Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/78A85BC823101919BCB85BEEFF44762DC0BE72F2.cer
File:                     78A85BC823101919BCB85BEEFF44762DC0BE72F2.cer (raw, json)
Hash identifier:          MKcq0erPYl9hxfnnhwO3JzAIfj3DEaYver7BULcIdzA=
Subject key identifier:   78:A8:5B:C8:23:10:19:19:BC:B8:5B:EE:FF:44:76:2D:C0:BE:72:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5CDACD1C2B3D34B478DCA1F73F2273938CB3B471
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/78A85BC823101919BCB85BEEFF44762DC0BE72F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Mar 2023 18:47:23 +0000
Certificate not after:    Thu 14 Mar 2024 18:52:23 +0000
Subordinate resources:    AS: 269444
                          IP: 45.186.164.0/22
                          IP: 2804:64b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:da:cd:1c:2b:3d:34:b4:78:dc:a1:f7:3f:22:73:93:8c:b3:b4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 18:47:23 2023 GMT
            Not After : Mar 14 18:52:23 2024 GMT
        Subject: CN=78A85BC823101919BCB85BEEFF44762DC0BE72F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0e:99:74:bd:bc:1f:d0:4f:b5:8b:a5:0b:8f:
                    b6:99:23:0b:4d:24:c8:8c:98:85:9d:d2:fe:dc:e0:
                    ca:7a:00:c0:d8:f7:0d:46:1f:a1:6e:d4:65:8a:e3:
                    fe:d3:f6:17:af:78:47:d1:3e:5a:41:ab:39:3d:4f:
                    96:44:2b:57:2a:25:c6:7e:d4:20:3d:d7:6c:ac:5e:
                    58:ee:92:51:4e:7f:c6:60:3f:6d:9c:08:8a:f8:ce:
                    9a:b6:b2:09:a9:9e:4c:29:2e:d2:8c:67:aa:eb:13:
                    f3:c2:ea:33:85:a1:94:f7:e9:05:73:6d:e0:29:93:
                    c5:63:f8:2c:c2:3b:c7:f7:5b:7d:a5:d2:9f:f2:cc:
                    1d:c6:f1:1b:e7:12:24:51:85:f9:ca:4f:e0:0d:46:
                    36:fe:fb:7e:01:8b:3f:f8:e9:7d:50:a1:32:7f:b9:
                    1c:02:b9:94:7f:27:80:4c:49:15:ed:6e:1d:ed:53:
                    af:ac:4f:69:62:e9:40:32:0e:1a:49:d4:4c:92:c0:
                    72:bd:22:f9:3f:02:8b:b4:4b:1c:3a:b9:cc:1a:a7:
                    24:25:98:d6:ae:d1:07:ce:0e:54:80:52:e6:70:15:
                    fb:b4:6d:a7:64:e6:5a:d8:a0:72:1d:39:f7:c3:02:
                    46:17:1f:9c:3a:0d:c1:15:68:45:06:11:b4:f5:39:
                    0a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:A8:5B:C8:23:10:19:19:BC:B8:5B:EE:FF:44:76:2D:C0:BE:72:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/78A85BC823101919BCB85BEEFF44762DC0BE72F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.164.0/22
                IPv6:
                  2804:64b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269444

    Signature Algorithm: sha256WithRSAEncryption
         02:5e:48:0e:4b:8b:fd:d0:a3:e0:3a:44:56:35:66:71:e5:ed:
         5a:56:0f:45:a2:32:b8:60:2c:3f:bc:4a:d3:b8:e1:0d:1f:20:
         d4:da:49:f2:8a:65:23:52:95:2b:f7:74:b6:ae:87:3c:0d:52:
         b5:d1:7b:97:17:b0:c2:27:47:ce:b2:83:24:4e:d8:02:b0:73:
         83:0a:c1:58:1f:19:66:e7:45:96:4d:d2:25:ac:c5:83:7c:57:
         70:0e:42:7b:7a:a2:de:2f:e8:d8:9d:7e:aa:6e:96:89:f9:cd:
         b8:58:ef:cc:01:ca:19:32:95:3b:87:57:05:02:74:fe:cd:b7:
         98:c7:52:a7:c6:6c:82:5c:11:4d:08:f0:c4:1a:ab:8d:b3:af:
         ab:fb:c6:32:0d:9f:73:2f:43:23:c1:33:32:de:5f:4e:fc:fb:
         f7:73:e1:f9:08:95:e8:6e:af:a2:2c:d3:1c:d4:d0:9c:c4:2b:
         73:ed:6e:84:e9:e2:4f:fe:e4:0a:6e:56:92:63:1d:12:92:ac:
         d7:51:1d:1a:4a:38:a7:3e:b4:c0:99:de:14:6d:a9:e3:97:ce:
         ee:72:02:0c:b3:c6:74:bf:74:5f:eb:b7:56:10:82:b4:cb:c5:
         ec:ba:10:29:f5:bd:d4:ec:b4:98:70:4c:ff:d5:c1:63:eb:38:
         48:81:55:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org