Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/78A38AD04A79C3818BD4819A072012B0B1B561C5.cer
File:                     78A38AD04A79C3818BD4819A072012B0B1B561C5.cer (raw, json)
Hash identifier:          dfuMaaS3MLE5Ka7OovjBT7McTeQhGePQXFQ7lBDfspQ=
Subject key identifier:   78:A3:8A:D0:4A:79:C3:81:8B:D4:81:9A:07:20:12:B0:B1:B5:61:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       231B5F9ADAF1DBFEE8F18C047E60AC111179B4B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/78A38AD04A79C3818BD4819A072012B0B1B561C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Nov 2022 13:31:53 +0000
Certificate not after:    Fri 10 Nov 2023 13:36:53 +0000
Subordinate resources:    AS: 272228
                          IP: 189.126.128.0/22
                          IP: 2804:83e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1b:5f:9a:da:f1:db:fe:e8:f1:8c:04:7e:60:ac:11:11:79:b4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 11 13:31:53 2022 GMT
            Not After : Nov 10 13:36:53 2023 GMT
        Subject: CN=78A38AD04A79C3818BD4819A072012B0B1B561C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:f8:6f:15:89:b3:b2:cb:1f:2e:4e:4f:bd:
                    05:d4:57:a7:8c:3e:1f:37:4f:c0:5c:05:42:a7:22:
                    5d:99:53:7a:f6:ff:bb:06:ab:44:fc:ac:d3:cf:10:
                    67:44:3d:d5:0f:21:18:6f:31:03:5e:a2:18:9d:3a:
                    50:f0:40:bb:9b:20:3e:a3:e3:89:70:9a:f3:49:e8:
                    28:b6:19:c0:60:5c:de:c9:1f:a0:e8:f5:99:35:e8:
                    25:3a:1f:8b:99:da:31:16:d5:b6:bf:77:29:f6:b8:
                    4e:fb:05:c8:c1:88:eb:79:e6:a2:b4:f1:bc:b4:28:
                    88:5b:72:79:e0:b8:20:a9:93:07:e1:c2:ef:cd:b5:
                    5a:f2:3a:98:07:3a:20:36:e1:29:45:20:0e:d7:c5:
                    36:60:59:4a:53:f0:07:ad:8b:38:2c:83:e8:06:68:
                    0d:79:32:64:9a:0d:93:38:7d:10:3c:ae:61:54:c4:
                    25:03:54:16:87:a2:f9:ef:74:ae:31:dc:f7:8c:6a:
                    70:c4:5c:d9:8a:56:00:97:28:4c:0e:4c:d1:b7:76:
                    46:c7:2a:96:82:0b:38:4f:f0:3c:39:72:18:b8:48:
                    12:50:db:dc:90:73:7f:c4:8d:7e:2c:41:31:40:d5:
                    26:b3:4f:bf:e7:af:94:87:b2:da:7b:08:65:48:62:
                    12:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:A3:8A:D0:4A:79:C3:81:8B:D4:81:9A:07:20:12:B0:B1:B5:61:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/78A38AD04A79C3818BD4819A072012B0B1B561C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.128.0/22
                IPv6:
                  2804:83e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272228

    Signature Algorithm: sha256WithRSAEncryption
         4b:4e:33:87:84:13:f5:c6:c5:e1:4b:02:c9:17:38:d8:74:d0:
         3e:47:8d:57:3c:7d:0f:da:7d:02:96:fc:12:47:ad:fa:45:7e:
         7e:13:13:28:57:31:22:5f:05:96:28:89:5d:78:c6:23:c1:14:
         56:3f:ac:d5:33:a4:89:fa:16:2d:ad:a3:45:4f:2f:e8:05:81:
         f9:10:80:99:e8:b4:66:23:b7:e4:f0:11:c2:4a:08:2d:11:dc:
         7e:85:67:8e:e1:3e:7f:2f:ce:d7:c6:72:2f:96:3d:93:c5:6b:
         1f:22:2d:47:14:91:fe:70:ac:f1:1f:d9:aa:47:61:31:09:e4:
         84:82:2d:d2:be:9a:f3:a1:e3:46:21:f7:fa:aa:b9:4b:1c:5c:
         8c:01:85:e5:8b:89:61:27:5c:98:4b:2f:16:07:37:2a:85:3c:
         58:71:15:51:71:ac:66:55:6b:41:c3:e6:3e:68:ec:c2:ce:77:
         08:10:3a:a9:f5:80:0f:fe:f5:6e:8c:f5:0e:8c:ce:cb:b1:35:
         77:a7:1d:0f:de:cf:78:79:44:ab:7b:a3:6e:d7:66:c0:37:22:
         f4:31:64:8c:a8:39:9e:e0:c3:91:56:47:b5:81:dd:fb:d8:0a:
         f6:ec:9d:92:a9:d2:5c:83:3c:84:c4:82:75:ab:f8:74:da:5a:
         87:23:f7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org