Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.cer
File:                     7BE95A26137B30C740C99DDD48DA6FEAD62905B1.cer (raw, json)
Hash identifier:          ohROTpXzd92Fb6LgBdpLiIhRjLOxfrATqUwUF4vtAM4=
Subject key identifier:   7B:E9:5A:26:13:7B:30:C7:40:C9:9D:DD:48:DA:6F:EA:D6:29:05:B1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       56E4ABD6CA3970F8FBBCD4CE891B0BCE223D013D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Sep 2023 18:31:48 +0000
Certificate not after:    Sat 14 Sep 2024 18:36:48 +0000
Subordinate resources:    AS: 262373
                          AS: 263151
                          IP: 168.195.252.0/22
                          IP: 168.205.24.0/22
                          IP: 170.239.36.0/22
                          IP: 177.128.136.0/22
                          IP: 191.242.176.0/20
                          IP: 2804:874::/32
                          IP: 2804:1780::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e4:ab:d6:ca:39:70:f8:fb:bc:d4:ce:89:1b:0b:ce:22:3d:01:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 16 18:31:48 2023 GMT
            Not After : Sep 14 18:36:48 2024 GMT
        Subject: CN=7BE95A26137B30C740C99DDD48DA6FEAD62905B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:54:d5:9d:e9:e0:c7:9e:53:96:6e:45:1c:4c:
                    48:f2:2c:e2:17:af:91:a4:61:75:eb:7e:51:23:54:
                    2f:5e:8f:9a:91:f8:e7:99:72:1a:d1:a5:4e:f9:f1:
                    b8:fe:fe:e8:fe:ce:b5:8c:ad:44:18:23:08:f8:d0:
                    53:19:3d:2e:10:0e:86:9c:d7:26:a8:ba:35:c9:76:
                    d3:9a:07:ee:7f:5d:bc:55:69:61:d1:ea:62:b9:38:
                    24:19:95:a3:b9:9b:d3:09:9b:25:8b:5f:13:f2:30:
                    5c:75:a2:c9:db:fb:6b:c3:50:9a:af:f8:55:19:4b:
                    e7:a7:a5:4c:49:3e:b3:3f:38:ea:2a:fc:2b:ff:5f:
                    ae:26:f5:77:10:03:14:49:50:1d:44:05:6f:10:37:
                    06:6e:d5:10:7c:cf:68:64:7a:8a:92:e8:bb:0d:4b:
                    fc:59:84:c1:b1:2d:69:a6:2a:7a:24:a8:cd:44:93:
                    cf:fe:b6:ee:96:64:99:81:89:6c:e8:d0:9a:78:50:
                    d3:ea:dd:29:b8:ff:e0:9a:d6:89:c8:c0:88:e2:e3:
                    de:f0:7a:02:f9:25:83:0b:8b:98:25:97:5a:79:6d:
                    3a:3f:a7:52:ca:77:6f:02:a6:e7:43:60:6a:3c:2a:
                    bf:1e:f2:38:56:63:63:db:6d:e9:de:a6:af:85:77:
                    9c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:E9:5A:26:13:7B:30:C7:40:C9:9D:DD:48:DA:6F:EA:D6:29:05:B1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.252.0/22
                  168.205.24.0/22
                  170.239.36.0/22
                  177.128.136.0/22
                  191.242.176.0/20
                IPv6:
                  2804:874::/32
