Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7C7CF056955CB7500DBDE24074E4E53FDC31A841.cer
File:                     7C7CF056955CB7500DBDE24074E4E53FDC31A841.cer (raw, json)
Hash identifier:          WPHsOqiXa1/z2QbKviKSb8QsECFz785wTCYVHgrh/Bg=
Subject key identifier:   7C:7C:F0:56:95:5C:B7:50:0D:BD:E2:40:74:E4:E5:3F:DC:31:A8:41
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       236E42582041E12BF9868A1938543E519C533927
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/7C7CF056955CB7500DBDE24074E4E53FDC31A841.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Apr 2023 02:02:34 +0000
Certificate not after:    Thu 04 Apr 2024 02:07:34 +0000
Subordinate resources:    AS: 263517
                          IP: 191.243.224.0/20
                          IP: 2804:1320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6e:42:58:20:41:e1:2b:f9:86:8a:19:38:54:3e:51:9c:53:39:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  6 02:02:34 2023 GMT
            Not After : Apr  4 02:07:34 2024 GMT
        Subject: CN=7C7CF056955CB7500DBDE24074E4E53FDC31A841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:f3:dc:11:8e:77:d0:c2:82:51:26:a5:d1:
                    5c:1e:23:cb:97:f3:80:79:b7:62:11:85:b0:9e:89:
                    23:b3:2c:3b:39:5a:02:5b:f9:a5:48:5f:fd:d1:b6:
                    5f:ba:56:b1:7d:47:e5:5b:7e:db:eb:65:bb:81:72:
                    5a:80:19:57:93:42:a0:0f:cf:db:18:de:33:63:a2:
                    a7:c5:87:b5:db:ff:dd:13:f1:92:4d:24:25:96:d2:
                    ea:a5:c2:0f:9a:d9:50:5f:a9:0b:71:32:34:a2:53:
                    e3:4b:6c:77:d6:b1:39:5a:31:f7:0d:a9:59:1e:77:
                    3d:76:02:84:ea:98:78:b8:f9:cd:aa:15:7a:bd:00:
                    b8:64:3e:8a:c9:c2:d5:9d:4d:52:0e:22:25:3b:5b:
                    99:2c:a7:28:1c:03:f5:1e:ec:06:c9:81:82:45:db:
                    73:92:4b:80:80:30:d1:4d:1d:8c:9b:e0:10:6a:2e:
                    f9:d6:06:b6:22:87:ff:37:64:30:81:06:42:aa:0e:
                    60:f5:19:00:60:47:64:78:d2:78:ba:54:3f:3f:18:
                    96:c2:00:6f:2e:4b:12:f9:94:53:9d:b2:b0:bc:9e:
                    15:54:45:72:0d:ae:76:74:54:25:ed:aa:0b:bb:3d:
                    f0:79:3c:ff:f4:e8:ac:37:6f:2b:5c:1b:d5:97:a9:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:7C:F0:56:95:5C:B7:50:0D:BD:E2:40:74:E4:E5:3F:DC:31:A8:41
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/7C7CF056955CB7500DBDE24074E4E53FDC31A841.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.224.0/20
                IPv6:
                  2804:1320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263517

    Signature Algorithm: sha256WithRSAEncryption
         83:bd:e7:54:4d:cd:c7:4f:3e:28:9b:70:71:63:62:e1:92:6b:
         21:b8:b0:1f:c2:2a:d9:f2:86:f7:9b:27:17:8f:48:c8:68:9e:
         37:97:00:0b:53:44:16:9d:38:16:0c:44:2b:b6:dd:d6:3a:1c:
         56:cb:8b:09:55:55:8f:21:7a:b2:97:e7:db:31:6c:cb:a4:8a:
         20:79:de:ff:e7:b9:32:bc:54:2d:e2:03:f1:35:6c:9c:95:f2:
         1f:de:ae:32:3d:03:9e:c4:0e:7e:04:15:66:c8:36:a2:73:79:
         b0:a8:72:24:fc:21:bc:ad:2c:6c:d8:1b:e8:a5:7b:d9:25:d2:
         c6:0e:2b:21:0c:ee:6b:f8:53:2a:95:56:80:8b:68:d3:ef:d0:
         dc:2c:23:4a:d6:69:bc:d9:a8:3e:d4:37:7b:2a:a3:f8:2f:54:
         ea:f4:af:a8:4b:a4:04:ec:8c:35:c9:94:de:80:2d:9c:8d:79:
         ff:7d:1a:dc:08:39:93:61:c6:a6:49:bf:b9:e3:44:d5:58:4a:
         61:6b:2b:c1:b0:da:47:c7:f2:25:e6:1a:ee:69:07:2b:13:a8:
         dd:9e:de:a4:55:cb:53:0a:c4:be:2a:39:a0:65:b8:c1:bc:f5:
         7a:ed:8e:b8:91:60:72:0e:97:e2:7b:bf:19:3b:d1:14:1c:49:
         bc:5d:3c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org