Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7C9AEAFC6F02C611FEAC84D565E8668D1C98210B.cer
File:                     7C9AEAFC6F02C611FEAC84D565E8668D1C98210B.cer (raw, json)
Hash identifier:          enhi6mz8weV8zqisZMlZK1fjGcRywyT6HTrL9OlLRAs=
Subject key identifier:   7C:9A:EA:FC:6F:02:C6:11:FE:AC:84:D5:65:E8:66:8D:1C:98:21:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       65A52FB8031946E7367181EDBC99E9D165B69DC7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/7C9AEAFC6F02C611FEAC84D565E8668D1C98210B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Jan 2023 18:05:10 +0000
Certificate not after:    Tue 09 Jan 2024 18:10:10 +0000
Subordinate resources:    AS: 263411
                          IP: 179.97.24.0/21
                          IP: 2804:15cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a5:2f:b8:03:19:46:e7:36:71:81:ed:bc:99:e9:d1:65:b6:9d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 10 18:05:10 2023 GMT
            Not After : Jan  9 18:10:10 2024 GMT
        Subject: CN=7C9AEAFC6F02C611FEAC84D565E8668D1C98210B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7a:ad:97:bf:03:5b:df:9a:94:74:15:f1:30:
                    36:4e:0a:61:4b:96:cf:ef:80:0d:19:8a:d5:d6:ea:
                    b6:09:d6:ad:74:9b:25:2b:42:47:ee:d4:6b:6b:d3:
                    cd:b5:35:74:56:a4:9f:5e:b2:51:6f:40:96:59:82:
                    40:f3:c5:6a:36:d0:7e:f2:dc:5d:b2:88:7d:1e:dd:
                    86:b5:3b:d3:37:c2:dd:5a:92:e8:3d:27:0e:74:e2:
                    ac:19:0a:79:0a:6e:fa:2b:72:96:ea:0f:e4:49:0b:
                    46:97:19:40:bf:a4:37:c3:b3:7d:d5:7f:ee:ae:df:
                    7a:f6:03:ff:3e:39:ee:77:50:d6:ed:c3:73:b0:97:
                    f8:1d:6d:57:f9:5c:14:cc:28:55:a5:d3:da:63:01:
                    8d:51:71:5a:80:0b:52:0e:1e:87:e1:b5:a2:34:04:
                    12:80:0f:b2:cd:d8:c2:df:67:b0:1d:7f:cb:0d:89:
                    f4:e8:51:e9:54:e2:cc:d1:2a:f4:f8:b7:22:c0:62:
                    5d:93:6d:d5:74:f5:ea:4a:fa:a9:9a:25:d6:b0:e0:
                    3e:cc:9f:42:89:af:dd:ed:a5:b4:6c:75:d7:58:68:
                    4e:a8:6e:34:6e:05:89:13:81:c3:14:78:3a:d8:61:
                    d7:94:f2:26:ae:70:2e:59:22:18:4b:9e:11:bb:03:
                    55:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:9A:EA:FC:6F:02:C6:11:FE:AC:84:D5:65:E8:66:8D:1C:98:21:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/7C9AEAFC6F02C611FEAC84D565E8668D1C98210B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.24.0/21
                IPv6:
                  2804:15cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263411

    Signature Algorithm: sha256WithRSAEncryption
         05:49:3d:51:9f:54:4c:50:c6:27:c2:61:d5:a6:6b:73:c5:8a:
         67:7b:e9:eb:bc:70:b7:9e:32:62:5a:25:4b:1a:d9:c4:1a:d6:
         24:49:4a:b8:73:33:51:56:25:cf:b7:db:89:e0:71:42:99:19:
         5f:1a:6c:3b:5f:02:ff:93:47:8d:b9:d4:45:96:75:a2:be:0f:
         b5:1e:ea:ee:a1:72:ad:a6:30:0a:a1:ac:6b:5a:48:04:eb:92:
         9e:95:69:62:d1:ef:0b:1d:87:c3:57:f0:96:48:05:bb:86:b9:
         1b:29:e4:01:1d:7e:e4:fa:45:2f:55:82:a2:9f:aa:46:80:07:
         5f:fd:83:a6:6f:e1:24:ab:ae:fe:4a:35:4e:d1:49:7d:da:d4:
         8d:42:3f:3e:41:65:1e:8e:62:d5:9c:28:55:e4:66:44:2d:d3:
         58:ac:34:08:59:9e:f7:5f:1f:9a:46:d1:51:a5:c7:e7:21:e6:
         76:48:ae:ee:c7:f6:56:eb:be:d2:55:70:73:d4:bb:21:a4:16:
         dd:23:d0:23:2f:58:e0:b7:28:e1:5e:ab:3a:ba:d0:db:7c:73:
         46:60:1b:dd:6a:70:95:02:2e:48:09:af:87:cb:13:a1:db:11:
         75:02:c0:a9:bf:aa:d8:98:dd:25:bd:0e:62:aa:32:ba:38:8a:
         14:b2:76:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org