Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7BE21E00D0ABCFF56013DB23513FC0121E2C98E1.cer
File:                     7BE21E00D0ABCFF56013DB23513FC0121E2C98E1.cer (raw, json)
Hash identifier:          iz6mKjzE1FansW02+93eEIiBZSr+RIQRWzcrsa82YqY=
Subject key identifier:   7B:E2:1E:00:D0:AB:CF:F5:60:13:DB:23:51:3F:C0:12:1E:2C:98:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3544176E624BA4973C96778B1A9415E553D0EC67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/7BE21E00D0ABCFF56013DB23513FC0121E2C98E1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 15:14:34 +0000
Certificate not after:    Wed 18 Dec 2024 15:19:34 +0000
Subordinate resources:    AS: 267395
                          IP: 45.233.196.0/22
                          IP: 2804:4cd4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:44:17:6e:62:4b:a4:97:3c:96:77:8b:1a:94:15:e5:53:d0:ec:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 15:14:34 2023 GMT
            Not After : Dec 18 15:19:34 2024 GMT
        Subject: CN=7BE21E00D0ABCFF56013DB23513FC0121E2C98E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:92:22:ab:5e:d5:b6:59:e4:3d:2d:c5:76:5b:
                    ea:c1:2e:a2:fd:17:51:a3:14:7f:f2:7c:aa:de:24:
                    2d:3a:5f:9b:8f:88:f3:b9:2a:26:86:b8:e3:6e:01:
                    f7:c6:6b:c3:e0:17:24:49:97:84:72:3b:29:69:d8:
                    ab:0a:66:d5:78:8e:99:67:35:0a:8e:70:f3:cb:69:
                    88:0f:c8:db:24:15:16:fe:f9:73:5f:37:ea:7a:84:
                    82:6d:1c:56:c1:51:9b:d4:3a:ca:3d:20:fd:fc:5d:
                    35:5f:62:d6:29:71:7b:dd:aa:c3:de:81:ef:da:77:
                    3b:28:a7:fd:35:ad:61:f5:96:47:e1:38:ab:62:68:
                    03:8a:93:dd:f6:5d:6e:1d:3a:75:4d:35:cc:89:06:
                    ac:2b:9d:1d:06:4b:11:e6:54:16:75:01:cd:0f:fa:
                    ed:4a:35:3e:b1:18:0b:fb:e8:db:13:21:fd:7f:40:
                    c3:be:fe:86:30:e6:87:fe:47:14:a1:1f:51:a5:ab:
                    a2:52:e7:24:9d:11:9e:dd:b5:d5:82:1b:a8:3b:38:
                    bd:00:a5:ea:c3:37:ee:46:9b:e4:ff:14:c2:1b:16:
                    e3:e0:a3:31:1f:53:40:2d:ed:84:6b:ed:8f:e3:dc:
                    dd:c1:de:47:8d:5d:9a:72:5c:f6:8f:6a:61:82:6f:
                    9b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:E2:1E:00:D0:AB:CF:F5:60:13:DB:23:51:3F:C0:12:1E:2C:98:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/7BE21E00D0ABCFF56013DB23513FC0121E2C98E1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.196.0/22
                IPv6:
                  2804:4cd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267395

    Signature Algorithm: sha256WithRSAEncryption
         63:3c:83:77:3f:4d:81:a7:41:45:53:0e:e5:99:f3:2e:d4:39:
         9a:01:7f:d3:7c:9a:b2:c2:3f:0b:b0:e0:be:f0:e0:dd:91:87:
         89:1c:a4:05:f0:24:d3:26:db:ab:52:04:f3:62:56:44:f0:72:
         52:47:cb:1d:ee:7c:de:93:31:df:72:70:1a:ef:ef:45:ad:d2:
         f9:db:ff:36:ef:c4:75:2e:dd:4e:86:30:bd:ce:b3:c5:af:4e:
         58:ec:8f:e2:4b:6b:52:5c:76:1b:69:3a:a5:db:39:ed:b3:71:
         14:4b:b4:5a:3d:01:c7:28:d0:fe:fa:16:47:ce:93:2b:fc:2d:
         d8:f0:6b:25:83:fa:05:97:cb:e2:21:2d:da:f7:3f:52:61:71:
         6f:a5:96:76:7d:5e:bc:09:ce:87:e9:a2:8b:a1:0a:8f:fa:69:
         51:36:35:3f:0d:07:6f:b4:af:c2:7b:f2:5e:6c:8d:3a:fa:6c:
         35:39:f3:d3:f0:28:f0:1c:c2:46:14:a5:7b:80:5e:cc:5b:86:
         8b:5c:d3:84:bd:19:3e:c8:7e:c4:61:81:6e:d7:b4:5a:5e:ee:
         33:12:fa:3d:e8:b4:1b:33:12:b3:ed:53:cb:e5:4e:ca:b8:98:
         e8:d2:2c:39:f9:9a:34:03:21:85:91:58:22:67:cb:75:bd:ac:
         58:e2:d7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org