Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.cer
File:                     7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.cer (raw, json)
Hash identifier:          d+2LaQ1OHDIDetQHtgBnetyT4MUltbxOxoFGDkcBuaI=
Subject key identifier:   7B:D5:45:6E:3A:04:8C:FE:2F:62:F6:F7:BF:D2:F0:DC:D1:F8:5B:5D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       799749F6F93095614D1BDA779A7786E9ADF38DDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Mar 2024 12:33:33 +0000
Certificate not after:    Sat 08 Mar 2025 12:38:33 +0000
Subordinate resources:    AS: 61712
                          IP: 131.72.44.0/22
                          IP: 2804:1b28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:97:49:f6:f9:30:95:61:4d:1b:da:77:9a:77:86:e9:ad:f3:8d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  9 12:33:33 2024 GMT
            Not After : Mar  8 12:38:33 2025 GMT
        Subject: CN=7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:ad:c6:24:91:37:f0:be:c9:c0:59:83:f5:
                    ed:14:1a:b6:87:3b:73:66:70:18:07:64:f0:47:11:
                    9f:1a:13:dd:9f:75:a1:c8:65:39:47:b4:78:27:65:
                    5f:a1:6f:a6:2c:69:b7:8b:a0:a2:0c:aa:e9:3c:e0:
                    d6:c6:f7:69:0c:c8:6f:57:62:51:ab:9a:16:42:d2:
                    2d:b1:16:13:35:2f:94:02:f5:f2:a3:ae:ad:49:8a:
                    37:e9:6f:bd:e0:fa:9d:0d:01:f2:52:3d:31:29:82:
                    5c:bf:86:46:20:5f:9e:19:35:3e:e6:80:eb:c2:a8:
                    de:38:9d:f1:f4:cf:46:b3:6c:f2:33:c5:c2:64:2c:
                    7b:e0:4c:91:87:f8:74:40:6d:e3:5c:b4:8f:9b:40:
                    08:86:e8:1e:75:3e:42:93:80:23:1b:33:45:34:66:
                    26:ee:88:d3:89:19:17:ed:89:bb:f4:9a:62:14:48:
                    08:3b:7b:dd:00:bb:75:2b:23:ec:13:64:4c:9d:65:
                    5e:86:03:bd:f9:2d:e0:01:84:61:9a:3c:ec:77:31:
                    ed:47:ab:f4:e5:34:cd:36:53:f7:92:99:f1:1f:68:
                    d4:64:39:a8:c2:ec:e0:89:fc:03:05:08:3c:a3:3e:
                    75:df:6b:05:ae:7d:a4:d5:9d:db:b0:d5:51:99:f9:
                    d0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:D5:45:6E:3A:04:8C:FE:2F:62:F6:F7:BF:D2:F0:DC:D1:F8:5B:5D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.44.0/22
                IPv6:
                  2804:1b28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61712

    Signature Algorithm: sha256WithRSAEncryption
         5b:83:87:e6:bb:0e:f6:ac:be:05:35:92:e5:d5:08:6a:2a:11:
         a2:72:49:d2:8b:d0:ea:66:f3:cc:a4:f2:31:e5:10:7b:c0:45:
         a3:4f:fd:53:ac:93:9d:f3:99:5d:db:79:fe:f6:16:3d:ad:5e:
         90:53:2a:5f:1c:d4:fb:67:2a:21:dd:25:f0:00:8f:da:0d:1d:
         51:53:9a:09:57:c2:31:9f:ca:96:1b:ce:52:8e:76:ad:29:0f:
         f7:8b:2d:c6:27:7e:58:4b:33:35:2a:87:a8:49:6d:f7:d1:e3:
         7e:c3:ba:a1:98:f6:88:a0:58:02:d3:53:e0:90:1c:11:e0:ad:
         9f:17:71:c6:60:4d:67:2c:53:1c:cb:cf:69:f9:f3:cc:1d:b5:
         aa:54:bb:43:d9:96:52:14:b6:69:1e:75:96:c3:8f:c2:3e:7a:
         18:7c:eb:7c:ea:75:1d:f7:89:92:de:c6:4c:f0:b9:88:e3:e1:
         15:9d:71:3d:6c:3a:49:21:56:32:b2:0f:f4:14:a1:0f:66:a7:
         55:f7:09:52:16:09:80:b4:91:9c:df:c0:38:85:1b:ab:24:be:
         dd:b8:fa:27:50:c3:4a:4a:d6:cc:fd:d7:6f:15:96:55:8d:c8:
         3f:81:49:1e:4f:b4:8b:b4:b4:da:c2:18:4b:68:3e:fb:f1:3a:
         7f:e3:c1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org