Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7C7B3D9A8D3A3922FBED85994B667059051BF40C.cer
File:                     7C7B3D9A8D3A3922FBED85994B667059051BF40C.cer (raw, json)
Hash identifier:          esV6pFjRMMEYhkG+g7GCk0at7rb5cWPQ/WhHMeUcj7E=
Subject key identifier:   7C:7B:3D:9A:8D:3A:39:22:FB:ED:85:99:4B:66:70:59:05:1B:F4:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       17619EB0A5ACB92C0FE9EBD173A0F702E4B872F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/7C7B3D9A8D3A3922FBED85994B667059051BF40C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Jun 2023 01:50:48 +0000
Certificate not after:    Sun 16 Jun 2024 01:55:48 +0000
Subordinate resources:    AS: 10704
                          IP: 200.234.128.0/18
                          IP: 200.239.192.0/18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:61:9e:b0:a5:ac:b9:2c:0f:e9:eb:d1:73:a0:f7:02:e4:b8:72:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 18 01:50:48 2023 GMT
            Not After : Jun 16 01:55:48 2024 GMT
        Subject: CN=7C7B3D9A8D3A3922FBED85994B667059051BF40C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e5:e1:f9:82:2d:ec:4a:54:d8:36:a3:04:0f:
                    d3:07:1d:fe:02:c6:96:36:cc:fe:b7:30:72:2f:c3:
                    77:c2:c2:34:1d:c9:c8:1a:c3:50:55:77:cd:f1:4a:
                    ab:e1:8d:e8:ff:13:f4:3d:3e:3c:78:9d:a4:48:b9:
                    c5:b7:e4:c7:0c:24:68:98:b1:94:82:11:00:00:27:
                    ba:93:70:1f:f2:26:83:7d:2b:75:a7:db:42:55:14:
                    e3:d3:98:cc:cc:b2:21:a8:be:93:b2:19:24:d4:bf:
                    18:be:82:c5:ad:e5:25:a7:cd:2b:8c:76:b7:ca:f4:
                    77:e8:19:a4:eb:e9:5b:83:f9:48:9a:9f:2e:e2:e4:
                    57:71:47:a3:2d:1b:7f:94:55:ed:70:01:1e:ed:02:
                    69:63:72:48:cd:5f:f0:cd:4d:36:73:17:90:04:52:
                    bb:03:e6:76:29:19:a1:26:18:13:c2:fb:85:79:f4:
                    05:bd:f1:2c:d0:3c:54:9b:a7:3f:08:37:dc:da:6b:
                    3d:6f:11:03:f1:8d:31:b0:63:28:74:f3:23:3d:4c:
                    04:58:c4:30:7a:8a:7a:0b:d5:09:05:96:b1:7d:ed:
                    bf:ca:cd:c7:90:4e:19:a8:a4:02:4f:ea:b3:78:2e:
                    6f:f3:3b:df:3b:3d:cd:91:f3:c4:50:87:d9:ff:6f:
                    bb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:7B:3D:9A:8D:3A:39:22:FB:ED:85:99:4B:66:70:59:05:1B:F4:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/7C7B3D9A8D3A3922FBED85994B667059051BF40C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.234.128.0/18
                  200.239.192.0/18

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10704

    Signature Algorithm: sha256WithRSAEncryption
         a3:33:49:e5:87:7f:7d:36:5c:53:86:ed:ef:dd:d1:e2:81:b4:
         5f:1e:01:ac:b0:d0:3d:5f:9f:ba:78:2e:c8:b4:23:b2:75:e0:
         33:31:b4:73:a2:a3:50:ee:d1:ff:03:25:61:94:82:cb:6b:e6:
         7b:69:08:49:50:2c:a9:21:3c:33:c1:64:7b:25:96:6b:1a:ec:
         86:7e:d6:e9:ed:7b:eb:22:c2:63:af:b7:a7:ba:41:ce:21:bd:
         b1:f2:9e:9e:1a:7c:d3:2c:01:02:da:44:bc:d7:d3:8b:71:24:
         89:d5:96:be:c4:27:4e:35:62:d4:40:20:67:fd:2d:04:95:fd:
         2b:7e:82:43:46:21:41:1f:90:be:be:43:2f:89:eb:d0:ac:4f:
         26:b4:05:d9:02:f1:ad:f1:fe:40:95:bc:14:b4:e2:14:09:c6:
         08:8e:e2:70:85:1e:44:52:c9:5f:0b:72:97:ca:04:05:80:ef:
         6a:b2:70:85:59:4a:5f:9e:d1:31:23:75:52:b8:59:fc:e6:1b:
         c4:18:84:44:12:04:96:e7:94:2d:b2:be:a7:f9:32:dd:6e:f1:
         82:ad:2b:73:51:88:46:51:7d:bb:2f:7c:46:c0:0a:bd:e1:a4:
         d5:23:73:45:d6:51:1b:58:8d:f5:d9:ed:3f:83:94:49:f9:ee:
         f3:00:18:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org