Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/79BC27222346DEAF66F786FD18DD61E3847EE4CC.cer
File:                     79BC27222346DEAF66F786FD18DD61E3847EE4CC.cer (raw, json)
Hash identifier:          1tkCSbCGsq5qACP0Qck3mgObw13me2qWNi4USKBnl0s=
Subject key identifier:   79:BC:27:22:23:46:DE:AF:66:F7:86:FD:18:DD:61:E3:84:7E:E4:CC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       158961E94E869D318F7FCB294373B4981A717487
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/79BC27222346DEAF66F786FD18DD61E3847EE4CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 15:41:51 +0000
Certificate not after:    Wed 12 Feb 2025 15:46:51 +0000
Subordinate resources:    AS: 263855
                          IP: 138.186.84.0/22
                          IP: 2804:26c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:89:61:e9:4e:86:9d:31:8f:7f:cb:29:43:73:b4:98:1a:71:74:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 15:41:51 2024 GMT
            Not After : Feb 12 15:46:51 2025 GMT
        Subject: CN=79BC27222346DEAF66F786FD18DD61E3847EE4CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:47:bb:0b:74:d1:c3:2d:1d:de:6d:28:cb:
                    2a:03:28:de:ca:d5:32:bd:8b:55:56:55:c5:04:fc:
                    df:7a:11:4a:b9:de:41:58:fc:97:7d:47:26:9b:e7:
                    ee:92:07:eb:b9:19:23:8f:1f:7e:5a:4f:0c:d1:74:
                    fd:16:3b:16:21:ef:70:37:22:99:19:db:a7:34:1c:
                    e7:05:cb:9b:8f:f1:db:55:ec:3d:64:87:22:21:cc:
                    81:de:87:ee:a2:6e:45:d9:b9:04:cb:1a:9a:23:19:
                    76:88:49:67:9d:60:fa:68:88:05:a2:c5:f0:b0:7d:
                    98:f1:76:99:f2:1b:a3:cb:48:99:9c:44:6b:02:1a:
                    c5:fd:d3:47:96:de:43:46:0d:0c:fd:f0:8d:ae:70:
                    a7:fa:39:12:bb:b1:bf:06:06:eb:ab:2b:ad:d5:fd:
                    ca:cc:5f:ab:86:77:f5:fa:0b:98:12:2a:49:4f:65:
                    d3:52:80:bf:02:58:a2:5e:1f:25:d8:de:69:48:1e:
                    11:e4:07:73:b8:ed:6a:7a:ee:73:d7:9d:df:ef:15:
                    9f:01:58:03:5e:cd:66:70:2e:54:ac:c7:68:38:d4:
                    3d:86:03:bd:80:4c:19:ab:ad:8f:84:59:51:bb:10:
                    15:9a:a1:f8:54:1e:03:73:d6:6a:4f:0f:ab:5e:97:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:BC:27:22:23:46:DE:AF:66:F7:86:FD:18:DD:61:E3:84:7E:E4:CC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/79BC27222346DEAF66F786FD18DD61E3847EE4CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.84.0/22
                IPv6:
                  2804:26c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263855

    Signature Algorithm: sha256WithRSAEncryption
         a1:08:bc:77:e1:b0:96:91:80:66:62:6d:e4:6e:97:b5:bf:ee:
         c7:e4:ca:2c:17:2e:f4:c3:79:28:78:68:42:52:b5:35:32:62:
         a7:4a:14:3a:80:1b:e7:ad:4f:5f:cf:9a:34:f4:a4:9e:fc:1c:
         f1:64:be:b3:9c:49:03:96:75:ea:34:e8:2a:32:a3:17:ba:ca:
         d0:15:a6:e7:6a:cd:91:e4:ce:e5:f9:d6:66:dc:5d:f8:f5:e8:
         58:e1:47:be:a0:16:83:b9:9d:47:34:f6:2d:8d:86:10:39:4d:
         81:2f:48:ee:22:dc:e4:9c:db:9e:16:24:a1:34:26:17:5e:86:
         13:b2:40:71:b2:be:7e:7e:2c:03:e3:bf:5b:40:57:34:28:a8:
         5f:5b:4f:3c:8c:2a:aa:21:28:41:5f:2a:ec:5f:db:2e:92:73:
         9c:da:1f:ed:f3:21:c5:93:60:90:39:66:cd:f7:81:34:4b:87:
         a1:f8:87:1b:4a:a5:a2:15:28:d6:fc:e1:c8:8b:b9:61:31:d8:
         fa:32:8c:a8:e3:f5:a2:8a:1e:8d:c7:15:c8:38:4c:4b:78:d8:
         1c:2b:3b:6a:82:72:aa:66:35:68:e6:1b:57:06:18:de:c4:45:
         6b:d4:2b:5f:98:89:39:f1:7a:0b:60:19:10:65:59:a1:c5:68:
         e7:26:dd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org