Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A6666748B5FE3C067496CCA069AB578FE73A839.cer
File:                     7A6666748B5FE3C067496CCA069AB578FE73A839.cer (raw, json)
Hash identifier:          juDP2TVyjAJayRrINlxK1YAtIaRnLl2BOlwJNkIUCCQ=
Subject key identifier:   7A:66:66:74:8B:5F:E3:C0:67:49:6C:CA:06:9A:B5:78:FE:73:A8:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       76A5C8A5821B632C6BC34C8B5ECE535460AE2445
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/7A6666748B5FE3C067496CCA069AB578FE73A839.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Sep 2023 11:15:57 +0000
Certificate not after:    Thu 26 Sep 2024 11:20:57 +0000
Subordinate resources:    AS: 262720
                          IP: 177.8.192.0/20
                          IP: 186.195.96.0/20
                          IP: 2804:c94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a5:c8:a5:82:1b:63:2c:6b:c3:4c:8b:5e:ce:53:54:60:ae:24:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 28 11:15:57 2023 GMT
            Not After : Sep 26 11:20:57 2024 GMT
        Subject: CN=7A6666748B5FE3C067496CCA069AB578FE73A839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e6:8c:c2:6b:3c:c2:29:16:68:4a:21:9d:e7:
                    a2:ad:10:c9:f3:15:63:6b:de:6c:0e:c4:8d:9e:de:
                    8f:11:f9:79:8a:d0:9f:b3:16:84:54:37:b3:83:e1:
                    3c:29:25:57:1c:1a:b2:59:bb:67:1a:b2:d1:c6:ec:
                    ca:14:71:5d:28:53:23:1f:bc:c2:1f:5b:2d:e6:f6:
                    5a:8a:9c:8a:a7:2d:08:07:f1:c4:0f:e5:1d:d5:fd:
                    38:ff:64:ac:20:4f:8a:18:a2:97:24:f8:b9:ef:33:
                    6a:39:b7:e6:89:07:02:6b:8e:f5:fa:3a:af:67:59:
                    5c:09:fb:b1:bb:4e:9f:dc:ae:9f:8b:09:58:d3:1d:
                    d2:49:3c:cf:30:48:bc:09:f0:86:76:af:72:a5:65:
                    64:f8:55:89:25:a8:4f:e5:26:50:66:d3:d9:34:59:
                    fb:d1:06:e4:9d:00:b1:29:bf:8e:02:12:62:03:cf:
                    d9:85:74:f6:11:4d:de:82:26:ad:eb:3a:3f:bb:1c:
                    bb:63:cd:74:47:ad:f2:37:72:ab:0d:db:4e:49:ad:
                    63:f6:fe:43:6f:29:f6:a6:7e:d2:9c:e0:4a:c8:04:
                    26:90:d6:ed:3a:bf:17:ac:fd:a2:49:2c:c9:b9:a4:
                    a2:dd:66:2c:15:5d:93:5b:68:22:f7:4f:64:94:1e:
                    01:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:66:66:74:8B:5F:E3:C0:67:49:6C:CA:06:9A:B5:78:FE:73:A8:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/7A6666748B5FE3C067496CCA069AB578FE73A839.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.192.0/20
                  186.195.96.0/20
                IPv6:
                  2804:c94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262720

    Signature Algorithm: sha256WithRSAEncryption
         2d:f9:f8:69:c9:45:7f:85:95:41:e9:5e:ab:eb:dd:b8:57:0f:
         43:cd:71:73:28:47:2e:97:42:ce:43:c2:f1:e5:48:de:ef:09:
         bd:f0:de:9d:a9:0a:5b:54:6f:d4:7f:11:f3:1b:e5:c9:b9:cb:
         d3:c4:2a:a2:66:0c:1d:19:a7:c3:0d:c1:d9:6a:34:5a:8b:83:
         79:dc:2b:49:23:ae:3a:4b:da:b7:92:e8:6e:d7:0e:b1:25:ea:
         ed:1c:4b:5d:6d:e8:0f:13:cc:be:2c:30:c9:ee:cd:fd:ff:29:
         ed:3b:83:2d:3f:ce:a2:91:9c:63:11:1b:01:ff:5a:3a:3e:dd:
         ad:05:45:ac:0c:90:06:a8:fe:66:c4:84:39:b1:15:e8:e5:d7:
         09:18:59:d2:f5:db:f8:a4:14:d6:9f:50:e6:46:6b:d7:bf:d3:
         c2:f4:e0:84:a6:75:9c:31:c3:9f:97:8b:b7:f1:01:61:34:84:
         01:5f:16:78:f7:b0:9f:1d:eb:52:3c:7b:4a:1f:62:09:47:14:
         3f:01:12:ca:4b:c6:59:08:3c:c6:9a:df:20:7f:23:08:bd:78:
         12:15:12:14:69:2f:f9:67:91:cc:0f:9d:35:94:67:31:f7:90:
         fc:f3:74:2f:d2:ca:85:18:5f:fd:40:b1:7c:b1:ac:98:02:e3:
         01:07:6c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org