Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/79B23D2F8F4EDF23756584238BDBCE392427B638.cer
File:                     79B23D2F8F4EDF23756584238BDBCE392427B638.cer (raw, json)
Hash identifier:          4/QviuZRUIwWTy3uTZnEqPr111hYxqTIsPO9Zsz0Pbs=
Subject key identifier:   79:B2:3D:2F:8F:4E:DF:23:75:65:84:23:8B:DB:CE:39:24:27:B6:38
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       74336524BF246965E4AED89D77E429518FCA3F5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/79B23D2F8F4EDF23756584238BDBCE392427B638.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Oct 2023 04:00:16 +0000
Certificate not after:    Tue 01 Oct 2024 04:05:16 +0000
Subordinate resources:    AS: 263625
                          IP: 179.125.16.0/22
                          IP: 2804:1038::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:33:65:24:bf:24:69:65:e4:ae:d8:9d:77:e4:29:51:8f:ca:3f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  3 04:00:16 2023 GMT
            Not After : Oct  1 04:05:16 2024 GMT
        Subject: CN=79B23D2F8F4EDF23756584238BDBCE392427B638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:40:55:eb:36:1c:f1:9e:86:82:17:2e:af:
                    c1:8c:3b:1c:6e:b8:69:f7:46:20:b2:e9:cb:25:f8:
                    57:b1:b6:0d:74:36:8d:3c:16:eb:bf:55:c5:f3:5b:
                    48:85:70:84:0d:72:f2:f1:3b:50:7b:5c:a6:dd:7e:
                    89:99:42:93:7a:0e:e4:32:04:5f:d1:a3:bf:03:00:
                    ef:1d:50:7e:43:1a:24:85:b6:e7:d7:f7:6b:b0:36:
                    13:74:79:65:7d:44:13:16:3f:75:bc:91:49:1d:be:
                    08:4a:98:da:87:f9:c7:b9:a2:f1:9a:7c:6e:9f:b9:
                    01:c0:96:08:f2:66:01:c9:f2:e9:1a:6b:ad:8e:4e:
                    d0:de:4d:fb:e8:e6:0e:34:a1:5b:c5:a3:b4:02:a2:
                    0c:c1:a5:73:0b:20:c8:4c:e4:d0:79:dc:14:3d:d8:
                    45:24:6b:b0:65:7a:7f:4c:11:64:fb:a9:ea:33:57:
                    c4:f3:40:c1:ef:6c:99:3a:a6:16:38:60:b0:39:04:
                    de:de:00:55:94:5d:c5:c8:bb:c1:01:a8:ae:e6:d5:
                    1a:97:f3:6b:62:3f:8f:12:24:21:98:37:ff:2c:0e:
                    e6:35:cb:cb:4d:5e:4b:d5:ca:46:8d:2a:e2:db:9d:
                    a4:4a:3a:31:b1:7f:39:ed:06:90:9b:1e:b6:09:e3:
                    78:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:B2:3D:2F:8F:4E:DF:23:75:65:84:23:8B:DB:CE:39:24:27:B6:38
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/79B23D2F8F4EDF23756584238BDBCE392427B638.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.16.0/22
                IPv6:
                  2804:1038::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263625

    Signature Algorithm: sha256WithRSAEncryption
         a4:98:fe:72:46:cc:98:a8:c0:7d:4b:d8:92:56:8f:a9:47:6f:
         39:f2:a2:d3:9e:87:6e:58:49:41:de:ea:7c:76:05:3a:64:d6:
         64:c0:81:9b:fc:41:f3:39:70:4f:40:bc:30:6f:fa:fa:b6:b8:
         d4:d7:8f:2b:06:7a:c2:e0:d3:d3:be:75:3b:bf:c1:ec:ea:32:
         8e:58:d6:54:30:80:88:79:83:c1:5f:b9:1f:66:f0:58:39:ce:
         9a:cc:f9:7f:a1:cf:f9:1b:80:9e:81:4a:57:63:8e:74:b7:03:
         65:9b:db:a2:8f:13:9c:f8:67:6d:6d:1d:01:52:df:96:7a:72:
         21:fe:84:10:2a:3a:7e:b8:9d:ab:f5:6b:57:96:f1:8d:3d:42:
         f1:11:4c:0b:fd:9d:3b:9d:5e:5b:35:34:72:0a:88:ee:9e:c1:
         77:f1:d6:8d:ba:01:df:7c:fb:a9:94:ae:1f:c6:13:d6:2d:7c:
         15:e6:da:a2:90:2d:a3:79:56:da:70:b5:33:72:7c:05:33:57:
         a4:68:ba:6a:f4:c4:ae:70:03:db:dd:49:83:32:87:c7:d3:f3:
         12:e8:9c:2f:3b:aa:59:ab:8b:88:9a:e2:49:91:6e:04:fe:da:
         72:40:b8:02:3d:84:bc:92:dc:2e:5d:93:01:f8:c6:13:f5:49:
         e4:a5:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org