Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/790C00F8A05FA0D218883534C018ADD7838D0242.cer
File:                     790C00F8A05FA0D218883534C018ADD7838D0242.cer (raw, json)
Hash identifier:          y5wS6nhidzJA5TB8o/JbEaEiys33ITF94fRHtkCaPxU=
Subject key identifier:   79:0C:00:F8:A0:5F:A0:D2:18:88:35:34:C0:18:AD:D7:83:8D:02:42
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       06C75179AD6DA2BC245A8A0D3C4BCCA449DD731C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/790C00F8A05FA0D218883534C018ADD7838D0242.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Nov 2023 19:11:42 +0000
Certificate not after:    Wed 27 Nov 2024 19:16:42 +0000
Subordinate resources:    AS: 264551
                          IP: 138.0.140.0/22
                          IP: 2804:2160::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c7:51:79:ad:6d:a2:bc:24:5a:8a:0d:3c:4b:cc:a4:49:dd:73:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 19:11:42 2023 GMT
            Not After : Nov 27 19:16:42 2024 GMT
        Subject: CN=790C00F8A05FA0D218883534C018ADD7838D0242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6a:b5:41:3e:2c:9f:7d:c8:26:98:d0:87:46:
                    69:d1:e2:8a:6e:35:4a:09:70:7a:89:0f:e4:7d:c7:
                    62:cd:b7:93:34:e9:b1:5f:f2:bd:a5:36:76:48:20:
                    be:b3:69:e8:08:37:c3:b1:61:da:14:11:04:cd:c0:
                    ad:f3:f1:b7:8e:c2:fa:24:7a:d0:f6:dd:22:d5:49:
                    aa:19:b7:12:e9:85:a4:f1:02:98:bb:cf:bf:8f:f3:
                    67:60:6e:5f:98:f0:85:13:d4:7f:23:a5:6c:a8:5d:
                    f9:b8:8f:4d:bc:0f:40:c1:6b:ab:f0:9b:eb:0e:ef:
                    b4:bc:9a:4c:aa:63:52:59:26:93:7e:d2:02:28:45:
                    56:2a:aa:67:31:dd:7e:4d:75:3f:20:29:8b:31:01:
                    70:e0:1e:cb:62:8c:ee:44:0d:83:eb:b6:61:1c:33:
                    54:2e:74:3b:9b:c6:d3:35:ac:a9:60:e4:c1:a7:7b:
                    ff:55:18:39:90:90:69:41:85:85:56:d8:6a:81:d7:
                    66:73:08:54:b1:f9:79:16:15:1e:95:be:f6:cb:ba:
                    05:42:e7:cb:fb:17:b7:6a:e4:34:9d:c4:fd:a3:d0:
                    4e:05:34:19:79:21:e6:f4:4d:29:b3:4b:97:5c:13:
                    ac:ef:ac:45:44:7a:a1:09:29:85:a2:24:51:f0:c1:
                    d9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:0C:00:F8:A0:5F:A0:D2:18:88:35:34:C0:18:AD:D7:83:8D:02:42
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/790C00F8A05FA0D218883534C018ADD7838D0242.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.140.0/22
                IPv6:
                  2804:2160::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264551

    Signature Algorithm: sha256WithRSAEncryption
         79:f4:b1:34:9b:88:8b:5b:c4:39:04:2c:16:4e:28:49:64:ab:
         68:77:85:87:00:85:84:c1:ed:93:cd:e6:cf:ae:29:2b:a5:eb:
         c2:9b:bb:ec:84:2f:9e:f7:8c:5f:ba:1b:31:7d:44:22:7f:92:
         e5:2b:a0:fd:6a:40:eb:f1:f9:d8:ea:4d:d2:e2:3f:d5:44:04:
         7c:39:19:9f:56:7b:d5:20:c0:8b:0b:d7:e3:35:77:33:6e:8d:
         45:79:25:b8:b9:b1:81:5c:6c:b7:82:61:f6:53:4b:38:ec:4f:
         43:42:c2:b5:59:ce:33:b2:a5:6d:55:2f:95:7d:18:9e:7b:27:
         b9:25:bc:7e:6b:7e:b8:de:0a:a9:8b:f6:33:5b:f0:b7:29:fa:
         6a:ec:26:89:3b:cb:3f:4c:ed:14:6e:33:86:23:b9:f2:37:79:
         4c:98:0f:51:a5:2a:ce:74:90:f2:24:2f:b0:e6:97:45:bb:15:
         ff:18:b9:c2:95:a4:34:52:d0:98:f0:8a:75:58:c7:f7:7f:0d:
         9a:5e:1b:28:f9:67:0e:7d:ec:e6:2b:fc:40:50:3a:49:6e:9a:
         64:17:00:42:84:88:ef:04:4f:82:c1:b9:48:3b:c9:db:e7:57:
         d8:72:3f:03:3a:e5:ba:95:35:e0:62:ab:48:ef:79:b1:03:46:
         47:6d:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org