Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/78C34AD0C3CD6C4545413ACDE88A0E20A1D6694F.cer
File:                     78C34AD0C3CD6C4545413ACDE88A0E20A1D6694F.cer (raw, json)
Hash identifier:          0uv0Z2OYjInGaaLFA2H2eet1Rpx+gVrdU0RghNBaus8=
Subject key identifier:   78:C3:4A:D0:C3:CD:6C:45:45:41:3A:CD:E8:8A:0E:20:A1:D6:69:4F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6EE7558A092078B09C945A0219A5446AB63A7E91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/78C34AD0C3CD6C4545413ACDE88A0E20A1D6694F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 10:41:15 +0000
Certificate not after:    Thu 01 Aug 2024 10:46:15 +0000
Subordinate resources:    AS: 28153
                          IP: 164.163.140.0/22
                          IP: 170.233.60.0/22
                          IP: 186.193.208.0/20
                          IP: 187.60.144.0/20
                          IP: 201.148.252.0/22
                          IP: 2804:1a14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e7:55:8a:09:20:78:b0:9c:94:5a:02:19:a5:44:6a:b6:3a:7e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 10:41:15 2023 GMT
            Not After : Aug  1 10:46:15 2024 GMT
        Subject: CN=78C34AD0C3CD6C4545413ACDE88A0E20A1D6694F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:f7:61:8f:c5:77:49:72:76:38:bc:1b:c0:
                    bc:b0:ef:c7:2b:0f:50:8f:5d:f4:2a:da:ad:96:08:
                    a0:55:d4:b4:c5:16:30:94:1b:3e:80:cc:7b:c1:f5:
                    23:b0:82:eb:d3:11:5a:a9:28:4b:7b:67:61:a7:3c:
                    07:ae:ab:da:4b:99:65:27:03:63:09:f5:76:e7:4f:
                    9f:0e:7d:57:65:00:1e:38:b2:e7:df:d1:b7:2a:55:
                    77:ee:01:a5:11:66:d1:c2:ba:04:1f:91:73:28:c9:
                    f1:1c:26:c8:3d:aa:ff:20:67:ec:6e:cc:8b:61:ea:
                    e1:6a:41:7a:1a:93:fa:34:78:79:cc:9a:92:b9:75:
                    42:d2:c1:01:39:86:18:d8:72:36:6d:78:60:ae:42:
                    d3:17:dc:fa:d3:29:dd:df:f3:b0:6e:69:7d:a6:b3:
                    72:8b:c5:7a:93:f1:46:3f:17:fe:b7:52:20:f2:bd:
                    ec:56:fb:e5:b9:43:db:28:6f:ab:32:f7:5a:4b:9f:
                    10:71:e5:92:a9:7d:d2:77:a7:e3:fd:39:97:30:93:
                    22:50:35:02:fb:94:0e:e3:21:86:00:7b:c7:15:f1:
                    74:f6:5c:2f:b8:56:82:f8:9f:6a:e1:ea:64:a8:88:
                    30:92:d6:a8:1c:84:48:50:f6:69:bb:36:73:55:65:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:C3:4A:D0:C3:CD:6C:45:45:41:3A:CD:E8:8A:0E:20:A1:D6:69:4F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/78C34AD0C3CD6C4545413ACDE88A0E20A1D6694F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.140.0/22
                  170.233.60.0/22
                  186.193.208.0/20
                  187.60.144.0/20
                  201.148.252.0/22
                IPv6:
                  2804:1a14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28153

    Signature Algorithm: sha256WithRSAEncryption
         82:ea:6d:6d:6f:c8:8e:6e:04:00:ac:a8:5c:6b:aa:e3:bc:a1:
         97:7a:ad:ef:5d:30:c4:93:bb:38:0d:7f:bc:43:f0:df:a9:39:
         03:28:3f:f6:b0:d4:32:15:7f:52:93:5e:28:13:74:54:e1:c1:
         93:b5:66:9b:7f:63:cf:ab:3f:32:c6:63:9e:12:95:f6:9d:fe:
         48:d0:3f:83:eb:66:c3:1c:f0:4a:38:80:f3:8a:9d:19:e0:b3:
         2a:26:db:87:e6:09:c7:e8:6d:d3:32:f0:42:ad:91:cf:10:27:
         12:60:27:73:e7:75:10:2f:09:d9:26:31:ce:b5:2e:ff:31:1d:
         b3:7b:5c:39:ba:41:ba:a7:fd:98:1e:95:70:55:c1:78:ae:8b:
         3d:f7:f4:bf:e5:99:18:91:73:c2:82:f1:55:7c:95:40:d3:f5:
         5f:24:ff:83:c3:29:49:67:32:2f:b2:8e:fd:b9:4c:70:3d:2e:
         c9:b1:77:f3:f5:d4:2b:4c:32:54:d8:79:52:3e:6e:31:1b:f9:
         93:c1:7b:32:3e:e1:0d:8e:5d:2f:c9:50:67:2e:ec:00:c2:20:
         ff:dd:0f:8e:20:dd:ac:07:95:a3:79:bf:2f:6c:dc:0f:30:ab:
         bb:56:49:c3:75:0d:1a:2a:9f:7c:7f:80:b2:74:4c:ed:5a:db:
         2b:a6:0c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org