Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.cer
File:                     7E870936463A4C49A47872CB9BDBE77E9EF1EE14.cer (raw, json)
Hash identifier:          M8ubKR6KbFDDDhUL5SRingFr1GG9+EXfk+3aY0bO4qM=
Subject key identifier:   7E:87:09:36:46:3A:4C:49:A4:78:72:CB:9B:DB:E7:7E:9E:F1:EE:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E0B79F9617B48A1B3C4916D2144E1E5BA47F0A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Aug 2023 13:49:42 +0000
Certificate not after:    Wed 31 Jul 2024 13:54:42 +0000
Subordinate resources:    AS: 268320
                          IP: 45.238.92.0/22
                          IP: 2804:4f54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0b:79:f9:61:7b:48:a1:b3:c4:91:6d:21:44:e1:e5:ba:47:f0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  2 13:49:42 2023 GMT
            Not After : Jul 31 13:54:42 2024 GMT
        Subject: CN=7E870936463A4C49A47872CB9BDBE77E9EF1EE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:a3:5f:34:b0:5c:d6:5c:fd:c4:81:d2:71:
                    95:d0:7c:f7:7c:f3:3e:d1:2a:66:72:62:49:86:80:
                    2a:b6:06:01:cb:ca:d3:f3:86:16:4f:fd:46:c1:1a:
                    4f:d7:16:3e:8b:ba:15:0b:c6:f2:4a:8b:dc:77:84:
                    1f:ea:3b:8c:ae:13:3d:2f:5d:af:3b:2c:0b:cb:53:
                    9f:2b:96:89:3f:3b:ba:21:3d:3a:49:28:c6:19:d0:
                    94:ab:a5:37:b8:4f:cc:dd:9c:bc:b2:cc:ec:f9:33:
                    13:1d:e7:15:1f:f7:af:9b:e1:ac:7a:f8:52:74:52:
                    8c:ca:40:ee:3f:80:5f:27:dd:7e:1d:2c:2b:7f:72:
                    0a:82:aa:10:3f:a8:d4:e1:03:21:35:49:4e:a0:f1:
                    2e:28:6c:36:80:51:cc:51:8d:83:ed:5e:91:1f:41:
                    31:94:c9:4b:38:f5:06:5a:44:62:1b:b1:81:4e:fc:
                    c9:33:a6:7d:d5:0a:26:5e:a4:73:02:1b:51:8d:5e:
                    61:86:ec:d0:7c:1c:31:9c:f1:d7:f6:d6:ba:e8:8f:
                    59:62:59:e4:03:45:ba:45:2d:79:ef:e5:0b:28:39:
                    a5:df:fb:b8:d5:96:3c:6a:1d:f5:47:59:03:eb:46:
                    93:56:18:c5:b8:e4:ae:80:a5:ab:b1:34:77:c0:5c:
                    d8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:87:09:36:46:3A:4C:49:A4:78:72:CB:9B:DB:E7:7E:9E:F1:EE:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.92.0/22
                IPv6:
                  2804:4f54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268320

    Signature Algorithm: sha256WithRSAEncryption
         a5:2a:15:d9:27:25:84:94:59:93:88:da:c0:5b:4c:d2:d4:87:
         10:6f:cf:80:39:dc:30:6d:84:7c:a7:89:42:80:d1:dc:b7:c0:
         2a:f5:e2:84:a2:cd:07:2c:49:cf:a4:c8:ba:45:1c:fd:26:36:
         56:19:05:21:96:3c:42:08:ee:6d:7e:23:75:2d:58:76:d6:a0:
         ac:74:dc:13:74:3c:99:b6:83:45:9b:3f:61:31:51:dc:3d:45:
         d4:8e:e8:fc:77:13:0a:3c:8a:ac:e1:5d:02:46:fa:62:6a:d2:
         e3:80:34:8f:ce:a0:00:d6:74:0d:d9:c0:f9:d0:c4:21:67:e8:
         57:03:d1:ed:34:d2:03:15:cf:fe:0b:9c:b2:b5:e1:ed:6c:ce:
         2b:c6:6e:ea:bc:6c:e9:c2:a1:30:71:a3:b7:2d:74:4c:af:b8:
         38:40:f7:27:87:c0:f0:80:2d:bf:4d:b2:79:23:9c:0f:5c:76:
         9d:f7:98:aa:05:a5:91:68:56:8a:19:7e:da:0d:cd:fd:3e:5e:
         7b:e2:53:39:40:5b:4c:3f:9a:c3:8d:38:04:8e:6e:09:4d:e5:
         a5:6a:55:fd:6f:4f:a5:13:33:9c:50:27:8a:9a:5f:f6:02:5b:
         e8:27:4d:14:dc:ba:32:cb:dd:6e:f7:c7:87:6a:1b:b5:ca:bb:
         f7:92:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org