Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
File:                     79FF395ABA57F6164F559DB5DE6297166CD06003.cer (raw, json)
Hash identifier:          b4bnRoERDGW0fGPLAEdZsJUxMti7FfUcpBGpwfu+hI8=
Subject key identifier:   79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       B11BCA518E99351790C1010C83A4590F265517
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Nov 2023 12:26:24 +0000
Certificate not after:    Sat 02 Nov 2024 12:31:24 +0000
Subordinate resources:    AS: 262401
                          IP: 177.36.128.0/19
                          IP: 2804:3d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b1:1b:ca:51:8e:99:35:17:90:c1:01:0c:83:a4:59:0f:26:55:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  4 12:26:24 2023 GMT
            Not After : Nov  2 12:31:24 2024 GMT
        Subject: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:af:59:d8:a5:0f:f8:95:09:8a:67:59:bb:72:
                    a8:d1:20:8b:e8:9b:e5:19:fc:92:50:72:3d:32:fc:
                    23:84:fb:ff:c8:ed:3a:21:67:b9:60:5b:1d:16:74:
                    e1:3d:37:25:fc:e0:86:19:08:b2:d9:7b:81:51:db:
                    16:4b:e8:c5:31:fe:5b:cc:b5:ee:53:7c:6b:d8:13:
                    b7:d5:7d:2c:1c:df:45:a3:7e:78:a8:41:af:8b:0c:
                    e8:85:16:a5:25:c8:04:b1:24:6e:0c:42:e1:55:f0:
                    38:f5:47:80:84:93:1a:90:56:5a:cb:b8:7b:65:bc:
                    29:a0:b3:90:2c:81:fb:f8:c7:b9:d2:61:aa:f6:a5:
                    d1:b8:0f:2c:bd:a5:bb:12:4e:73:de:e3:59:cc:3f:
                    68:f9:58:e9:79:6a:b3:13:4a:2c:f5:50:1a:fd:fd:
                    2e:65:2b:bf:56:06:ef:b5:89:db:dd:84:8a:70:26:
                    16:57:e7:a4:9c:26:ea:58:da:af:07:3b:1d:a7:0b:
                    5b:ae:ef:95:e1:00:17:fb:ab:e1:ad:0a:3b:23:16:
                    9f:bc:08:72:67:07:cc:c8:55:83:2b:7d:22:44:70:
                    c4:24:e9:d3:3d:a6:07:2a:89:76:09:c0:db:1f:e3:
                    cc:f1:c5:1a:03:c7:f6:be:27:b4:64:93:ad:cf:b1:
                    df:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.128.0/19
                IPv6:
                  2804:3d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262401

    Signature Algorithm: sha256WithRSAEncryption
         3d:aa:39:99:ed:62:57:d6:ef:da:c1:f5:f5:83:d1:b9:31:94:
         68:e2:a3:f1:81:c3:93:c3:b1:cc:8f:4e:9d:7b:6a:b7:2a:38:
         b3:60:9e:cd:67:61:26:ca:f5:f5:de:c2:7a:d2:95:14:90:c3:
         55:22:64:a1:0e:62:33:dc:44:e7:3d:bd:da:c6:96:02:c8:c5:
         74:dd:ef:b1:12:06:94:05:1d:08:f9:bf:75:df:6a:d5:5f:f0:
         c9:68:74:a1:79:8f:72:f0:37:1e:8f:ff:bb:42:88:1a:ff:2f:
         75:6c:01:1d:0c:47:84:12:b7:52:a9:fa:99:53:c1:09:f9:1d:
         61:76:f5:d6:b7:6e:a8:81:f2:c9:a7:21:83:4a:a6:90:db:fd:
         c9:9d:0f:ad:fb:66:b9:03:a8:10:cf:df:cc:a6:7a:2a:9d:4a:
         f8:11:29:0e:14:15:10:c4:a2:30:7d:b4:a6:95:1d:dc:40:d6:
         ff:aa:65:60:f0:9c:5f:11:b2:7e:81:fe:69:c9:6c:82:23:8a:
         7a:c8:33:84:7a:1d:36:ae:1e:70:2e:ca:29:55:1c:80:4e:0d:
         23:80:a8:56:29:17:c9:3f:fd:ca:77:23:4b:40:61:1f:2d:ec:
         45:1e:7b:43:65:32:6c:f7:b5:89:ed:4c:27:7d:35:6e:2c:ab:
         ed:ee:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org