Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7BFF6B250CEEEF768CA88536BE7D70442C218C88.cer
File:                     7BFF6B250CEEEF768CA88536BE7D70442C218C88.cer (raw, json)
Hash identifier:          FM/wWa8Dn8FMsv1+3UKZZJ4S7lkvoX5NT4mYhamBux0=
Subject key identifier:   7B:FF:6B:25:0C:EE:EF:76:8C:A8:85:36:BE:7D:70:44:2C:21:8C:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C5ACB2C25F8C403BE1AC248871E8A76D96BAD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/7BFF6B250CEEEF768CA88536BE7D70442C218C88.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Dec 2023 22:04:54 +0000
Certificate not after:    Fri 27 Dec 2024 22:09:54 +0000
Subordinate resources:    AS: 264041
                          IP: 143.137.190.0/23
                          IP: 2804:29dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5a:cb:2c:25:f8:c4:03:be:1a:c2:48:87:1e:8a:76:d9:6b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 29 22:04:54 2023 GMT
            Not After : Dec 27 22:09:54 2024 GMT
        Subject: CN=7BFF6B250CEEEF768CA88536BE7D70442C218C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:93:6e:be:5a:f8:d1:82:92:05:e0:10:9e:
                    96:73:26:d0:3c:dc:8e:c4:de:f6:d6:f9:3c:d8:24:
                    93:56:74:e8:f1:e4:1a:53:6f:cb:ed:84:43:9b:8b:
                    d7:29:e0:12:b6:bb:a3:a3:9e:d9:2f:f2:a2:c1:2e:
                    ad:79:20:89:f9:ca:8c:73:72:a3:e4:53:c9:14:d3:
                    6a:87:bf:9f:05:0a:18:95:e0:ee:17:17:2c:c9:f5:
                    6a:94:43:ea:53:af:62:81:94:b2:a4:fa:bb:19:48:
                    22:73:13:a4:34:e9:b8:06:14:9a:c5:8a:50:24:e9:
                    2a:13:1a:e2:68:8d:43:e7:01:7c:19:89:fe:f8:ca:
                    c0:a4:13:c3:fb:f5:0a:9c:81:ee:80:27:41:7b:b1:
                    31:55:af:15:80:aa:3e:ea:09:71:49:77:bb:32:39:
                    36:fd:2f:8b:2d:0d:4f:4c:f5:65:6e:a2:1d:6b:5f:
                    c2:41:17:95:aa:1b:7a:c5:0a:b1:e1:31:98:80:bd:
                    56:4c:b6:6a:07:41:c8:1c:1e:a2:ee:f2:6d:4d:f8:
                    bc:53:e2:4c:f8:3e:b6:33:18:c8:44:38:a7:a5:41:
                    af:7f:7c:a6:2f:40:05:7e:48:99:82:1c:d6:4b:09:
                    7c:0e:24:68:08:a7:9e:8b:2a:70:21:f3:e7:59:f4:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:FF:6B:25:0C:EE:EF:76:8C:A8:85:36:BE:7D:70:44:2C:21:8C:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/7BFF6B250CEEEF768CA88536BE7D70442C218C88.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.190.0/23
                IPv6:
                  2804:29dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264041

    Signature Algorithm: sha256WithRSAEncryption
         2a:5d:50:54:75:5f:3a:20:57:9e:95:d9:f2:f0:67:44:50:f7:
         81:0e:c7:75:d3:67:c8:4c:1a:b1:cf:ed:4f:0c:d5:52:79:04:
