Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7EB806F082666E29BA49287EB0A2DD4E03FCB7F5.cer
File:                     7EB806F082666E29BA49287EB0A2DD4E03FCB7F5.cer (raw, json)
Hash identifier:          mb7z1EBkNfrzhNKRK7pNgEQn66roKnkKhzPmuHGcXCo=
Subject key identifier:   7E:B8:06:F0:82:66:6E:29:BA:49:28:7E:B0:A2:DD:4E:03:FC:B7:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C13C69091DE8B32F43C091AE644417182379126
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/7EB806F082666E29BA49287EB0A2DD4E03FCB7F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Feb 2024 12:50:37 +0000
Certificate not after:    Sat 08 Feb 2025 12:55:37 +0000
Subordinate resources:    AS: 53005
                          IP: 45.188.120.0/22
                          IP: 170.238.164.0/22
                          IP: 177.66.240.0/21
                          IP: 2804:548::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:13:c6:90:91:de:8b:32:f4:3c:09:1a:e6:44:41:71:82:37:91:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 10 12:50:37 2024 GMT
            Not After : Feb  8 12:55:37 2025 GMT
        Subject: CN=7EB806F082666E29BA49287EB0A2DD4E03FCB7F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:4c:00:f4:a5:15:60:45:43:e5:83:46:ee:
                    06:91:b3:7b:0f:35:c3:94:99:e5:3c:43:af:9a:08:
                    32:3b:0c:5d:a4:29:99:8f:fb:35:21:44:35:ea:ba:
                    07:29:6e:bd:6c:4f:f8:eb:bb:ef:3e:e6:c6:2a:6b:
                    6c:82:6c:07:0c:00:d2:9c:74:1a:00:99:ce:03:ff:
                    78:9e:b0:3e:51:da:e4:24:30:ca:90:c1:a9:a2:2f:
                    c7:ae:b8:c2:51:07:99:e0:82:df:42:34:b4:1a:2c:
                    ef:ca:50:ed:be:2e:94:50:b7:3c:cb:76:05:3b:4d:
                    44:55:a2:21:c4:6f:71:b2:08:35:ef:41:73:c6:01:
                    76:14:bc:00:ed:2b:b4:87:57:98:4d:0a:52:94:7c:
                    27:df:ac:de:b7:b4:be:97:e2:ef:55:43:79:cf:5e:
                    e3:04:ec:9b:f3:81:c2:c4:da:62:8e:59:b3:be:1e:
                    1f:13:f1:a3:01:f5:b1:7e:d5:7c:7e:ab:48:f7:ba:
                    1a:b9:2f:b4:d8:5c:74:29:0a:c6:e1:ef:f6:ff:a1:
                    cb:b6:ac:24:be:6f:30:3a:d7:64:a4:6d:78:f1:94:
                    d5:fe:60:1e:b3:b6:43:1a:9c:40:f3:46:c4:a7:86:
                    7c:b6:15:66:40:12:08:4b:4b:c4:cc:cc:d1:b3:ba:
                    fd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:B8:06:F0:82:66:6E:29:BA:49:28:7E:B0:A2:DD:4E:03:FC:B7:F5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/7EB806F082666E29BA49287EB0A2DD4E03FCB7F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.120.0/22
                  170.238.164.0/22
                  177.66.240.0/21
                IPv6:
                  2804:548::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53005

    Signature Algorithm: sha256WithRSAEncryption
         4a:fd:e7:68:a4:3f:07:94:ce:fa:2b:ee:91:e0:a6:37:26:80:
         35:e2:94:5d:77:94:2e:88:96:59:80:e0:63:06:1a:30:5b:40:
         d4:41:9a:06:ed:5d:2e:cf:23:9b:d4:80:42:2c:b8:ff:93:33:
         82:3e:95:36:df:32:78:3f:e7:60:83:22:0d:4a:62:72:22:1a:
         65:90:9d:3d:f2:99:7d:72:62:c8:f8:ed:25:f8:e2:c3:02:da:
         8c:79:5d:e0:5b:ae:7a:17:77:1e:69:60:e4:ac:81:33:e3:ed:
         a4:95:22:c9:8f:56:33:71:63:9c:93:1c:bf:45:00:2c:99:ae:
         38:f1:3b:af:5a:9d:0d:8e:f9:f0:6a:b8:4e:51:f7:8d:fa:08:
         da:ea:48:6d:ef:a0:d7:c4:84:d7:47:35:02:48:3e:4e:22:90:
         02:4f:c3:c0:10:05:80:a8:15:bf:39:05:4d:4f:21:52:7f:1e:
         20:3d:43:4d:68:cd:1e:7d:47:f0:2b:63:c2:71:78:0f:78:4c:
         3a:0d:d2:04:52:f9:39:91:e4:03:1b:c9:61:af:46:97:f8:e0:
         a8:54:4a:bc:88:ca:78:4d:e0:3d:05:6a:c3:16:18:c2:6d:90:
         8e:7f:cb:4c:7e:75:b6:6a:9d:43:5f:b0:73:ed:e0:d9:37:cf:
         4f:42:b9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org