Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7B5B0053B9260E81AE24046E1762E3966207D840.cer
File:                     7B5B0053B9260E81AE24046E1762E3966207D840.cer (raw, json)
Hash identifier:          SFWaKEGWAJLJPD2G6wxEneplGXeuZqimyXFAEDA8YZQ=
Subject key identifier:   7B:5B:00:53:B9:26:0E:81:AE:24:04:6E:17:62:E3:96:62:07:D8:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5241A93FEC2A9C594275D347647FB35B1349E6E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/7B5B0053B9260E81AE24046E1762E3966207D840.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Apr 2023 12:36:25 +0000
Certificate not after:    Thu 11 Apr 2024 12:41:25 +0000
Subordinate resources:    AS: 262532
                          IP: 128.201.120.0/22
                          IP: 177.55.240.0/20
                          IP: 186.249.176.0/20
                          IP: 2804:ec8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:41:a9:3f:ec:2a:9c:59:42:75:d3:47:64:7f:b3:5b:13:49:e6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 13 12:36:25 2023 GMT
            Not After : Apr 11 12:41:25 2024 GMT
        Subject: CN=7B5B0053B9260E81AE24046E1762E3966207D840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9d:5e:a9:ac:45:7a:72:b5:6f:83:a1:43:9b:
                    5d:63:17:7a:a8:cf:08:54:9b:f2:6e:3b:9b:e3:9b:
                    b3:0b:8c:27:b2:88:4e:68:0b:80:c5:1c:11:9c:a9:
                    32:99:5a:6e:4a:2a:a1:3d:f6:45:cd:c2:f0:13:7d:
                    28:88:00:56:c0:90:72:e2:dd:9a:3b:fd:1f:87:47:
                    fe:fc:74:15:e8:33:1e:f6:45:0a:6b:02:ef:92:ff:
                    dd:9a:ee:7f:df:96:5e:12:7d:16:76:b4:92:69:97:
                    8d:ce:42:eb:2c:5a:06:c3:c1:09:38:fd:ce:66:3d:
                    26:2d:cd:cf:d1:e4:86:33:52:68:2b:f3:61:70:c2:
                    5c:4e:24:53:45:c3:ff:1a:b0:0e:c1:b3:4e:05:38:
                    36:eb:3e:d0:5f:f5:eb:1a:54:50:b9:e7:19:cf:69:
                    1c:1d:32:2d:cf:0a:db:cb:23:50:71:43:10:ee:f8:
                    85:1b:89:f3:20:ae:2e:c6:b6:80:7a:12:89:3e:13:
                    45:4f:74:4b:44:d7:18:de:99:e4:b1:67:35:09:51:
                    77:c3:f0:a1:af:57:5c:36:fb:85:00:a0:6d:28:3f:
                    f2:cd:74:bf:aa:06:82:03:f6:8c:da:20:72:cc:ec:
                    ba:4a:fb:96:4c:df:51:3d:df:e8:6f:1b:32:ea:34:
                    e7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:5B:00:53:B9:26:0E:81:AE:24:04:6E:17:62:E3:96:62:07:D8:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/7B5B0053B9260E81AE24046E1762E3966207D840.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.120.0/22
                  177.55.240.0/20
                  186.249.176.0/20
