Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F.cer
File:                     7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F.cer (raw, json)
Hash identifier:          wo46L033NdTJUIflCb6R+c0SKP3h0MsmjOTIMVV02Cs=
Subject key identifier:   7B:B6:A1:BE:9B:83:78:9D:0A:A4:CE:A6:F7:BA:3F:66:23:DB:84:1F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20F25948DC5E5F2D9E11990ED749295AFA8D91EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 08:47:55 +0000
Certificate not after:    Tue 21 May 2024 08:52:55 +0000
Subordinate resources:    AS: 268854
                          IP: 45.174.144.0/22
                          IP: 2804:5b8c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f2:59:48:dc:5e:5f:2d:9e:11:99:0e:d7:49:29:5a:fa:8d:91:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 08:47:55 2023 GMT
            Not After : May 21 08:52:55 2024 GMT
        Subject: CN=7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:59:d8:f4:0d:93:36:73:1f:aa:c0:9a:eb:f8:
                    20:9b:41:bf:80:70:7d:a4:8a:1d:6c:a2:16:ee:37:
                    69:fa:61:6c:45:e7:0e:4e:38:6c:36:57:45:11:51:
                    67:15:00:a5:2c:1b:36:fc:7d:f1:2a:22:5a:5b:6c:
                    f6:f7:ee:ce:02:9b:b9:be:5f:cd:b6:83:08:00:34:
                    23:bd:5f:d3:30:f3:51:62:fd:2e:4d:b8:68:ba:43:
                    65:bf:f3:42:89:43:98:67:1b:6f:47:85:b8:c2:3d:
                    3f:ff:79:4f:e9:4a:96:ef:d8:29:2d:9a:95:7e:eb:
                    4f:5e:05:b4:e5:3f:90:d1:23:9b:cc:9d:c7:2a:18:
                    8d:e9:c3:c6:2c:3b:2a:b1:d8:ef:29:43:f8:07:bf:
                    70:78:ea:3d:f6:3f:cd:d4:6d:97:53:70:4f:2a:09:
                    c6:54:47:21:b4:e9:af:2b:8f:33:49:42:d6:bf:69:
                    6a:ab:f8:c4:a3:fa:61:93:ec:83:79:49:b3:29:e4:
                    1d:22:f7:d3:6f:1a:99:db:09:72:9b:65:9b:03:8d:
                    ab:30:fe:ac:6f:4f:bf:32:3d:80:7c:81:3b:d3:1e:
                    b4:0f:f5:20:aa:fc:ec:63:ab:f9:e4:9e:d2:42:fb:
                    74:b4:95:80:bf:51:1e:b6:44:fb:40:cc:04:3e:7e:
                    cd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:B6:A1:BE:9B:83:78:9D:0A:A4:CE:A6:F7:BA:3F:66:23:DB:84:1F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.144.0/22
                IPv6:
                  2804:5b8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268854

    Signature Algorithm: sha256WithRSAEncryption
         a7:2e:9b:be:e8:65:6c:30:1b:ae:f2:f7:3c:d4:b6:fe:26:83:
         1e:fd:f0:f9:3e:24:bd:83:59:79:c6:d3:9e:a1:9b:5e:b0:38:
         80:28:58:f9:9b:49:f5:e5:b0:74:c2:a0:c8:b7:76:3e:bc:8b:
         2a:bd:8d:4d:55:97:91:12:06:79:19:cf:32:3a:15:99:a4:57:
         e0:3e:07:ee:dd:3d:1d:45:85:cb:a9:9b:09:dd:ed:a0:94:fa:
         59:cf:b1:bd:2e:d7:ed:cd:d1:4c:22:ea:63:9f:29:95:51:9d:
         09:ca:33:d8:e7:67:1f:d8:12:9b:d0:5a:2e:73:23:bb:36:47:
         e3:f8:48:d6:81:29:92:ec:4f:64:8c:78:25:c6:30:bb:dd:72:
         26:d1:e8:7c:95:a3:71:d2:09:43:fa:fd:f1:c9:6b:4a:cc:6f:
         78:75:14:af:a6:b6:be:af:f4:27:0f:e3:cd:ab:bf:a2:1c:49:
         cb:13:e9:30:c4:05:38:2c:7f:45:2c:15:31:2c:6b:b3:3e:ee:
         3e:d7:8c:57:9f:f1:35:0a:9f:3d:fe:d5:a8:dc:63:92:f8:cf:
         2a:21:ef:14:be:29:33:f2:89:11:91:36:35:dc:3e:03:e2:4c:
         ea:e7:68:f8:32:a8:71:c3:0a:9e:a9:63:bd:45:9c:63:ba:ca:
         4b:77:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org