Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A66C1F92D197DDA862630D98506042FC4388765.cer
File:                     7A66C1F92D197DDA862630D98506042FC4388765.cer (raw, json)
Hash identifier:          Ucbb8//xyLUIc1t/rzrST+W5YcvR3Z8RcUVCo1OwH9M=
Subject key identifier:   7A:66:C1:F9:2D:19:7D:DA:86:26:30:D9:85:06:04:2F:C4:38:87:65
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       63CA18A4D78E268B3DDA181E6F44B09ADFA7B1A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/7A66C1F92D197DDA862630D98506042FC4388765.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Dec 2023 20:14:26 +0000
Certificate not after:    Mon 09 Dec 2024 20:19:26 +0000
Subordinate resources:    AS: 270739
                          IP: 179.109.104.0/22
                          IP: 2804:70a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ca:18:a4:d7:8e:26:8b:3d:da:18:1e:6f:44:b0:9a:df:a7:b1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 11 20:14:26 2023 GMT
            Not After : Dec  9 20:19:26 2024 GMT
        Subject: CN=7A66C1F92D197DDA862630D98506042FC4388765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:c5:f7:43:4d:c5:70:0e:0b:93:6b:2b:11:
                    8e:7e:eb:87:89:b9:cf:0b:a5:ad:9e:ce:a1:3b:07:
                    30:a1:df:17:04:68:e2:f8:c2:6d:84:02:bd:58:4c:
                    04:cb:31:77:6a:1f:ba:5e:25:6c:1d:5f:30:bf:86:
                    3b:c0:da:5d:97:75:54:8f:b8:e0:78:9f:d2:fc:be:
                    b3:3d:a4:92:50:d4:dc:bf:85:4d:ac:8c:04:5d:29:
                    6e:99:0f:e7:57:bb:87:02:9d:f1:ad:fd:bc:22:c1:
                    17:19:a0:9c:79:80:5e:77:ff:90:b3:f6:d4:d7:69:
                    df:a0:e3:b9:dd:91:c7:ab:87:31:c0:84:44:ce:cd:
                    d3:5c:0f:19:28:94:d3:86:b2:bd:af:ec:71:aa:69:
                    ff:49:49:1f:6b:2d:d3:2b:26:d0:37:f6:a0:22:fd:
                    20:55:c8:8b:f8:a3:53:9b:f3:70:30:4f:d6:cb:0c:
                    6c:52:af:2e:4e:ed:25:1f:b1:0b:4e:94:0d:a8:a8:
                    12:b2:79:63:a5:46:c2:fa:95:62:76:b1:28:c7:1c:
                    1e:3b:f0:cc:5b:4c:44:67:53:38:a0:f8:b7:d9:6e:
                    c2:5d:df:2c:df:b2:d5:66:e2:62:4f:fc:d5:dd:07:
                    9a:aa:c7:05:fa:a1:16:ed:69:6a:ee:54:79:1a:87:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:66:C1:F9:2D:19:7D:DA:86:26:30:D9:85:06:04:2F:C4:38:87:65
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/7A66C1F92D197DDA862630D98506042FC4388765.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.104.0/22
                IPv6:
                  2804:70a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270739

    Signature Algorithm: sha256WithRSAEncryption
         9a:fc:f1:1e:3f:fc:4f:49:fc:46:4a:eb:18:5a:1f:d4:fd:e7:
         cf:96:75:b7:84:c5:56:ff:45:ac:c9:18:4b:4c:74:62:d2:49:
         70:1a:3b:ad:7d:51:6e:0f:9d:3d:e8:a0:d9:60:d5:f3:46:04:
         65:b0:11:24:f3:26:cd:f8:7b:2e:5d:45:85:33:6b:a6:0e:a3:
         cf:eb:90:8c:b2:3e:40:f8:80:51:f3:de:aa:5a:3e:76:15:9e:
         68:59:7b:2a:e4:31:96:47:29:91:56:96:26:1d:6a:06:9c:63:
         9f:db:23:5b:5e:52:60:4d:f1:b8:09:d9:9a:34:07:20:09:c4:
         f6:1a:0b:07:74:48:82:0c:99:8b:b4:36:35:2a:8c:47:39:7a:
         e9:b6:ab:b0:37:ca:67:08:23:e8:1c:53:29:c1:d1:45:68:d5:
         84:1b:d3:fa:82:dd:48:6e:3d:7c:fb:db:f1:44:52:a2:58:a2:
         67:04:f5:86:f5:43:4f:a0:4a:66:85:1f:44:1a:b0:fa:1a:7f:
         a1:85:cd:26:a1:8c:c4:ac:63:37:a3:d5:b0:24:f6:a9:2e:92:
         e0:77:91:3f:73:21:ca:51:83:b5:dd:3a:52:21:80:ca:8a:ef:
         aa:d8:00:60:4d:bf:ac:9c:68:83:a5:dd:18:85:2d:46:a3:2d:
         6a:82:6d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org