Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7C69B6AB4DD5CCE167DF7888F3662BE664026BB9.cer
File:                     7C69B6AB4DD5CCE167DF7888F3662BE664026BB9.cer (raw, json)
Hash identifier:          8akT3mz3PMdWrazYosdt6O1zHDzqM4c4aLHXHwTcMr0=
Subject key identifier:   7C:69:B6:AB:4D:D5:CC:E1:67:DF:78:88:F3:66:2B:E6:64:02:6B:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       669E70B2EF2A01443CF57442698D20EE24294101
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/0/7C69B6AB4DD5CCE167DF7888F3662BE664026BB9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 00:44:23 +0000
Certificate not after:    Tue 11 Mar 2025 00:49:23 +0000
Subordinate resources:    AS: 53180
                          IP: 186.226.160.0/20
                          IP: 2804:2ab8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9e:70:b2:ef:2a:01:44:3c:f5:74:42:69:8d:20:ee:24:29:41:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 00:44:23 2024 GMT
            Not After : Mar 11 00:49:23 2025 GMT
        Subject: CN=7C69B6AB4DD5CCE167DF7888F3662BE664026BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cc:18:1f:0b:87:f2:f9:4f:f3:e3:93:db:61:
                    96:be:87:50:53:21:62:59:ac:4a:8b:f6:fd:eb:f8:
                    22:56:1e:fc:58:91:14:85:6c:48:2e:c7:85:33:a3:
                    ca:5c:e0:d7:48:72:06:a2:0c:12:19:04:a4:dd:02:
                    e2:32:1a:f7:cc:10:e5:78:f1:aa:d8:f1:b2:9a:ed:
                    df:00:28:ea:59:7c:2e:bb:97:a1:fb:0c:68:f5:65:
                    40:cd:c9:da:9f:8a:92:cb:1d:57:19:6d:b2:46:d7:
                    bf:63:e1:26:71:5f:86:48:21:19:34:9a:17:44:7d:
                    fc:92:6f:26:3b:b7:1c:77:65:d8:72:61:5c:fb:32:
                    44:34:d1:dd:20:d4:e0:c4:10:7f:d2:62:57:d3:eb:
                    30:e8:21:89:9b:96:a4:a2:9c:2e:5c:00:54:d7:77:
                    c3:8f:db:fd:f9:1f:0b:81:73:d1:8b:af:7e:0d:47:
                    27:6c:b2:d9:cc:9f:4f:66:8e:0c:9a:12:b8:b6:fc:
                    a9:6b:65:5e:25:df:c9:ec:ae:fa:ae:f6:55:f8:dc:
                    c9:aa:6b:a7:31:63:a0:21:62:f9:2d:95:d3:bc:e6:
                    f4:78:2b:cf:e2:ab:09:33:40:e6:cb:20:f4:0e:89:
                    77:cc:9e:5c:68:4e:85:89:15:90:df:24:00:74:1e:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:69:B6:AB:4D:D5:CC:E1:67:DF:78:88:F3:66:2B:E6:64:02:6B:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/0/7C69B6AB4DD5CCE167DF7888F3662BE664026BB9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.160.0/20
                IPv6:
                  2804:2ab8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53180

    Signature Algorithm: sha256WithRSAEncryption
         21:4e:0c:51:6b:0f:f3:79:50:20:a4:b9:9f:7e:5b:ec:98:6a:
         6f:53:8f:95:3d:63:34:f9:10:ab:31:7d:b0:93:9a:cb:42:bc:
         d0:bb:ad:90:45:e1:21:7f:aa:de:7b:a1:a9:9e:a2:d5:16:2e:
         b8:c1:c4:64:a4:f8:3f:fa:bd:44:54:05:2c:9c:17:ac:c0:3f:
         e8:b2:21:91:e3:09:64:7e:df:3c:f1:7b:12:f9:87:66:d5:93:
         24:98:34:5c:28:df:87:c1:c8:d1:08:4e:42:17:73:91:ab:1f:
         66:09:32:fd:c4:6b:1e:8e:53:da:7d:97:49:b6:54:45:e1:7f:
         b9:71:4b:63:84:81:7c:e3:b0:a4:40:ba:4a:a2:02:c1:91:88:
         98:21:8b:b3:27:f8:f9:8d:42:47:e3:70:bb:c6:ad:86:59:1b:
         22:bf:75:e0:8b:d2:aa:59:50:7a:42:6d:7c:37:a8:ba:9b:f3:
         05:5b:cc:8a:25:b3:7f:02:9e:cf:03:1d:0f:86:56:30:d0:aa:
         bb:99:f9:41:c3:2a:8f:c4:3b:25:1f:e7:62:f3:64:c4:a5:9c:
         95:cd:24:89:98:6a:e4:72:3f:86:e4:28:76:6e:30:a0:68:17:
         c3:41:80:0f:65:3b:53:16:6a:6b:8e:23:93:2b:29:26:ad:43:
         46:85:07:3a
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUZp5wsu8qAUQ89XRCaY0g7iQpQQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTIwMDQ0MjNaFw0yNTAzMTEwMDQ5MjNaMDMxMTAvBgNV
BAMTKDdDNjlCNkFCNERENUNDRTE2N0RGNzg4OEYzNjYyQkU2NjQwMjZCQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDizBgfC4fy+U/z45PbYZa+h1BT
IWJZrEqL9v3r+CJWHvxYkRSFbEgux4Uzo8pc4NdIcgaiDBIZBKTdAuIyGvfMEOV4
8arY8bKa7d8AKOpZfC67l6H7DGj1ZUDNydqfipLLHVcZbbJG179j4SZxX4ZIIRk0
mhdEffySbyY7txx3ZdhyYVz7MkQ00d0g1ODEEH/SYlfT6zDoIYmblqSinC5cAFTX
d8OP2/35HwuBc9GLr34NRydsstnMn09mjgyaEri2/KlrZV4l38nsrvqu9lX43Mmq
a6cxY6AhYvktldO85vR4K8/iqwkzQObLIPQOiXfMnlxoToWJFZDfJAB0HryLAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8abarTdXM4Wff
eIjzZivmZAJruTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84QkxZcmNyYzlpZlNxcndnV1ZmcUdva3k0ZG01M1B3cW1q
Q0JrTEp5ZVpTSi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOEJMWXJjcmM5aWZTcXJ3Z1dWZnFHb2t5NGRtNTNQd3Ft
akNCa0xKeWVaU0ovMC83QzY5QjZBQjRERDVDQ0UxNjdERjc4ODhGMzY2MkJFNjY0
MDI2QkI5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAS64qAwDQQCAAIwBwMF
ACgEKrgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM+8MA0GCSqGSIb3DQEBCwUA
A4IBAQAhTgxRaw/zeVAgpLmfflvsmGpvU4+VPWM0+RCrMX2wk5rLQrzQu62QReEh
f6ree6GpnqLVFi64wcRkpPg/+r1EVAUsnBeswD/osiGR4wlkft888XsS+Ydm1ZMk
mDRcKN+HwcjRCE5CF3ORqx9mCTL9xGsejlPafZdJtlRF4X+5cUtjhIF847CkQLpK
ogLBkYiYIYuzJ/j5jUJH43C7xq2GWRsiv3Xgi9KqWVB6Qm18N6i6m/MFW8yKJbN/
Ap7PAx0PhlYw0Kq7mflBwyqPxDslH+di82TEpZyVzSSJmGrkcj+G5Ch2bjCgaBfD
QYAPZTtTFmprjiOTKykmrUNGhQc6
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org