Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7963354CD1BDFFB3853B646759C33FB17C53C980.cer
File:                     7963354CD1BDFFB3853B646759C33FB17C53C980.cer (raw, json)
Hash identifier:          SHI2oLSHZAd7kRAW93kxaVfIJruuGbdvxfx2zUEEqvw=
Subject key identifier:   79:63:35:4C:D1:BD:FF:B3:85:3B:64:67:59:C3:3F:B1:7C:53:C9:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       063184BDBE48880EB1AC1249C721E31ECF712222
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/7963354CD1BDFFB3853B646759C33FB17C53C980.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Dec 2023 03:08:09 +0000
Certificate not after:    Sat 07 Dec 2024 03:13:09 +0000
Subordinate resources:    AS: 267566
                          IP: 45.70.64.0/22
                          IP: 2804:4360::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:31:84:bd:be:48:88:0e:b1:ac:12:49:c7:21:e3:1e:cf:71:22:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  9 03:08:09 2023 GMT
            Not After : Dec  7 03:13:09 2024 GMT
        Subject: CN=7963354CD1BDFFB3853B646759C33FB17C53C980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:a9:a8:f1:93:e6:02:3d:7f:41:37:7b:92:
                    7e:f7:74:d8:8f:bf:a1:11:fb:db:0f:14:c4:91:1b:
                    47:2e:9e:82:af:46:c8:29:0b:0e:8b:f2:ff:a2:9c:
                    57:ec:85:33:20:7b:40:25:00:dc:00:05:2c:8f:51:
                    f1:ab:af:af:92:13:8b:40:63:20:ed:03:f5:58:fb:
                    55:17:be:3e:62:5c:f7:7a:f9:d9:e0:72:48:99:8c:
                    5c:52:59:90:3b:16:b7:66:8f:fe:17:1a:cd:4d:af:
                    93:77:78:81:07:c3:9e:a2:10:df:9d:4f:3c:34:28:
                    a9:ea:0a:ea:49:34:a5:5f:5a:40:5c:91:5b:f4:51:
                    2a:c2:66:9d:cb:9c:d8:fc:d1:43:aa:6b:b2:b3:21:
                    95:07:83:c8:2d:fe:40:40:21:10:1e:3b:51:a2:19:
                    97:8e:01:6c:03:1a:c8:aa:13:e2:03:c8:24:ae:42:
                    72:17:0d:54:de:3d:74:c6:09:7d:0d:3a:79:2f:40:
                    97:c7:7b:67:8e:c5:ae:5d:69:ff:ae:85:c6:e4:2b:
                    e9:9b:ff:47:f5:18:07:e1:97:39:8e:cf:7a:dc:92:
                    e3:93:e7:a7:e5:53:5f:e0:37:c9:2a:08:50:55:e1:
                    8e:1c:46:b9:01:a2:57:fe:55:d0:64:84:d4:2d:f0:
                    69:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:63:35:4C:D1:BD:FF:B3:85:3B:64:67:59:C3:3F:B1:7C:53:C9:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/7963354CD1BDFFB3853B646759C33FB17C53C980.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.64.0/22
                IPv6:
                  2804:4360::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267566

    Signature Algorithm: sha256WithRSAEncryption
         5c:17:fb:ee:fc:13:be:33:66:50:cd:87:c6:18:04:e9:8e:cd:
         a2:5c:dc:5f:30:42:09:fc:f3:a2:b3:f8:30:e9:01:80:43:df:
         55:c6:06:9f:f5:c7:fe:e4:56:12:c5:7d:83:0c:3b:97:30:69:
         99:1d:5d:97:07:d7:d0:a4:5d:f7:47:4a:60:92:06:34:5e:e1:
         5a:cc:cf:00:9d:2f:9b:fd:5e:e2:96:1e:b7:ab:6c:f0:aa:fc:
         61:da:1f:bb:2f:23:6b:cd:af:d8:f1:a3:25:0f:9f:fe:27:b1:
         6d:8b:6f:47:00:32:d4:79:45:a3:6f:b7:dc:c3:4c:4a:5d:e4:
         24:3d:f4:2e:a3:52:17:f6:a2:9e:b1:61:75:c9:39:43:49:e1:
         84:ee:40:f1:0b:71:80:04:4f:ba:e2:fa:ec:cd:81:f4:fc:cb:
         ac:56:0f:4a:b9:5a:cb:c5:e0:f7:da:c3:5a:8d:0f:29:15:f9:
         e6:26:f9:cb:f6:69:d5:cd:43:0d:ad:f7:df:8c:68:f2:4e:37:
         9a:a2:ff:c5:8c:10:d5:0e:6c:87:a4:25:6c:2a:a6:ca:18:21:
         b9:c2:1b:68:10:c0:11:28:cc:e5:e9:db:b1:9a:ef:9d:e0:d7:
         9a:e3:5e:ff:fb:8f:5a:47:30:d3:6b:32:d1:4e:0e:b0:41:56:
         f5:e2:6e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org