         77:90:5e:88:2a:63:32:6d:d4:1d:38:41:18:c3:00:66:c9:19:
         82:d0:4d:dd:f3:0e:23:fc:d2:58:e8:4c:15:e4:15:7c:b7:7d:
         18:69:99:bb:12:2c:c9:95:8b:39:bc:ff:0f:7c:62:63:fe:a3:
         85:0a:00:45:42:f1:1d:4c:82:d2:5d:c7:16:78:05:f5:d9:fb:
         43:6a:8b:71:25:e4:4e:5f:51:e9:8d:0a:95:0b:15:5f:68:4b:
         96:5b:b2:f1:f7:10:00:56:a1:52:c1:be:c4:f3:be:dd:a7:00:
         3f:cd:ef:32:8a:a4:d9:2f:ef:23:88:55:52:91:10:77:74:68:
         c3:3a:93:3a:ef:5c:de:c8:c2:20:60:67:cd:8b:59:c2:42:89:
         3d:da:1a:28:fd:07:67:1a:91:96:00:dd:73:ad:ae:c3:e8:b7:
         56:b9:a3:f0:26:39:d4:98:88:08:b6:10:43:20:8b:e7:25:4e:
         25:ac:93:b0:39:35:44:ba:4d:b4:69:a5:34:b9:7c:bc:d7:8b:
         dd:3c:ad:e6:c3:2e:ba:c8:72:5e:5a:88:8a:aa:17:37:26:fe:
         91:ea:9f:6a
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgITLFrLLCX4xAO+GsJIhx6KdtlrrTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhFRTkxN0VCQzdBMTU4NzgzQjQ0QkM2RUQ4MjIxNzQzNEYy
OEFERUZCMB4XDTIzMTIyOTIyMDQ1NFoXDTI0MTIyNzIyMDk1NFowMzExMC8GA1UE
AxMoN0JGRjZCMjUwQ0VFRUY3NjhDQTg4NTM2QkU3RDcwNDQyQzIxOEM4ODCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMu+k26+WvjRgpIF4BCelnMm0Dzc
jsTe9tb5PNgkk1Z06PHkGlNvy+2EQ5uL1yngEra7o6Oe2S/yosEurXkgifnKjHNy
o+RTyRTTaoe/nwUKGJXg7hcXLMn1apRD6lOvYoGUsqT6uxlIInMTpDTpuAYUmsWK
UCTpKhMa4miNQ+cBfBmJ/vjKwKQTw/v1CpyB7oAnQXuxMVWvFYCqPuoJcUl3uzI5
Nv0viy0NT0z1ZW6iHWtfwkEXlaobesUKseExmIC9Vky2agdByBweou7ybU34vFPi
TPg+tjMYyEQ4p6VBr398pi9ABX5ImYIc1ksJfA4kaAinnosqcCHz51n0SGcCAwEA
AaOCAxswggMXMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFHv/ayUM7u92jKiF
Nr59cEQsIYyIMB8GA1UdIwQYMBaAFO6Rfrx6FYeDtEvG7YIhdDTyit77MA4GA1Ud
DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9FRTkxN0VCQzdBMTU4NzgzQjQ0
QkM2RUQ4MjIxNzQzNEYyOEFERUZCLmNybDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmQyNWM5
YmI3ZTVjYWM3NDE5ZmE5MTkzNzcwZjY0YTZlZGYyMGMxOS5jZXIwggFABggrBgEF
BQcBCwSCATIwggEuMF4GCCsGAQUFBzAFhlJyc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL0g2U0N1UDRzYjY0eHNyc0J1NHdvQWVxVjNtRjRYa3R3SlJQ
WkVUNlA1NE11LzEvMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9INlNDdVA0c2I2NHhzcnNCdTR3b0FlcVYzbUY0WGt0d0pS
UFpFVDZQNTRNdS8xLzdCRkY2QjI1MENFRUVGNzY4Q0E4ODUzNkJFN0Q3MDQ0MkMy
MThDODgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAY+JvjANBAIAAjAHAwUA
KAQp3DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEB2kwDQYJKoZIhvcNAQELBQAD
ggEBACpdUFR1XzogV56V2fLwZ0RQ94EOx3XTZ8hMGrHP7U8M1VJ5BHeQXogqYzJt
1B04QRjDAGbJGYLQTd3zDiP80ljoTBXkFXy3fRhpmbsSLMmVizm8/w98YmP+o4UK
AEVC8R1MgtJdxxZ4BfXZ+0Nqi3El5E5fUemNCpULFV9oS5ZbsvH3EABWoVLBvsTz
vt2nAD/N7zKKpNkv7yOIVVKREHd0aMM6kzrvXN7IwiBgZ82LWcJCiT3aGij9B2ca
kZYA3XOtrsPot1a5o/AmOdSYiAi2EEMgi+clTiWsk7A5NUS6TbRppTS5fLzXi908
rebDLrrIcl5aiIqqFzcm/pHqn2o=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org