Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C.cer
File:                     78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C.cer (raw, json)
Hash identifier:          f0kx6UroqZRk2CUhyagk23iN3skijHIPeqNwrKekVjc=
Subject key identifier:   78:C6:C5:A7:9C:FF:DD:70:77:E4:BB:9A:89:FC:10:04:60:FA:C3:1C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F9C3FB5635D9A70AAC2AE5DBDB269A476A2BDDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0/78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Jul 2023 22:32:40 +0000
Certificate not after:    Wed 24 Jul 2024 22:37:40 +0000
Subordinate resources:    AS: 61594
                          IP: 45.160.216.0/22
                          IP: 2804:510c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9c:3f:b5:63:5d:9a:70:aa:c2:ae:5d:bd:b2:69:a4:76:a2:bd:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 26 22:32:40 2023 GMT
            Not After : Jul 24 22:37:40 2024 GMT
        Subject: CN=78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:38:53:78:dc:09:9b:9c:68:4f:70:0a:a7:
                    f7:89:d7:e0:d1:40:34:42:41:66:55:07:b9:fb:6d:
                    92:2c:53:be:29:63:c4:2e:a4:41:ee:98:13:f5:d9:
                    fb:24:a2:a2:3c:33:05:8a:a1:21:61:50:ac:23:41:
                    98:66:04:80:40:0f:83:59:2a:ea:c2:ce:16:05:37:
                    92:4a:4f:64:48:f3:0d:ba:64:7d:41:3e:84:ab:e1:
                    63:2c:b2:07:13:e8:d0:92:f4:39:33:bb:75:20:18:
                    fe:73:5f:21:e5:02:c6:70:00:73:3d:4d:f8:e3:36:
                    9a:a7:d4:af:87:a1:67:13:ac:22:97:e1:ad:81:42:
                    00:81:9c:c2:e9:0a:66:29:85:9f:cb:67:ed:07:ba:
                    dd:2e:1d:04:1c:c2:16:67:8d:ad:65:4c:a2:83:f6:
                    33:94:b0:5f:5c:5c:2b:29:1d:b9:6b:ed:c2:28:87:
                    cd:87:c4:73:2a:83:2d:cb:98:98:06:60:60:55:fe:
                    40:ea:53:20:1f:25:b9:e8:fa:c8:86:4d:be:c7:e1:
                    31:e3:01:5a:1a:0a:8e:59:7d:86:11:55:91:98:4b:
                    1f:f9:0e:47:96:c7:97:6d:83:d9:3c:07:b0:2e:69:
                    94:7c:35:4b:31:92:38:cd:ba:c5:77:13:6f:e0:53:
                    d2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:C6:C5:A7:9C:FF:DD:70:77:E4:BB:9A:89:FC:10:04:60:FA:C3:1C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0/78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.216.0/22
                IPv6:
                  2804:510c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61594

    Signature Algorithm: sha256WithRSAEncryption
         51:69:b9:5d:5f:d6:04:35:69:ce:3e:bb:6a:c1:98:ba:93:65:
         39:95:24:e0:61:57:5c:0c:0c:32:a7:31:fb:88:31:4e:f5:51:
         b3:18:22:ad:ce:65:41:c8:7b:cb:4a:1c:00:7c:4f:d9:59:ee:
         3c:f1:56:a7:fc:e0:1d:8a:8e:75:2a:3e:f9:3a:96:cc:22:34:
         21:18:0a:65:84:a6:d1:aa:ab:f7:9d:36:ae:61:3e:85:6b:94:
         c6:5c:c3:7a:78:0c:c1:a4:be:48:d5:2f:d7:70:32:5b:52:85:
         d2:43:d6:99:9a:95:88:1f:b6:d6:2a:ef:ea:47:94:78:3c:d7:
         32:3b:96:1c:8c:49:cb:95:ae:0d:96:fc:53:ec:c5:66:e5:ae:
         2a:31:0b:8a:d3:b3:c3:9d:5d:fa:c6:e1:a6:b7:6c:62:44:6d:
         9b:f3:8f:a6:59:d0:55:8b:9c:1b:96:f9:8b:ea:53:a2:ff:aa:
         ef:27:87:d4:19:a8:67:76:24:9a:7f:05:ed:93:88:a3:97:32:
         7a:36:63:02:31:7e:e3:d3:01:0d:23:b4:9b:44:99:09:68:63:
         47:ae:f9:5e:ff:c8:05:47:56:f7:63:f5:0f:e9:01:1c:32:ef:
         b5:2a:33:69:70:9b:9b:e7:6e:23:07:61:49:a7:09:f5:5b:63:
         5a:34:f4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org