Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7C4CE79AEEC7D355793F06B22D57E2E0C8951CC7.cer
File:                     7C4CE79AEEC7D355793F06B22D57E2E0C8951CC7.cer (raw, json)
Hash identifier:          uVPcZqx/zq8MhmVb1uA3VST9l5NDpx7bGW0NqT9yCIw=
Subject key identifier:   7C:4C:E7:9A:EE:C7:D3:55:79:3F:06:B2:2D:57:E2:E0:C8:95:1C:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       578311926845BF00842873A8406B928026F9D75E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/7C4CE79AEEC7D355793F06B22D57E2E0C8951CC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 17:10:21 +0000
Certificate not after:    Fri 01 Nov 2024 17:15:21 +0000
Subordinate resources:    AS: 263335
                          IP: 191.36.136.0/21
                          IP: 2804:1484::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:83:11:92:68:45:bf:00:84:28:73:a8:40:6b:92:80:26:f9:d7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 17:10:21 2023 GMT
            Not After : Nov  1 17:15:21 2024 GMT
        Subject: CN=7C4CE79AEEC7D355793F06B22D57E2E0C8951CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:e9:3a:50:5e:27:b2:fe:6f:92:5b:df:71:
                    71:03:be:b6:90:fc:a4:9d:8b:56:24:28:53:e3:90:
                    ea:4b:c6:dd:56:ec:cb:26:3f:43:40:0f:42:fd:a6:
                    a2:54:bd:ce:5a:f5:fa:3c:28:43:27:31:34:0e:39:
                    d1:b3:e3:b7:6b:c6:3d:4d:61:b5:42:53:87:7c:38:
                    a7:66:d2:10:58:32:40:2a:19:ba:f0:69:37:16:50:
                    c3:e3:28:45:f5:38:48:6d:0a:a6:dd:ae:5b:91:c0:
                    0c:7e:ef:5c:bb:53:8a:ea:0b:ba:7b:83:c4:72:66:
                    9e:3b:4d:99:41:0d:33:c4:94:88:f0:53:0b:b4:b5:
                    b5:c6:07:a3:3d:36:39:32:b8:d1:b2:6d:17:ce:65:
                    4f:26:6c:26:4d:df:8c:50:d4:83:10:52:eb:21:ef:
                    e4:6f:09:37:6d:54:c1:a9:a9:a8:56:4b:4b:da:0f:
                    0d:af:ec:ee:24:52:d0:6e:25:8a:53:83:b9:5e:55:
                    12:f2:a1:b6:76:0d:91:65:7f:f1:8a:91:fe:87:70:
                    e2:af:d0:4d:b8:08:f8:c6:90:3b:7b:8e:2c:f7:26:
                    60:96:c8:81:dd:ca:d5:12:17:dc:d4:b4:dc:eb:7a:
                    89:59:ca:9a:01:e9:e0:1d:b0:8d:34:5e:37:8d:cd:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:4C:E7:9A:EE:C7:D3:55:79:3F:06:B2:2D:57:E2:E0:C8:95:1C:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/7C4CE79AEEC7D355793F06B22D57E2E0C8951CC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.136.0/21
                IPv6:
                  2804:1484::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263335

    Signature Algorithm: sha256WithRSAEncryption
         4c:2d:b8:f0:dc:e5:d0:b8:de:7b:27:4f:3f:4e:da:61:2b:57:
         5d:7c:0a:dd:74:7b:ea:09:4d:d4:2f:3c:42:25:f3:dc:dc:04:
         55:b0:63:0d:2a:37:c0:e0:d3:2c:a0:a0:3e:55:3b:28:ac:74:
         8b:a0:43:e2:59:5e:4d:b6:11:25:cd:4c:76:26:9b:1e:6e:0c:
         d9:25:fe:a0:1d:e2:37:4a:5f:01:ac:7f:2a:14:84:f5:50:4e:
         62:11:4f:b6:ec:97:73:ef:0e:30:06:7c:af:fd:21:31:fe:c0:
         b1:0b:96:70:e5:cc:64:86:35:b7:b4:a4:ef:d2:04:bb:d8:b5:
         67:c8:8f:bc:4f:11:6e:98:ef:0c:6c:1b:a0:08:75:f9:7a:b9:
         f9:ea:41:ba:a3:43:f3:70:8e:46:d4:e5:c0:42:3e:ec:0a:e0:
         b0:26:af:9d:6b:b6:92:5f:a5:cb:c8:e6:79:25:6d:b0:56:1e:
         cb:bf:e3:72:9f:ab:b6:03:15:f6:76:03:84:63:a6:a9:b0:9f:
         e5:a9:eb:44:f6:e7:cb:a8:60:dc:c9:70:ed:ce:31:d2:7e:37:
         3f:76:79:36:4d:b2:fc:16:3e:83:09:62:81:9c:8f:34:6c:13:
         41:09:62:1c:03:5c:4a:3b:d1:64:bd:7d:c3:a8:a8:65:e1:48:
         6e:84:35:3f
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUV4MRkmhFvwCEKHOoQGuSgCb5114wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDMxNzEwMjFaFw0yNDExMDExNzE1MjFaMDMxMTAvBgNV
BAMTKDdDNENFNzlBRUVDN0QzNTU3OTNGMDZCMjJENTdFMkUwQzg5NTFDQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Tuk6UF4nsv5vklvfcXEDvraQ
/KSdi1YkKFPjkOpLxt1W7MsmP0NAD0L9pqJUvc5a9fo8KEMnMTQOOdGz47drxj1N
YbVCU4d8OKdm0hBYMkAqGbrwaTcWUMPjKEX1OEhtCqbdrluRwAx+71y7U4rqC7p7
g8RyZp47TZlBDTPElIjwUwu0tbXGB6M9NjkyuNGybRfOZU8mbCZN34xQ1IMQUush
7+RvCTdtVMGpqahWS0vaDw2v7O4kUtBuJYpTg7leVRLyobZ2DZFlf/GKkf6HcOKv
0E24CPjGkDt7jiz3JmCWyIHdytUSF9zUtNzreolZypoB6eAdsI00XjeNzbcpAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8TOea7sfTVXk/
BrItV+LgyJUcxzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FSnFXU0RoTWVIdG43ekxtalE4YXAzU1F0SEVHR29lNW9T
NzlCelB6WERCRy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRUpxV1NEaE1lSHRuN3pMbWpROGFwM1NRdEhFR0dvZTVv
Uzc5QnpQelhEQkcvMC83QzRDRTc5QUVFQzdEMzU1NzkzRjA2QjIyRDU3RTJFMEM4
OTUxQ0M3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAO/JIgwDQQCAAIwBwMF
ACgEFIQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBASnMA0GCSqGSIb3DQEBCwUA
A4IBAQBMLbjw3OXQuN57J08/TtphK1ddfArddHvqCU3ULzxCJfPc3ARVsGMNKjfA
4NMsoKA+VTsorHSLoEPiWV5NthElzUx2JpsebgzZJf6gHeI3Sl8BrH8qFIT1UE5i
EU+27Jdz7w4wBnyv/SEx/sCxC5Zw5cxkhjW3tKTv0gS72LVnyI+8TxFumO8MbBug
CHX5ern56kG6o0PzcI5G1OXAQj7sCuCwJq+da7aSX6XLyOZ5JW2wVh7Lv+Nyn6u2
AxX2dgOEY6apsJ/lqetE9ufLqGDcyXDtzjHSfjc/dnk2TbL8Fj6DCWKBnI80bBNB
CWIcA1xKO9FkvX3DqKhl4UhuhDU/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org