Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7989C61D276C37138C3FC4ACCCC609F4A10FD3A1.cer
File:                     7989C61D276C37138C3FC4ACCCC609F4A10FD3A1.cer (raw, json)
Hash identifier:          UstZyWf7k4u+3gHvik6JLlz7Aq/OtE+NcgCvAyJLbgo=
Subject key identifier:   79:89:C6:1D:27:6C:37:13:8C:3F:C4:AC:CC:C6:09:F4:A1:0F:D3:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F9FA3A5E64D5748F51456B1F11C9C4D276EA767
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/0/7989C61D276C37138C3FC4ACCCC609F4A10FD3A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Dec 2022 18:34:24 +0000
Certificate not after:    Wed 20 Dec 2023 18:39:24 +0000
Subordinate resources:    AS: 263877
                          IP: 138.186.172.0/22
                          IP: 170.246.212.0/22
                          IP: 2804:271c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9f:a3:a5:e6:4d:57:48:f5:14:56:b1:f1:1c:9c:4d:27:6e:a7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 21 18:34:24 2022 GMT
            Not After : Dec 20 18:39:24 2023 GMT
        Subject: CN=7989C61D276C37138C3FC4ACCCC609F4A10FD3A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:68:f5:b1:6f:85:1b:87:4f:03:07:a5:34:
                    e2:c3:da:27:97:06:c0:8c:3e:99:42:3f:b3:60:6f:
                    1c:e4:be:21:57:26:c4:c1:a0:ed:2e:b5:58:d4:ad:
                    3f:17:f9:c8:14:4a:69:b6:38:44:99:ee:61:77:d4:
                    7c:1c:e5:ea:90:09:1d:11:65:1b:67:74:91:7e:c7:
                    22:c9:3a:c3:27:82:2e:75:7b:72:a6:e5:29:a5:d4:
                    de:ea:20:eb:54:ac:04:0e:52:69:d1:2c:40:51:ca:
                    71:03:41:3c:9a:0a:8d:b9:f3:a1:37:38:c8:88:e1:
                    ed:3c:41:05:3b:d4:f2:70:05:43:e1:48:34:df:26:
                    8d:60:2b:8d:9e:cb:a8:7a:d0:59:4e:53:1c:49:3d:
                    09:60:99:3c:3e:cf:41:f2:8a:0d:be:c5:c6:00:9c:
                    f2:a7:6a:9c:f1:07:05:68:f2:3b:62:aa:37:b1:d3:
                    56:ae:f4:44:24:85:b8:07:e4:79:08:ce:6b:35:bc:
                    79:b7:7d:c5:1f:94:4f:3c:0b:39:47:c9:50:f0:4a:
                    0f:ad:d3:3a:87:f2:09:93:54:c7:9f:ed:fd:df:d2:
                    cd:02:3a:11:a3:a8:42:3e:02:5a:90:5e:4d:49:39:
                    8e:77:e0:74:4a:99:56:63:17:a4:b7:f8:d4:dd:fb:
                    9a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:89:C6:1D:27:6C:37:13:8C:3F:C4:AC:CC:C6:09:F4:A1:0F:D3:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/0/7989C61D276C37138C3FC4ACCCC609F4A10FD3A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.172.0/22
                  170.246.212.0/22
                IPv6:
                  2804:271c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263877

    Signature Algorithm: sha256WithRSAEncryption
         7e:58:86:c8:b6:fe:04:e9:ee:a2:e0:9e:2a:f0:93:91:38:0e:
         b5:f0:ea:80:ef:a2:31:ef:75:7e:6c:1b:96:66:58:7d:4d:86:
         76:e8:02:62:a4:a3:c7:3e:b3:27:56:8c:fa:6b:74:b4:ee:be:
         d7:96:19:f8:80:40:d8:b2:a2:ba:69:6e:c4:bf:ae:e1:0e:5c:
         a3:68:00:a9:9a:39:fa:bb:52:f2:e2:1e:10:57:0e:c1:25:4d:
         c2:1a:a4:c2:ff:73:5a:8f:57:d7:4d:b6:b4:be:e3:fe:f1:33:
         4c:92:92:3d:cc:02:d9:0b:ca:f2:cc:12:b6:82:0b:2e:cb:f6:
         16:40:4d:15:91:ab:74:a1:c3:0e:0e:4e:37:a8:70:5d:56:df:
         ed:5b:95:da:50:62:2d:eb:eb:6b:d4:a7:54:32:5d:72:40:a9:
         39:71:86:16:ce:05:fc:19:21:4b:1e:97:cb:2d:f3:4c:a8:37:
         0d:f7:50:8e:ae:52:48:96:15:f4:a4:42:89:0e:56:f9:3f:98:
         c5:eb:0f:82:7e:43:79:a7:2e:e2:aa:65:96:c1:e1:38:fe:f2:
         5f:71:2b:c4:cf:c6:ef:cb:62:67:0c:09:8e:6a:c8:05:31:07:
         e6:b4:a3:f9:99:19:d6:1d:35:1f:ee:62:40:bf:d8:9c:b4:a6:
         d4:6d:e1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org