Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7DBC16271BD08BC1E2E92ABDB478B26B9EE51245.cer
File:                     7DBC16271BD08BC1E2E92ABDB478B26B9EE51245.cer (raw, json)
Hash identifier:          8si/b63OGnh0lk7TZKwWIVW/6GC2mlgRUCYLXqUy6F4=
Subject key identifier:   7D:BC:16:27:1B:D0:8B:C1:E2:E9:2A:BD:B4:78:B2:6B:9E:E5:12:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4CC57B7B8D38CCE3CBF8B7B4B966EAFBFB48579F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4oVajvrDZgps9DUNKZNsDFxS9dnzCyw2N2NakxxViW6H/0/7DBC16271BD08BC1E2E92ABDB478B26B9EE51245.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4oVajvrDZgps9DUNKZNsDFxS9dnzCyw2N2NakxxViW6H/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Nov 2023 19:42:39 +0000
Certificate not after:    Thu 28 Nov 2024 19:47:39 +0000
Subordinate resources:    AS: 273585
                          IP: 2804:8928::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c5:7b:7b:8d:38:cc:e3:cb:f8:b7:b4:b9:66:ea:fb:fb:48:57:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 30 19:42:39 2023 GMT
            Not After : Nov 28 19:47:39 2024 GMT
        Subject: CN=7DBC16271BD08BC1E2E92ABDB478B26B9EE51245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:de:7e:15:52:ad:88:1f:18:24:f2:8e:81:dc:
                    0e:bd:84:5c:9f:7b:1c:08:76:af:d5:68:53:a2:8b:
                    83:26:f3:fc:76:ba:93:f8:d2:1f:d9:39:07:ca:66:
                    e5:d5:b6:5b:2f:33:76:44:7d:79:56:8b:bb:cb:73:
                    97:5a:d2:4b:00:49:9e:b8:f0:d5:a8:c1:45:04:b0:
                    eb:66:69:84:32:64:14:c3:86:a5:39:d5:ee:d9:e3:
                    9b:6e:3b:28:69:27:cb:66:be:9c:2e:3a:88:ce:fe:
                    c3:36:aa:53:82:c3:fc:ca:08:a9:35:e7:b6:b2:5f:
                    f7:56:5d:05:71:c7:28:bb:72:a0:cf:9d:ff:47:9f:
                    bd:86:bc:b4:fa:d9:2b:85:7e:59:b5:2a:8b:4d:19:
                    74:c0:72:54:eb:aa:0b:2e:a7:5c:c3:78:9b:61:c2:
                    02:af:02:99:de:d0:d0:34:05:ce:08:26:7c:d0:dc:
                    5d:3c:d6:d8:31:18:b1:cb:e8:d3:04:45:4e:65:c0:
                    b2:7c:69:ac:32:20:05:00:c7:17:4a:dd:d4:37:cd:
                    0a:34:ec:2b:2f:75:3d:0c:41:f0:17:db:6d:c6:e1:
                    47:1c:41:98:b2:0a:99:1b:32:7f:90:ea:c6:12:5b:
                    91:c3:f4:66:03:52:e9:50:96:1b:55:e0:65:b4:89:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:BC:16:27:1B:D0:8B:C1:E2:E9:2A:BD:B4:78:B2:6B:9E:E5:12:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4oVajvrDZgps9DUNKZNsDFxS9dnzCyw2N2NakxxViW6H/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4oVajvrDZgps9DUNKZNsDFxS9dnzCyw2N2NakxxViW6H/0/7DBC16271BD08BC1E2E92ABDB478B26B9EE51245.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8928::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273585