                  2804:1780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262373
                  263151

    Signature Algorithm: sha256WithRSAEncryption
         95:62:f1:5d:cf:30:09:54:df:f5:ac:b8:9a:fa:8e:61:e3:df:
         2d:00:bc:b2:cf:03:1a:f1:ea:fd:87:dd:c4:a7:b0:16:0d:6c:
         bd:60:6f:43:da:ca:b3:fa:d8:3a:b9:06:99:6f:79:37:7a:af:
         f8:15:2f:58:fa:f1:4e:28:ea:7f:62:55:7d:64:92:2d:c0:f1:
         1f:c3:99:57:5b:ec:c1:28:da:38:39:79:57:77:1b:a6:41:18:
         2b:52:64:01:c6:cf:cb:04:f9:d2:39:be:44:d3:65:2d:c5:ed:
         50:52:43:b8:1c:5d:8c:1e:91:38:01:45:66:40:94:cc:2e:7f:
         5f:6d:23:8a:ac:1b:7c:1f:50:06:11:b7:0c:f3:17:92:79:7a:
         c4:2f:92:f4:43:60:14:02:48:b0:e0:e6:1f:d2:da:3a:f9:aa:
         9b:ca:71:83:7b:7f:c9:67:de:5a:85:af:0a:09:15:94:a0:cd:
         69:81:84:c3:aa:cb:fb:d2:29:09:db:9a:99:82:9a:e3:35:03:
         58:01:93:d6:d8:fb:61:d3:46:90:65:8e:58:34:65:0d:fd:0c:
         45:ce:1d:58:8c:f2:3d:19:75:0c:d8:7c:65:21:fb:27:32:ee:
         ca:5c:b3:e3:c8:f4:1b:97:72:92:7d:13:48:39:39:85:da:b6:
         32:9b:ab:24
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIUVuSr1so5cPj7vNTOiRsLziI9AT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTYxODMxNDhaFw0yNDA5MTQxODM2NDhaMDMxMTAvBgNV
BAMTKDdCRTk1QTI2MTM3QjMwQzc0MEM5OURERDQ4REE2RkVBRDYyOTA1QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5VNWd6eDHnlOWbkUcTEjyLOIX
r5GkYXXrflEjVC9ej5qR+OeZchrRpU758bj+/uj+zrWMrUQYIwj40FMZPS4QDoac
1yaoujXJdtOaB+5/XbxVaWHR6mK5OCQZlaO5m9MJmyWLXxPyMFx1osnb+2vDUJqv
+FUZS+enpUxJPrM/OOoq/Cv/X64m9XcQAxRJUB1EBW8QNwZu1RB8z2hkeoqS6LsN
S/xZhMGxLWmmKnokqM1Ek8/+tu6WZJmBiWzo0Jp4UNPq3Sm4/+Ca1onIwIji497w
egL5JYMLi5gll1p5bTo/p1LKd28CpudDYGo8Kr8e8jhWY2Pbbenepq+Fd5xbAgMB
AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR76VomE3swx0DJ
nd1I2m/q1ikFsTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IaUx6TDRLaGRWcERGb0NKZXlyVW5KcEtoMWZxNEFZNUVX
aXNjZzh6anphcy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSGlMekw0S2hkVnBERm9DSmV5clVuSnBLaDFmcTRBWTVF
V2lzY2c4emp6YXMvMC83QkU5NUEyNjEzN0IzMEM3NDBDOTlEREQ0OERBNkZFQUQ2
MjkwNUIxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwTQYIKwYBBQUHAQcBAf8EPjA8MCQEAgABMB4DBAKow/wDBAKozRgDBAKq
7yQDBAKxgIgDBAS/8rAwFAQCAAIwDgMFACgECHQDBQAoBBeAMB8GCCsGAQUFBwEI
AQH/BBAwDqAMMAoCAwQA5QIDBAPvMA0GCSqGSIb3DQEBCwUAA4IBAQCVYvFdzzAJ
VN/1rLia+o5h498tALyyzwMa8er9h93Ep7AWDWy9YG9D2sqz+tg6uQaZb3k3eq/4
FS9Y+vFOKOp/YlV9ZJItwPEfw5lXW+zBKNo4OXlXdxumQRgrUmQBxs/LBPnSOb5E
02Utxe1QUkO4HF2MHpE4AUVmQJTMLn9fbSOKrBt8H1AGEbcM8xeSeXrEL5L0Q2AU
Akiw4OYf0to6+aqbynGDe3/JZ95aha8KCRWUoM1pgYTDqsv70ikJ25qZgprjNQNY
AZPW2Pth00aQZY5YNGUN/QxFzh1YjPI9GXUM2HxlIfsnMu7KXLPjyPQbl3KSfRNI
OTmF2rYym6sk
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org