5e:f1:8e:69:8d:36:47:4b:4d:4d:
         76:cc:b4:3b:e6:13:c1:a0:15:dc:70:cb:22:d6:78:81:50:8c:
         d6:18:83:b8:f4:3a:a7:75:90:20:32:e9:ac:62:8b:00:cc:ca:
         15:c4:85:95:b8:14:59:14:c3:33:ff:2e:ef:26:82:58:aa:e7:
         99:15:18:6d:a5:4c:75:1f:68:5b:63:34:89:f1:1d:98:8f:27:
         f0:7e:c4:17:99:4b:0c:d1:80:a2:b7:e1:b2:dd:60:f3:d1:79:
         3a:3c:38:55:cf:da:12:a1:fa:91:57:e6:12:61:a4:2f:83:7a:
         52:b0:f4:e3:4f:95:b7:8a:f5:3a:8a:86:e0:5e:3d:6d:82:9b:
         8f:0f:c4:7c:5a:31:bf:8a:4f:c7:41:40:a6:c4:d4:e0:2d:7f:
         a1:e9:9f:92:f4:2a:46:33:01:dc:b2:5e:88:50:94:b7:e1:da:
         90:d2:3b:9d:29:19:ea:08:89:6f:de:df:be:57:e0:d7:e0:b0:
         1f:55:ea:94:7d:5d:ef:e5:95:1b:a7:27:52:ae:23:32:10:19:
         fb:5e:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org