    Signature Algorithm: sha256WithRSAEncryption
         05:2f:94:61:29:0b:0b:bb:83:a0:6c:cf:0d:8a:49:29:49:b4:
         6c:7d:67:bc:d1:bd:41:f3:7e:f6:e8:59:75:01:51:f2:18:ad:
         83:a7:3a:48:4b:e1:e5:e4:08:04:e2:45:2f:20:09:ee:69:7b:
         dd:91:9e:a3:18:e0:26:dd:0e:62:c3:b9:83:68:f5:53:4d:c8:
         e0:57:c6:2c:1f:c7:d1:3f:96:33:5c:bd:b0:ea:0d:78:be:50:
         39:a4:1f:0c:8b:53:f4:d8:4f:d6:ca:7e:a3:2c:84:50:80:8d:
         8d:41:c3:9c:02:0f:d2:e5:be:35:2c:5f:3a:3f:42:66:2d:2c:
         ee:da:85:c2:5d:72:77:a5:06:65:6f:fd:50:3d:02:a1:44:f2:
         de:34:0d:45:8e:dd:a6:ee:20:1c:5a:fe:c9:ce:f2:9b:b3:7d:
         43:e1:5a:d0:ce:a2:fd:17:06:a1:f7:f4:bc:37:4a:fc:72:9e:
         13:fc:d3:37:e7:e7:97:7c:7b:b3:96:94:d9:b0:17:dc:a5:4c:
         8f:f8:06:10:23:8d:f1:70:75:4a:c5:ce:03:f5:0c:71:da:25:
         90:0b:d6:7f:83:39:9a:e0:9d:07:69:19:ef:ad:c5:5b:2e:9b:
         d2:97:7d:c1:24:c9:17:55:c2:51:ed:fb:fb:4a:32:8a:3a:ee:
         86:a7:7a:70
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgIUTMV7e404zOPL+Le0uWbq+/tIV58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMzAxOTQyMzlaFw0yNDExMjgxOTQ3MzlaMDMxMTAvBgNV
BAMTKDdEQkMxNjI3MUJEMDhCQzFFMkU5MkFCREI0NzhCMjZCOUVFNTEyNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg3n4VUq2IHxgk8o6B3A69hFyf
exwIdq/VaFOii4Mm8/x2upP40h/ZOQfKZuXVtlsvM3ZEfXlWi7vLc5da0ksASZ64
8NWowUUEsOtmaYQyZBTDhqU51e7Z45tuOyhpJ8tmvpwuOojO/sM2qlOCw/zKCKk1
57ayX/dWXQVxxyi7cqDPnf9Hn72GvLT62SuFflm1KotNGXTAclTrqgsup1zDeJth
wgKvApne0NA0Bc4IJnzQ3F081tgxGLHL6NMERU5lwLJ8aawyIAUAxxdK3dQ3zQo0
7CsvdT0MQfAX223G4UccQZiyCpkbMn+Q6sYSW5HD9GYDUulQlhtV4GW0iUydAgMB
AAGjggMNMIIDCTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR9vBYnG9CLweLp
Kr20eLJrnuUSRTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80b1ZhanZyRFpncHM5RFVOS1pOc0RGeFM5ZG56Q3l3Mk4y
TmFreHhWaVc2SC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNG9WYWp2ckRaZ3BzOURVTktaTnNERnhTOWRuekN5dzJO
Mk5ha3h4VmlXNkgvMC83REJDMTYyNzFCRDA4QkMxRTJFOTJBQkRCNDc4QjI2QjlF
RTUxMjQ1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBIkoMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwQssTANBgkqhkiG9w0BAQsFAAOCAQEABS+UYSkLC7uD
oGzPDYpJKUm0bH1nvNG9QfN+9uhZdQFR8hitg6c6SEvh5eQIBOJFLyAJ7ml73ZGe
oxjgJt0OYsO5g2j1U03I4FfGLB/H0T+WM1y9sOoNeL5QOaQfDItT9NhP1sp+oyyE
UICNjUHDnAIP0uW+NSxfOj9CZi0s7tqFwl1yd6UGZW/9UD0CoUTy3jQNRY7dpu4g
HFr+yc7ym7N9Q+Fa0M6i/RcGoff0vDdK/HKeE/zTN+fnl3x7s5aU2bAX3KVMj/gG
ECON8XB1SsXOA/UMcdolkAvWf4M5muCdB2kZ763FWy6b0pd9wSTJF1XCUe37+0oy
ijruhqd6cA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org