Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7E95EBEE3456D4BC4E5DEFBA84FFDD0D3DC39AC5.cer
File:                     7E95EBEE3456D4BC4E5DEFBA84FFDD0D3DC39AC5.cer (raw, json)
Hash identifier:          d5gD17IXBwVDLW0LqNeSobsQ1tWdrioqXkOgZ0XTTZo=
Subject key identifier:   7E:95:EB:EE:34:56:D4:BC:4E:5D:EF:BA:84:FF:DD:0D:3D:C3:9A:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       238E4B24ECBB8E6D498C2787B5BD1762A8B91970
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/7E95EBEE3456D4BC4E5DEFBA84FFDD0D3DC39AC5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Nov 2022 21:01:45 +0000
Certificate not after:    Wed 15 Nov 2023 21:06:45 +0000
Subordinate resources:    AS: 267436
                          IP: 181.191.0.0/22
                          IP: 2804:417c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8e:4b:24:ec:bb:8e:6d:49:8c:27:87:b5:bd:17:62:a8:b9:19:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 16 21:01:45 2022 GMT
            Not After : Nov 15 21:06:45 2023 GMT
        Subject: CN=7E95EBEE3456D4BC4E5DEFBA84FFDD0D3DC39AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:bf:44:6c:1c:dd:81:e5:ec:65:b8:0a:62:
                    da:63:d7:34:a8:02:0f:61:33:7f:1b:dc:f5:c2:96:
                    75:b8:20:98:ca:64:2b:f1:cd:e9:18:3a:74:c7:1e:
                    96:d5:0a:26:5c:a6:fe:fa:ab:d2:9f:a6:9f:f9:a1:
                    05:50:b9:97:50:43:50:54:52:6d:40:c9:82:47:30:
                    74:9b:44:a9:a2:77:d9:54:eb:c9:3e:57:a1:f3:3e:
                    61:3c:3f:ac:0b:7d:b2:cd:c2:46:dd:0c:f1:28:2d:
                    5f:8f:03:fd:4d:35:82:c9:f1:27:3d:d9:6c:15:eb:
                    dd:4e:21:47:9c:d4:d5:b0:7f:7a:93:dc:6b:b6:27:
                    96:8f:74:38:d9:05:17:ae:ba:7f:a5:8f:45:de:d7:
                    84:f7:a6:95:e0:07:19:fb:95:3f:6a:e6:45:4e:48:
                    da:f1:1e:7e:ef:bf:15:b9:4a:72:3e:3a:d8:18:c5:
                    6a:6c:cf:13:17:d0:03:84:39:6f:a6:f4:da:b8:49:
                    6a:66:78:cf:13:be:9c:a8:e3:79:55:cd:aa:48:a1:
                    20:70:95:bf:c3:c2:9a:8d:26:77:ac:35:f9:64:29:
                    d7:60:ce:52:c6:e2:32:c5:c2:32:2a:74:c6:d4:44:
                    e0:c0:c1:4c:64:ca:d2:7d:73:6f:09:63:1f:dd:62:
                    8e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:95:EB:EE:34:56:D4:BC:4E:5D:EF:BA:84:FF:DD:0D:3D:C3:9A:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/7E95EBEE3456D4BC4E5DEFBA84FFDD0D3DC39AC5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.0.0/22
                IPv6:
                  2804:417c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267436

    Signature Algorithm: sha256WithRSAEncryption
         33:48:22:54:c6:d0:08:e7:55:a6:e9:56:00:65:46:b5:ae:0e:
         df:86:03:c7:1a:9e:d1:4b:f9:f7:74:23:8f:b6:b6:7c:e1:00:
         8c:de:15:92:34:9e:4f:3f:01:ba:5e:a8:8c:b1:d8:4b:79:5c:
         2f:71:2a:07:9d:30:29:0a:83:83:41:5a:28:b6:0a:d2:c2:27:
         04:96:90:e8:98:9e:0f:a0:2a:1c:a0:0a:84:a2:e3:a5:21:f8:
         cd:b6:a3:20:a0:d6:1b:ee:60:1a:47:55:5b:f6:38:71:97:cf:
         50:f4:cd:74:34:0e:90:10:03:c2:75:70:39:54:94:53:a3:dc:
         55:e3:99:0a:3a:20:cd:d5:1d:2c:d8:e5:b5:56:fb:ee:a9:bd:
         62:03:5b:64:5e:d5:92:a3:51:22:33:fd:1a:3b:c9:f6:7c:2e:
         df:fc:dd:3d:d8:cf:a1:52:78:6c:a3:23:97:f7:c3:78:c5:52:
         3a:96:5c:96:b6:61:22:a5:0a:a2:06:87:b5:25:9a:96:76:27:
         63:e6:48:c1:5f:fd:1f:52:df:87:9b:4e:2d:65:84:7c:da:5a:
         33:94:c8:d4:40:87:7c:f6:cc:b5:dc:fe:6e:5a:d6:1d:87:e1:
         03:20:69:49:a1:60:2e:73:e9:d0:82:68:ae:70:92:a6:93:28:
         3b:89:2e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org