Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7CFE6CA30F42AFD41244400C208946A9DF58A188.cer
File:                     7CFE6CA30F42AFD41244400C208946A9DF58A188.cer (raw, json)
Hash identifier:          LQPeHJp5J7WFLHu1Gw8WvaY0M3qsmDwY9tkcHA0s/Oo=
Subject key identifier:   7C:FE:6C:A3:0F:42:AF:D4:12:44:40:0C:20:89:46:A9:DF:58:A1:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       52EB616DB8CE37C9FD7ED7A14C672B8CB92FC22F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/7CFE6CA30F42AFD41244400C208946A9DF58A188.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Oct 2023 18:49:45 +0000
Certificate not after:    Thu 24 Oct 2024 18:54:45 +0000
Subordinate resources:    AS: 263913
                          IP: 138.204.240.0/22
                          IP: 170.231.216.0/22
                          IP: 2804:279c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:eb:61:6d:b8:ce:37:c9:fd:7e:d7:a1:4c:67:2b:8c:b9:2f:c2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 26 18:49:45 2023 GMT
            Not After : Oct 24 18:54:45 2024 GMT
        Subject: CN=7CFE6CA30F42AFD41244400C208946A9DF58A188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:f6:25:49:1a:8e:62:af:8a:42:80:7f:43:
                    32:e1:5b:f3:cc:56:df:38:56:e8:66:2d:72:88:4d:
                    76:dc:59:d4:03:b2:7f:13:d6:eb:88:58:ce:2e:70:
                    c6:28:2b:4f:92:fc:75:66:a8:f6:7f:fa:60:a2:bc:
                    e9:79:f0:bc:4b:29:77:30:22:10:fc:67:70:8d:87:
                    91:26:95:37:3c:05:5c:09:bb:62:ef:16:2a:cc:e6:
                    7a:ef:0b:e7:c0:09:2a:4b:df:b2:33:92:e6:4a:fa:
                    31:e1:63:78:26:03:b8:ce:b3:5d:af:bf:3f:b2:8a:
                    76:6e:bb:c7:53:b2:f0:b8:fa:9c:57:04:97:85:c2:
                    11:3f:54:40:45:0d:17:94:46:66:c8:1b:f9:3e:54:
                    1d:2b:f6:af:48:91:63:52:bf:af:06:3a:e1:3b:d9:
                    19:67:ee:c6:14:ff:ad:65:02:05:a4:65:de:d4:6b:
                    13:b9:bd:95:36:4e:fe:27:b7:c7:39:92:db:de:25:
                    30:bc:18:f8:23:db:73:20:d2:0a:4e:df:72:91:ea:
                    14:fe:70:da:22:9b:82:94:55:74:44:b0:c7:83:5d:
                    e2:86:44:20:81:1a:bd:53:31:39:54:81:b1:0b:79:
                    07:10:35:42:e4:ce:86:45:df:41:9a:01:45:68:27:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:FE:6C:A3:0F:42:AF:D4:12:44:40:0C:20:89:46:A9:DF:58:A1:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/7CFE6CA30F42AFD41244400C208946A9DF58A188.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.240.0/22
                  170.231.216.0/22
                IPv6:
                  2804:279c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263913

    Signature Algorithm: sha256WithRSAEncryption
         1a:9c:02:a5:2e:83:ba:b6:a3:04:b2:c1:37:42:83:18:42:3f:
         ed:8a:43:df:ff:5f:cf:10:b0:cd:dc:0e:cf:91:b7:bc:ec:89:
         b8:5d:91:dc:d4:5e:dd:55:a2:86:7f:06:a2:55:7d:37:58:97:
         fe:87:07:89:d8:ee:23:21:f5:e5:18:25:4c:2d:23:64:b9:9d:
         b4:62:9b:fb:3c:74:98:4b:3c:fa:b5:90:2e:e6:82:96:06:9c:
         d5:43:87:ed:7f:e6:90:c6:8f:87:e7:8c:a2:96:be:ac:b2:74:
         3e:4c:a6:25:95:21:46:f6:90:4d:43:a1:1a:29:91:17:bb:27:
         88:eb:41:20:85:6d:7a:86:b8:7a:a9:ea:c4:9b:e8:b9:1e:5c:
         ce:1f:a4:59:4b:84:bf:c1:87:f1:4b:72:25:62:98:df:de:1f:
         76:26:27:45:8c:f3:0a:02:a8:34:26:01:27:fc:2a:a0:0d:8a:
         9a:91:16:e7:a6:3b:11:e8:28:b7:a9:b1:ee:34:51:8f:f4:6d:
         82:42:6a:65:20:3a:06:1a:43:28:80:f5:9b:28:6e:90:05:4d:
         2a:a5:39:03:25:4d:e6:3a:a9:33:b7:7d:42:d5:6f:ab:6c:21:
         f1:0c:93:de:79:56:92:68:4a:27:a9:e1:fd:d2:4a:5b:41:3a:
         a1:34:9d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org