Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer
File:                     7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer (raw, json)
Hash identifier:          dJMhXZ5ZO7L+5po9rLA1hVLMuTo3bL7ev2NjPPpyOxw=
Subject key identifier:   7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7948043431E6BC9610FEEC2A56AA5F1F92650D98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Mar 2024 21:01:42 +0000
Certificate not after:    Wed 26 Mar 2025 21:06:42 +0000
Subordinate resources:    AS: 264550
                          IP: 138.0.136.0/22
                          IP: 170.0.32.0/22
                          IP: 2804:215c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:48:04:34:31:e6:bc:96:10:fe:ec:2a:56:aa:5f:1f:92:65:0d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 27 21:01:42 2024 GMT
            Not After : Mar 26 21:06:42 2025 GMT
        Subject: CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:d1:49:dc:8a:22:93:e3:14:38:65:2e:da:
                    b2:88:83:17:ad:bf:a2:3b:69:fb:6c:e8:19:b1:3d:
                    81:12:3c:27:88:e2:71:90:7f:6d:cd:03:15:4b:88:
                    c8:8b:51:9e:9e:ff:dd:9f:b9:fd:ad:86:88:07:83:
                    d1:cc:bc:77:90:6c:da:a2:32:9e:2a:32:80:4d:51:
                    36:a8:df:92:25:73:1c:5d:95:d0:a1:2b:e6:9f:a1:
                    66:fd:38:fc:79:44:41:7e:32:a6:e0:7c:4e:79:35:
                    da:2d:dc:a7:85:1a:c2:a3:75:52:52:a0:0d:6e:3e:
                    89:91:0e:e5:83:b6:05:0c:60:d5:53:c7:e9:de:43:
                    16:f8:e1:c6:f1:93:d4:7c:77:74:ba:b8:25:58:f2:
                    51:a1:43:2a:f7:6a:16:bb:b2:a3:60:ec:e4:69:10:
                    bd:ad:94:b2:bb:dc:5c:21:c3:2d:19:5c:d4:86:1e:
                    50:0e:78:0f:f2:44:94:81:da:c1:37:df:b5:73:2c:
                    18:2e:b8:e8:aa:17:d3:5f:60:ba:f2:91:ca:1d:d0:
                    bb:28:3c:88:2a:45:fe:04:6d:35:b7:4e:06:ed:80:
                    53:e0:9e:75:0d:82:12:da:90:45:e8:51:62:61:9b:
                    6e:64:f5:06:20:57:89:ae:46:e7:79:57:14:4f:ff:
                    6b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.136.0/22
                  170.0.32.0/22
                IPv6:
                  2804:215c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264550

    Signature Algorithm: sha256WithRSAEncryption
         15:21:b2:d1:f1:de:cc:1a:4f:78:c7:87:8a:65:9f:f8:aa:c9:
         be:9f:40:36:a3:bd:2e:c0:77:bb:f9:7f:bd:bb:09:da:3a:4f:
         1e:cf:62:33:6b:f2:7d:87:6a:8b:ca:4f:b2:b8:c6:d5:03:a0:
         be:95:67:75:bb:b1:3b:db:13:7e:f5:d1:19:9a:19:f0:45:fa:
         df:03:38:b7:ec:25:7c:29:28:db:a4:c9:50:50:49:c1:df:26:
         f4:40:ef:47:f8:22:7d:af:2a:7a:fb:4b:b8:67:6d:3b:1b:69:
         11:fe:b7:5f:c4:f5:fc:c1:20:3e:32:e3:94:68:e0:d4:af:bf:
         26:1c:70:21:13:2a:4d:05:73:b7:74:de:46:5d:8f:23:1b:d8:
         6e:b5:fd:e4:e9:93:e2:02:db:27:16:51:7e:f2:2d:5b:f4:53:
         ae:57:f5:cb:b8:dd:51:08:98:f4:32:e3:df:f3:dd:cb:01:92:
         42:6f:46:ef:2f:44:95:38:e3:a0:d0:e7:d1:98:31:0a:ed:e4:
         39:cd:70:0a:16:b8:dd:21:90:1c:7d:08:50:7a:fb:55:43:27:
         e3:1d:55:54:b0:42:3f:5c:51:6d:51:c1:3b:1e:cb:f0:a9:d0:
         73:08:37:39:9d:14:e4:56:bf:63:76:14:79:bd:18:72:63:e1:
         0a:9b:7d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org