Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7E63E43C07F54EA8AFD92D34644DBFCE5AC12F2D.cer
File:                     7E63E43C07F54EA8AFD92D34644DBFCE5AC12F2D.cer (raw, json)
Hash identifier:          CktKKC925gWQpESv1pendjBWntGw3ZzYt/rkGWlexQg=
Subject key identifier:   7E:63:E4:3C:07:F5:4E:A8:AF:D9:2D:34:64:4D:BF:CE:5A:C1:2F:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12D19E1FEF0832532CC43B5FF44553A349BBC7EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/0/7E63E43C07F54EA8AFD92D34644DBFCE5AC12F2D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 17:25:10 +0000
Certificate not after:    Wed 05 Feb 2025 17:30:10 +0000
Subordinate resources:    AS: 52843
                          IP: 177.66.40.0/21
                          IP: 2804:5800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d1:9e:1f:ef:08:32:53:2c:c4:3b:5f:f4:45:53:a3:49:bb:c7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 17:25:10 2024 GMT
            Not After : Feb  5 17:30:10 2025 GMT
        Subject: CN=7E63E43C07F54EA8AFD92D34644DBFCE5AC12F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:3a:e0:0b:37:e2:a3:89:97:3b:c4:dc:5b:
                    48:72:43:64:df:2a:62:7c:24:c4:a5:8a:ae:e8:50:
                    80:59:f0:a3:df:78:21:e0:7a:fc:f3:38:77:98:ca:
                    92:fc:32:b9:58:24:35:d2:ff:cb:e5:a2:94:b7:d8:
                    b3:21:2c:ef:39:33:b0:b2:27:8f:9e:6f:75:03:85:
                    f3:38:ee:cb:53:78:5e:54:70:6f:eb:40:c8:b4:53:
                    46:5b:4f:48:40:be:ff:91:b8:2a:1c:d2:94:4d:ce:
                    d4:0b:36:f0:9d:e5:5a:55:2a:6d:eb:86:40:fc:09:
                    8a:cc:d2:5a:e9:9c:c9:76:30:ee:04:50:31:db:4e:
                    18:19:b5:2e:45:1c:0f:e4:03:ce:04:b0:c5:27:38:
                    3b:6f:53:fe:a9:b7:7c:9d:59:f3:a6:5f:34:2b:c6:
                    66:78:42:ed:54:72:13:5a:5a:70:fb:bd:52:bc:d1:
                    92:eb:e6:e1:fc:df:27:0f:18:b6:79:d9:ce:41:15:
                    dd:08:6e:9e:bb:3e:29:90:59:2f:c2:83:4a:12:71:
                    f5:d5:a5:7a:12:3a:e9:5f:c0:16:14:f4:ac:56:82:
                    31:cc:53:b4:a8:16:ab:24:64:e9:79:f9:e9:dd:b8:
                    9e:0f:87:64:34:25:66:22:bb:52:ef:1a:dd:5c:07:
                    0a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:63:E4:3C:07:F5:4E:A8:AF:D9:2D:34:64:4D:BF:CE:5A:C1:2F:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/0/7E63E43C07F54EA8AFD92D34644DBFCE5AC12F2D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.40.0/21
                IPv6:
                  2804:5800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52843

    Signature Algorithm: sha256WithRSAEncryption
         40:74:59:e1:eb:7c:fe:c8:53:7b:15:fe:a6:63:35:d5:a6:b3:
         e6:dc:c6:00:27:75:10:11:b6:63:11:5c:21:50:f2:7b:4d:0a:
         39:cc:e9:c1:41:63:02:bb:cf:b5:9e:46:f3:dc:cf:97:78:ba:
         52:1b:dd:dd:c5:8d:a4:58:03:e1:83:4e:ba:d0:9c:03:32:13:
         a7:85:76:50:b2:1c:60:ca:59:46:a3:4e:bb:4c:b3:54:28:c9:
         50:e2:c0:63:6f:39:e0:14:cb:7c:46:3c:3d:4d:8c:fb:a7:b1:
         3b:14:82:a1:b9:17:71:1e:90:7d:10:88:78:38:1f:39:0b:f2:
         76:41:10:b5:12:4b:bc:3e:1c:69:d6:c0:19:60:bf:da:09:5c:
         8f:22:a8:cb:f0:e7:d7:71:6d:22:71:1a:0d:13:09:ce:00:3b:
         80:20:84:f6:5a:ab:47:39:37:94:5b:a3:87:9b:0f:b0:b8:c1:
         03:78:5c:53:27:df:34:2e:de:7f:56:b1:6f:28:05:66:8d:fc:
         4c:2d:d7:5f:eb:1a:31:b1:21:f7:b8:5a:6c:7d:e4:6d:d6:07:
         df:c1:b3:08:dc:79:8c:f2:b3:23:41:4a:05:e7:1d:8f:70:31:
         d9:a3:b2:cf:5b:36:08:54:2d:d0:8d:b5:83:1d:28:73:8a:c1:
         70:11:3d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org