                IPv6:
                  2804:ec8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262532

    Signature Algorithm: sha256WithRSAEncryption
         26:96:53:cf:7f:ad:a4:cd:dc:9b:a4:2b:8f:7c:90:ab:25:2b:
         51:84:ab:69:e5:52:a3:d0:6c:ba:5b:82:5a:91:5b:0e:b0:88:
         51:4d:95:1a:e4:cd:66:b4:45:46:0c:1a:55:07:5a:8c:bd:e4:
         55:82:62:da:c7:ca:2e:7e:4f:b8:5d:cb:ad:72:f4:b9:75:4d:
         20:4b:fc:c9:1e:94:2c:84:7c:a3:00:61:b9:41:0c:cd:c0:aa:
         fb:38:e1:f2:ee:b9:79:eb:42:49:ab:55:c7:dd:a5:a5:4c:bc:
         ad:fc:f0:b9:8b:30:b3:d0:dc:7d:a8:77:f1:3d:03:ab:10:bd:
         aa:0a:c5:55:f5:d7:4e:2f:7e:22:3a:de:9c:6f:31:26:b7:6e:
         62:30:be:3c:fc:86:c3:8f:2b:57:74:ca:30:ae:fe:66:b5:f1:
         72:4d:a2:95:c7:7a:8e:37:96:5d:45:67:00:f7:26:84:64:58:
         e2:25:a9:b8:62:26:26:2d:dd:06:d4:a5:1a:71:f0:b3:5c:e9:
         64:1f:93:6b:6b:45:ce:b5:64:e0:da:83:37:6b:85:0c:1e:1e:
         fa:9d:7e:3e:02:24:4c:67:15:32:10:10:8c:7f:8f:97:ef:f0:
         d8:2d:ce:fe:54:9a:f0:02:b8:d3:0f:52:5f:1d:5d:7f:cc:ba:
         57:15:f6:6f
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgIUUkGpP+wqnFlCddNHZH+zWxNJ5uYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MTMxMjM2MjVaFw0yNDA0MTExMjQxMjVaMDMxMTAvBgNV
BAMTKDdCNUIwMDUzQjkyNjBFODFBRTI0MDQ2RTE3NjJFMzk2NjIwN0Q4NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnV6prEV6crVvg6FDm11jF3qo
zwhUm/JuO5vjm7MLjCeyiE5oC4DFHBGcqTKZWm5KKqE99kXNwvATfSiIAFbAkHLi
3Zo7/R+HR/78dBXoMx72RQprAu+S/92a7n/fll4SfRZ2tJJpl43OQussWgbDwQk4
/c5mPSYtzc/R5IYzUmgr82FwwlxOJFNFw/8asA7Bs04FODbrPtBf9esaVFC55xnP
aRwdMi3PCtvLI1BxQxDu+IUbifMgri7GtoB6Eok+E0VPdEtE1xjemeSxZzUJUXfD
8KGvV1w2+4UAoG0oP/LNdL+qBoID9ozaIHLM7LpK+5ZM31E93+hvGzLqNOcvAgMB
AAGjggMmMIIDIjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR7WwBTuSYOga4k
BG4XYuOWYgfYQDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Ia3FVWFlxSlZFazl0bXltNDFRcHRmZVJ0amdrM2lLejR4
ZVE1dkhpUDV0Vi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Ia3FVWFlxSlZFazl0bXltNDFRcHRmZVJ0amdrM2lLejR4
ZVE1dkhpUDV0Vi8wLzdCNUIwMDUzQjkyNjBFODFBRTI0MDQ2RTE3NjJFMzk2NjIw
N0Q4NDAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAoDJeAMEBLE38AMEBLr5
sDANBAIAAjAHAwUAKAQOyDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAYQwDQYJ
KoZIhvcNAQELBQADggEBACaWU89/raTN3JukK498kKslK1GEq2nlUqPQbLpbglqR
Ww6wiFFNlRrkzWa0RUYMGlUHWoy95FWCYtrHyi5+T7hdy61y9Ll1TSBL/MkelCyE
fKMAYblBDM3Aqvs44fLuuXnrQkmrVcfdpaVMvK388LmLMLPQ3H2od/E9A6sQvaoK
xVX1104vfiI63pxvMSa3bmIwvjz8hsOPK1d0yjCu/ma18XJNopXHeo43ll1FZwD3
JoRkWOIlqbhiJiYt3QbUpRpx8LNc6WQfk2trRc61ZODagzdrhQweHvqdfj4CJExn
FTIQEIx/j5fv8Ngtzv5UmvACuNMPUl8dXX/MulcV9m8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org