Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/791B8D485A23826792942D3A94738A4EE7360CFA.cer
File:                     791B8D485A23826792942D3A94738A4EE7360CFA.cer (raw, json)
Hash identifier:          vZO5g5BzkIcz1Br/Yo/qyO/rWNwDV0chkSWVgMyUXm8=
Subject key identifier:   79:1B:8D:48:5A:23:82:67:92:94:2D:3A:94:73:8A:4E:E7:36:0C:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       557500352938F4C0FD4F41419D1BCA557B297886
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/791B8D485A23826792942D3A94738A4EE7360CFA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 13:29:26 +0000
Certificate not after:    Sun 27 Oct 2024 13:34:26 +0000
Subordinate resources:    AS: 28145
                          IP: 186.192.224.0/20
                          IP: 187.49.128.0/20
                          IP: 2804:d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:75:00:35:29:38:f4:c0:fd:4f:41:41:9d:1b:ca:55:7b:29:78:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 29 13:29:26 2023 GMT
            Not After : Oct 27 13:34:26 2024 GMT
        Subject: CN=791B8D485A23826792942D3A94738A4EE7360CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:85:d8:2b:62:f4:f9:e7:e1:00:53:cd:de:
                    2f:8f:74:08:80:23:3e:b2:c0:d8:30:6e:e6:ae:97:
                    2b:5a:6d:f8:05:4e:de:5d:51:9e:cf:d0:bb:2c:36:
                    16:35:4d:86:af:0e:f1:ad:73:59:39:1f:43:db:57:
                    89:1c:8b:7f:f9:26:50:20:86:94:9b:01:7c:fe:30:
                    d4:2f:af:77:ea:72:52:6d:9f:42:c9:5c:49:ff:73:
                    ad:09:f9:62:1c:df:0f:0d:e5:33:84:06:06:59:d5:
                    bc:f4:ec:0b:9c:2b:21:d2:86:f8:07:76:22:e1:ce:
                    6a:15:26:52:34:09:1c:d2:92:18:fe:21:30:2e:bd:
                    4c:c5:c5:a5:f0:c1:d2:bc:1c:40:c0:7e:a8:7f:f4:
                    b6:da:6f:a3:d5:dc:64:41:40:a2:19:d5:90:ef:62:
                    96:0d:46:e0:79:fd:e0:15:bc:d5:3b:f2:19:eb:1f:
                    05:82:b6:7c:72:ea:84:d7:3a:9d:de:9d:c4:ba:69:
                    ef:32:0b:e7:b2:cb:c9:87:0b:bc:6b:af:e1:26:0c:
                    b6:0e:09:82:5c:04:52:ef:3a:22:95:40:e4:3b:5a:
                    b2:db:3e:95:a5:17:8d:4e:7a:54:ba:52:57:16:da:
                    1d:b0:f5:f8:6c:77:e0:ae:1d:ac:3c:8c:e2:f5:17:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:1B:8D:48:5A:23:82:67:92:94:2D:3A:94:73:8A:4E:E7:36:0C:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/791B8D485A23826792942D3A94738A4EE7360CFA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.224.0/20
                  187.49.128.0/20
                IPv6:
                  2804:d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28145

    Signature Algorithm: sha256WithRSAEncryption
         69:c3:fa:77:89:3d:c0:98:a2:44:39:d2:72:ff:1d:7b:b1:f3:
         81:00:cb:a3:4e:c9:58:40:71:f0:9e:6e:61:3d:61:fc:74:4d:
         5a:1c:5b:40:10:ba:46:8a:47:42:83:eb:19:9b:5f:14:05:03:
         78:9f:26:ed:ca:3c:07:4e:d9:da:5c:fc:ad:3f:7a:d5:05:dd:
         fc:16:bd:0f:09:62:cd:31:b1:aa:e2:0e:f9:d1:53:e3:a7:1a:
         e6:0d:3d:b0:c4:6f:3f:ad:bf:5e:cc:e1:aa:94:55:4e:e2:ea:
         e3:e5:b4:b4:80:42:5c:a1:b8:d3:7d:22:fd:3f:b0:65:d1:ff:
         c2:ad:ca:a1:f7:9d:88:f9:b1:72:d2:6b:95:a6:89:a1:0f:73:
         4f:9c:b6:78:c4:5e:e3:66:61:61:ff:14:c3:53:fa:be:3c:90:
         fa:93:78:63:46:45:80:ce:0b:fe:c2:8d:8f:d0:6d:50:56:2f:
         45:e7:b2:95:60:df:00:fb:30:e2:ee:65:11:5a:79:32:fa:b4:
         29:45:0f:62:e1:7c:3b:50:f9:ea:36:f5:a8:c5:27:ed:cd:f4:
         25:f1:64:40:e0:e7:b5:7c:8c:a1:4c:30:75:22:4b:7b:a8:94:
         ab:84:ac:8d:ae:87:75:3c:ba:1c:e8:25:19:37:38:d7:55:4e:
         d7:f4:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org