Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7C6FDECE05E8F2BEA15333D9AF84310947309C98.cer
File:                     7C6FDECE05E8F2BEA15333D9AF84310947309C98.cer (raw, json)
Hash identifier:          cHaxNmk4xMbjF+JPjxp1B060mfJZlvWwufRvhEB4UY0=
Subject key identifier:   7C:6F:DE:CE:05:E8:F2:BE:A1:53:33:D9:AF:84:31:09:47:30:9C:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3737D5BA41CA4910C893773341DD351A4171C484
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/7C6FDECE05E8F2BEA15333D9AF84310947309C98.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Nov 2023 03:35:17 +0000
Certificate not after:    Thu 31 Oct 2024 03:40:17 +0000
Subordinate resources:    AS: 262841
                          IP: 177.10.24.0/21
                          IP: 177.136.216.0/21
                          IP: 2804:fb0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:37:d5:ba:41:ca:49:10:c8:93:77:33:41:dd:35:1a:41:71:c4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  2 03:35:17 2023 GMT
            Not After : Oct 31 03:40:17 2024 GMT
        Subject: CN=7C6FDECE05E8F2BEA15333D9AF84310947309C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:15:95:90:87:47:1d:b5:40:9e:7c:73:75:
                    91:04:5c:3d:9c:3f:21:9c:58:36:2c:16:40:fe:16:
                    53:16:1c:02:b1:49:18:68:6a:c7:a5:e5:af:a8:16:
                    5e:f5:1b:00:ef:b1:50:fa:fc:02:e2:d2:09:f2:51:
                    c7:ce:18:9c:f6:6e:60:ec:cb:2b:7b:5d:90:6a:dc:
                    a1:c4:0e:ae:15:55:ed:94:51:b9:4a:18:79:ca:d4:
                    76:9e:80:e7:87:15:9c:97:ea:b6:d5:a5:58:44:80:
                    21:9a:23:c0:6f:3e:4c:66:bf:60:48:f7:69:13:6f:
                    9b:91:6e:1b:96:6b:49:06:6e:94:02:4c:be:d6:30:
                    1a:dc:4b:cf:cb:f1:d6:c1:69:c2:be:c4:a1:9a:59:
                    c3:d3:a5:65:0b:dc:a9:77:67:80:a5:82:5e:97:07:
                    cb:95:e6:81:b9:a7:59:ec:ed:f0:28:ff:62:e0:16:
                    b1:a0:33:a6:65:87:f8:a9:55:db:91:98:1d:69:cb:
                    94:b9:3d:6a:27:c3:06:3c:cd:5a:04:7b:19:7e:27:
                    71:2c:cd:c6:cc:df:da:e2:4c:7f:e2:89:e3:47:91:
                    35:38:06:59:a8:a7:32:8a:da:fa:ce:c5:b3:ee:6b:
                    33:3d:43:92:d6:cb:fe:21:08:8f:c9:9e:97:78:32:
                    e5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:6F:DE:CE:05:E8:F2:BE:A1:53:33:D9:AF:84:31:09:47:30:9C:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/7C6FDECE05E8F2BEA15333D9AF84310947309C98.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.24.0/21
                  177.136.216.0/21
                IPv6:
                  2804:fb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262841

    Signature Algorithm: sha256WithRSAEncryption
         7e:5a:d9:75:16:93:c0:57:c1:12:5b:60:fa:4a:35:1d:ad:60:
         31:be:2e:2b:22:56:05:2b:66:21:dd:5a:0a:87:93:0c:7a:cd:
         1a:11:d1:fb:10:05:b8:5c:fa:a1:12:fd:51:0f:71:45:5b:e6:
         8b:7e:ae:48:4b:be:b9:38:e7:58:d3:ee:48:73:a9:cf:33:85:
         e3:3a:95:c0:c8:34:dc:7f:f0:39:75:4a:b9:9b:f2:2a:45:5b:
         d8:fb:d7:d1:59:91:96:c5:a9:01:62:68:96:09:47:27:67:f8:
         e5:83:ee:e2:10:5c:db:cc:a4:4c:80:91:c5:1e:d8:55:2b:32:
         37:34:98:e9:26:fa:17:b1:8d:bc:8f:b3:6c:b7:19:1b:72:f5:
         4a:3f:85:f4:cf:2a:a0:03:74:89:2f:46:c0:6b:fb:f4:ca:52:
         8c:2c:b0:13:2a:30:4e:1d:19:65:db:50:0f:39:2f:03:cf:2c:
         f9:81:df:9d:82:b8:b8:f5:f9:14:2a:a0:91:9b:7b:71:8b:8d:
         82:16:0d:b5:65:6e:a8:eb:7f:5e:5e:f4:b0:9c:5d:c0:7a:5d:
         31:b1:3b:37:b3:02:33:c1:23:d5:42:c9:cd:b8:42:be:1d:2c:
         e5:15:1d:7d:35:a2:67:d7:ee:cb:ca:a7:40:dc:90:4f:af:4c:
         09:11:b0:91
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUNzfVukHKSRDIk3czQd01GkFxxIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDIwMzM1MTdaFw0yNDEwMzEwMzQwMTdaMDMxMTAvBgNV
BAMTKDdDNkZERUNFMDVFOEYyQkVBMTUzMzNEOUFGODQzMTA5NDczMDlDOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQBWVkIdHHbVAnnxzdZEEXD2c
PyGcWDYsFkD+FlMWHAKxSRhoasel5a+oFl71GwDvsVD6/ALi0gnyUcfOGJz2bmDs
yyt7XZBq3KHEDq4VVe2UUblKGHnK1HaegOeHFZyX6rbVpVhEgCGaI8BvPkxmv2BI
92kTb5uRbhuWa0kGbpQCTL7WMBrcS8/L8dbBacK+xKGaWcPTpWUL3Kl3Z4Clgl6X
B8uV5oG5p1ns7fAo/2LgFrGgM6Zlh/ipVduRmB1py5S5PWonwwY8zVoEexl+J3Es
zcbM39riTH/iieNHkTU4BlmopzKK2vrOxbPuazM9Q5LWy/4hCI/Jnpd4MuWBAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8b97OBejyvqFT
M9mvhDEJRzCcmDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ITUxVdm45dGdXY1NqVkZzdUcyV1pzcGlkQUhqZGlpOGd6
UHJ3UkZQRjJQbi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSE1MVXZuOXRnV2NTalZGc3VHMldac3BpZEFIamRpaThn
elByd1JGUEYyUG4vMC83QzZGREVDRTA1RThGMkJFQTE1MzMzRDlBRjg0MzEwOTQ3
MzA5Qzk4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAOxChgDBAOxiNgwDQQC
AAIwBwMFACgED7AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAK5MA0GCSqGSIb3
DQEBCwUAA4IBAQB+Wtl1FpPAV8ESW2D6SjUdrWAxvi4rIlYFK2Yh3VoKh5MMes0a
EdH7EAW4XPqhEv1RD3FFW+aLfq5IS765OOdY0+5Ic6nPM4XjOpXAyDTcf/A5dUq5
m/IqRVvY+9fRWZGWxakBYmiWCUcnZ/jlg+7iEFzbzKRMgJHFHthVKzI3NJjpJvoX
sY28j7NstxkbcvVKP4X0zyqgA3SJL0bAa/v0ylKMLLATKjBOHRll21APOS8Dzyz5
gd+dgri49fkUKqCRm3txi42CFg21ZW6o639eXvSwnF3Ael0xsTs3swIzwSPVQsnN
uEK+HSzlFR19NaJn1+7LyqdA3JBPr0wJEbCR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org