Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7BF6A9C64A3156F7EF35A77076E52C61780AFF33.cer
File:                     7BF6A9C64A3156F7EF35A77076E52C61780AFF33.cer (raw, json)
Hash identifier:          fbc3Y8pB2qMC9c7zJFVdrI3TgBz10U7iDyFuPfrNr58=
Subject key identifier:   7B:F6:A9:C6:4A:31:56:F7:EF:35:A7:70:76:E5:2C:61:78:0A:FF:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F81097C9004DEC370DC41C2C06DA649C64759A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/7BF6A9C64A3156F7EF35A77076E52C61780AFF33.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 20:50:09 +0000
Certificate not after:    Fri 04 Oct 2024 20:55:09 +0000
Subordinate resources:    AS: 264111
                          IP: 138.97.12.0/22
                          IP: 168.196.88.0/22
                          IP: 2804:229c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:81:09:7c:90:04:de:c3:70:dc:41:c2:c0:6d:a6:49:c6:47:59:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  6 20:50:09 2023 GMT
            Not After : Oct  4 20:55:09 2024 GMT
        Subject: CN=7BF6A9C64A3156F7EF35A77076E52C61780AFF33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:dd:54:f1:e4:a3:4f:b5:0c:94:f5:34:d0:
                    e6:7c:1f:c1:06:ff:5d:d2:cc:2f:f7:2d:fe:9b:e5:
                    2c:51:a5:2f:56:e3:3a:98:d3:45:01:8d:7b:36:37:
                    c1:dd:fe:37:9c:8b:6f:9b:f7:ca:16:cb:c8:c3:04:
                    f7:ff:1b:51:31:82:eb:c0:0b:49:ad:7b:f0:64:55:
                    74:74:b7:79:1a:fe:77:a7:cf:1a:f9:1d:cc:52:e7:
                    20:41:2b:b9:0e:d6:e2:07:50:27:04:60:ce:5f:e4:
                    63:a5:df:47:4f:42:b5:ae:a4:7b:5f:d9:94:75:a9:
                    b0:d9:78:df:c7:89:ad:db:b2:4b:b7:a2:cf:5e:3b:
                    18:2f:8f:f0:49:9b:bc:1a:36:e4:38:64:3e:39:b5:
                    23:ca:2a:0c:9b:d0:f7:ed:73:e4:df:a6:e3:fb:2b:
                    7e:dc:c4:6b:22:5f:8e:57:7e:d1:39:58:f1:89:bb:
                    53:0d:0c:c9:96:0b:53:29:35:4e:7a:41:7c:15:35:
                    3e:c8:50:d9:09:4b:80:1f:0d:1f:e0:dd:51:3f:5a:
                    eb:0e:cc:d9:23:49:c3:b2:22:83:c7:66:8a:37:8a:
                    66:81:f2:cd:4c:97:ef:36:e0:35:9c:9d:8b:53:c5:
                    93:71:2a:87:0d:41:8c:b2:72:22:0e:d9:9c:a7:5a:
                    7b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:F6:A9:C6:4A:31:56:F7:EF:35:A7:70:76:E5:2C:61:78:0A:FF:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/7BF6A9C64A3156F7EF35A77076E52C61780AFF33.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.12.0/22
                  168.196.88.0/22
                IPv6:
                  2804:229c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264111

    Signature Algorithm: sha256WithRSAEncryption
         ab:1a:95:22:2d:40:10:f9:ea:5d:76:4a:7b:69:75:f7:4a:42:
         32:83:f1:ee:9d:af:aa:4b:24:f1:02:99:e9:d3:73:a8:b7:50:
         c7:64:92:f1:df:bd:36:a2:4d:4c:91:b9:7c:b1:c7:c2:be:44:
         24:41:cf:d3:96:cc:9a:ec:aa:84:77:aa:0e:0c:8e:d6:3f:23:
         dd:99:6c:da:30:9f:d6:4f:f9:cd:2f:16:a1:7a:9d:72:6e:35:
         f1:e0:40:dd:d1:d7:71:10:52:c2:2f:c3:2a:29:35:61:d7:c4:
         ba:40:ff:3a:90:b1:79:ca:8e:07:17:7b:e7:de:d0:f6:35:a6:
         1c:57:72:bf:94:71:0d:5c:3a:7a:b9:b9:6e:b4:8d:7c:76:9c:
         31:e3:39:96:0d:af:58:2d:21:e3:1c:31:c6:a3:43:52:e4:55:
         ea:54:71:7f:31:ef:9b:f1:55:76:9c:6a:ea:46:9b:0c:e2:0a:
         f1:4c:c7:2f:dd:b4:2e:a4:f3:6c:53:e3:6d:3c:82:9c:47:40:
         12:44:15:84:c8:56:d7:0c:00:0f:3d:14:60:56:01:15:1e:b7:
         3a:2d:7c:70:c7:05:50:a7:87:fd:ff:cb:53:69:3e:33:75:91:
         ea:d0:e4:71:7c:b9:18:f0:5b:c4:3f:ef:c8:44:a8:ff:f1:68:
         4c:84:21:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org