Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/79EE627B7BDC29280A0ACD52E3CAB055E99AD07D.cer
File:                     79EE627B7BDC29280A0ACD52E3CAB055E99AD07D.cer (raw, json)
Hash identifier:          HuVa+Z2C0Ec5JSQ2vW/jhumWCDf0FSJvrYXb1PMPSUo=
Subject key identifier:   79:EE:62:7B:7B:DC:29:28:0A:0A:CD:52:E3:CA:B0:55:E9:9A:D0:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1BC967D98FE492BFFA083EC35C151A78645C8059
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/79EE627B7BDC29280A0ACD52E3CAB055E99AD07D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 12:49:17 +0000
Certificate not after:    Fri 28 Feb 2025 12:54:17 +0000
Subordinate resources:    AS: 269657
                          IP: 45.190.160.0/22
                          IP: 2804:67e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c9:67:d9:8f:e4:92:bf:fa:08:3e:c3:5c:15:1a:78:64:5c:80:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 12:49:17 2024 GMT
            Not After : Feb 28 12:54:17 2025 GMT
        Subject: CN=79EE627B7BDC29280A0ACD52E3CAB055E99AD07D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:cf:3b:21:80:5d:ce:b2:28:a3:29:ce:25:
                    47:11:ca:5f:21:bf:f7:60:c5:3f:b7:71:50:e9:29:
                    2e:76:11:79:74:c6:25:dd:f2:e0:93:eb:a3:1e:d7:
                    24:a5:a2:ef:1f:5a:c2:b0:65:5d:f6:72:3f:c9:48:
                    38:76:0d:ee:e9:53:8f:16:b8:d7:12:b7:4d:20:78:
                    20:c8:81:2d:83:d6:48:f7:1e:a4:b3:92:18:13:56:
                    eb:28:a4:6a:a7:06:01:04:f7:ca:6d:b3:f9:ec:9e:
                    38:04:45:af:6d:b1:a2:ee:ce:b6:92:95:11:30:84:
                    56:8d:19:8f:46:bf:fe:66:c6:d4:dd:f2:f4:9a:80:
                    46:d6:3e:a5:f2:cc:ef:86:e5:23:aa:a2:2e:ac:99:
                    e5:4b:f4:1c:c5:9d:53:7c:76:fc:0c:68:69:c7:a0:
                    a3:9e:97:64:ed:03:3a:06:fd:5e:b7:46:eb:f9:9a:
                    23:c6:53:c9:b1:2d:6c:b0:62:ad:f5:e9:c2:2e:c1:
                    0a:f6:7e:ac:63:eb:a8:63:e9:f6:e7:90:95:4f:e4:
                    66:61:96:09:85:89:dc:83:ed:21:10:23:fa:7c:1f:
                    3f:fc:77:09:53:f4:9d:ca:ed:47:63:99:bf:5e:09:
                    8d:a5:d3:91:ed:8c:54:f5:ed:b7:ce:03:2a:76:71:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:EE:62:7B:7B:DC:29:28:0A:0A:CD:52:E3:CA:B0:55:E9:9A:D0:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/79EE627B7BDC29280A0ACD52E3CAB055E99AD07D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.160.0/22
                IPv6:
                  2804:67e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269657

    Signature Algorithm: sha256WithRSAEncryption
         1b:9d:1f:3f:e9:40:00:2d:6b:11:a0:3c:74:d1:0a:9c:e7:26:
         c2:02:d5:68:91:59:57:28:b4:07:69:14:fa:e7:53:09:10:01:
         05:a0:5b:56:42:fe:ed:a1:1e:10:3b:e3:b2:46:63:86:47:bf:
         08:a2:97:ee:68:63:69:b3:ae:66:7e:c2:ab:d9:81:5e:ba:c8:
         9d:82:66:bc:f5:da:44:c3:2b:39:a8:7e:b6:a9:14:c5:32:c0:
         7d:d4:f0:da:af:81:1f:10:c1:63:92:f8:ff:1b:f3:fb:07:e5:
         a3:82:7b:cb:c5:ca:39:f8:b5:86:64:e9:0e:6b:4a:b0:e2:76:
         f7:9d:a1:50:c8:9d:7d:2a:0b:68:e5:5b:cf:fa:78:ed:63:a6:
         26:f4:cb:a9:6e:c1:19:db:77:ff:61:60:30:ce:73:95:59:84:
         c7:2e:4b:be:53:41:a9:ea:37:8e:3e:1e:b7:3e:e9:62:55:4e:
         cc:d9:f8:92:ab:e1:92:b5:ea:91:61:14:ac:91:59:aa:9b:d0:
         22:8c:54:ff:16:6f:cc:59:5b:10:c6:55:16:e2:86:7a:5e:d5:
         83:1d:8a:cd:bf:41:9e:4b:f0:81:cb:b2:46:ec:24:12:11:a9:
         6a:8d:12:da:87:ca:a5:b4:4a:32:af:c7:47:67:71:13:f8:63:
         84:5d:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org