Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7B85032F2F56AE296482EE2BA5C36156A4D672FD.cer
File:                     7B85032F2F56AE296482EE2BA5C36156A4D672FD.cer (raw, json)
Hash identifier:          UwFfgYtylJpci0u2ZsnMkCw7CBBx/u0xiw7QmdmUIfc=
Subject key identifier:   7B:85:03:2F:2F:56:AE:29:64:82:EE:2B:A5:C3:61:56:A4:D6:72:FD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F673E2124C8A47E872751674B695F589307A2B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/7B85032F2F56AE296482EE2BA5C36156A4D672FD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Dec 2023 11:52:16 +0000
Certificate not after:    Fri 13 Dec 2024 11:57:16 +0000
Subordinate resources:    AS: 269497
                          IP: 45.187.204.0/22
                          IP: 2804:6588::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:67:3e:21:24:c8:a4:7e:87:27:51:67:4b:69:5f:58:93:07:a2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 11:52:16 2023 GMT
            Not After : Dec 13 11:57:16 2024 GMT
        Subject: CN=7B85032F2F56AE296482EE2BA5C36156A4D672FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:53:d5:33:b1:c9:08:ac:27:5f:03:f0:f1:94:
                    eb:65:cb:8b:72:89:67:83:fd:dc:b3:45:1e:07:52:
                    11:05:33:f1:c2:72:02:f7:06:fe:32:d9:18:6e:e9:
                    86:c2:68:71:ff:bc:24:99:6a:e2:fe:ae:b0:d9:28:
                    21:28:38:5c:58:e3:02:91:1e:7e:94:11:3a:fd:5a:
                    4e:9d:60:7a:e4:8a:85:6e:81:45:e8:c8:0a:6c:29:
                    03:1e:b6:59:1a:30:f1:b6:57:b4:1d:ec:3c:dd:3a:
                    4f:5e:ce:2a:2c:b2:0c:08:d6:49:8a:de:4d:62:fa:
                    6e:18:70:8c:49:93:83:a2:79:8b:7c:ab:70:c4:0a:
                    06:d3:90:36:02:65:64:b7:ed:82:f1:cf:bb:db:9e:
                    74:3e:cb:ca:5a:0c:56:99:2d:b3:da:96:a1:5a:d8:
                    da:b0:58:0a:4d:d3:63:8d:82:c7:aa:0a:22:75:3f:
                    c7:ba:71:42:81:cc:56:91:d5:27:14:dc:a8:c2:9e:
                    39:3e:b4:b7:9f:21:8d:63:f1:e2:ae:2d:2f:f7:50:
                    7b:cd:f7:cb:7f:f8:5d:71:66:20:74:fd:6a:56:13:
                    43:c6:d7:e9:49:c7:d3:f2:e5:9b:14:6d:f8:f4:82:
                    8c:2a:3e:d6:aa:c5:b0:c2:35:cd:de:82:bc:45:83:
                    44:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:85:03:2F:2F:56:AE:29:64:82:EE:2B:A5:C3:61:56:A4:D6:72:FD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/7B85032F2F56AE296482EE2BA5C36156A4D672FD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.204.0/22
                IPv6:
                  2804:6588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269497

    Signature Algorithm: sha256WithRSAEncryption
         36:e3:96:4c:42:2b:20:f7:fb:c5:6d:ad:19:25:4d:25:eb:3f:
         b4:54:f2:1b:3d:c9:5e:89:cf:6b:aa:bc:ca:a7:30:76:34:60:
         1f:46:0d:8a:7e:e8:48:f4:9b:ff:c0:db:2b:e0:46:52:7e:61:
         62:32:2d:b4:49:74:76:d9:39:c9:d6:79:ae:e5:fb:bc:ab:df:
         e6:9b:aa:23:64:20:cf:17:e1:78:08:bb:96:89:45:b2:af:38:
         61:c2:59:eb:df:de:86:3f:40:92:e6:06:ac:60:a7:d4:6f:55:
         96:58:c6:09:f6:c4:a9:7d:c1:48:af:bd:c8:5e:00:4b:68:da:
         a9:56:96:3b:7e:ac:32:81:6a:1a:74:f1:83:85:d4:d7:ba:40:
         de:aa:03:b3:51:1b:e2:75:7f:bc:e0:d8:22:78:87:74:b3:78:
         0f:b7:1b:92:c6:8c:18:6c:2a:72:3a:d8:ea:6a:b0:4d:a4:53:
         90:b8:6a:4f:32:92:2c:7b:dd:02:aa:95:6f:95:68:53:d0:0a:
         b1:1f:05:9e:89:67:0a:f6:c2:26:60:86:9f:56:72:72:59:4a:
         04:cc:65:84:94:1b:06:c8:9e:09:9c:94:56:33:b1:c4:d5:b0:
         39:23:23:7a:05:82:56:af:b4:a8:0a:47:9f:3e:3c:cc:73:ba:
         bd:d3:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org