Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7EFB1F4698A706D800051B2455B22A8B20F627C9.cer
File:                     7EFB1F4698A706D800051B2455B22A8B20F627C9.cer (raw, json)
Hash identifier:          /D+tMPMhI3bzdpKuSh+cp1QyTKe08RYS0VPT+fhgbB0=
Subject key identifier:   7E:FB:1F:46:98:A7:06:D8:00:05:1B:24:55:B2:2A:8B:20:F6:27:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4FF7F2C36904D2BF5061B86D8E8BF8049FF1280A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/1/7EFB1F4698A706D800051B2455B22A8B20F627C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 20:26:38 +0000
Certificate not after:    Wed 04 Sep 2024 20:31:38 +0000
Subordinate resources:    AS: 271388
                          IP: 200.36.132.0/22
                          IP: 2804:7ab8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f7:f2:c3:69:04:d2:bf:50:61:b8:6d:8e:8b:f8:04:9f:f1:28:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 20:26:38 2023 GMT
            Not After : Sep  4 20:31:38 2024 GMT
        Subject: CN=7EFB1F4698A706D800051B2455B22A8B20F627C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0f:fb:81:6f:9e:46:c5:38:b4:d4:4b:9d:65:
                    8f:de:db:b0:d7:17:f8:a7:ff:5b:d7:ca:d3:6b:22:
                    bf:a6:dc:f5:d7:70:e9:52:26:f1:1e:07:8b:7a:27:
                    77:47:72:c3:09:9d:4e:5b:f7:0d:4e:35:71:28:e8:
                    b4:d6:66:c0:8c:c0:34:19:3f:44:45:3b:09:6f:aa:
                    96:f3:35:b3:7b:f2:38:63:83:66:89:92:0d:67:71:
                    13:4f:e7:f8:68:d7:00:d6:be:aa:b0:c1:d2:e1:dd:
                    5c:f9:22:89:43:b9:b3:1a:62:ef:91:42:f0:53:1d:
                    d8:17:60:e2:33:5d:5e:ec:2c:25:a6:0b:d3:d2:25:
                    0d:ae:4a:55:c1:35:07:ec:63:4d:35:db:5d:ac:ac:
                    50:ee:c2:49:67:7b:80:a8:55:d4:51:16:a9:34:c5:
                    00:d4:c8:fa:b7:31:b3:78:10:e9:c7:5e:a3:e3:e5:
                    01:72:ba:ff:c8:74:63:c0:c8:36:56:83:0c:c9:55:
                    ba:a5:89:00:08:99:cb:3e:fe:10:d5:00:f8:0f:96:
                    bf:c1:7e:d4:73:19:7c:24:6c:33:ad:92:2b:e0:6f:
                    a4:1b:18:c5:89:c7:04:37:45:02:be:1b:b8:cd:25:
                    cc:ca:00:63:0c:04:32:8b:fd:72:95:c2:58:e2:a2:
                    9f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:FB:1F:46:98:A7:06:D8:00:05:1B:24:55:B2:2A:8B:20:F6:27:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/1/7EFB1F4698A706D800051B2455B22A8B20F627C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.132.0/22
                IPv6:
                  2804:7ab8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271388

    Signature Algorithm: sha256WithRSAEncryption
         6b:93:59:db:4f:3f:69:1b:4b:d8:0b:db:7b:5a:4c:52:4c:56:
         d0:78:5e:3a:65:a0:aa:d7:cf:c1:94:33:5a:10:38:3f:a6:5f:
         79:4e:21:e5:6b:5c:86:f6:3f:48:49:42:1a:9c:15:86:60:7b:
         a9:da:cb:ba:e7:4b:82:23:98:2e:d0:2a:34:96:4b:8e:36:ee:
         3e:d6:a6:f4:67:7c:3a:27:c4:69:ad:b5:d1:ca:46:65:f9:64:
         7b:a7:75:20:4a:c2:ef:58:f5:26:e5:56:35:a5:47:13:88:d0:
         42:02:8a:40:05:39:08:32:5b:26:5c:07:3e:7a:6a:61:db:31:
         e3:68:08:1e:9e:b7:e6:a5:95:fe:e8:3f:85:89:47:7d:61:c7:
         55:10:cd:b2:69:98:a5:b9:80:a0:c8:03:ae:4d:b2:2e:e1:8d:
         8e:bd:be:b4:ff:a2:66:f4:7c:40:5c:ba:1c:87:be:24:2f:a6:
         13:01:46:d6:f9:05:a6:f9:27:22:14:a3:25:fd:9c:1b:0a:2e:
         8b:c3:1a:23:1a:3a:f5:85:2f:ef:aa:09:e1:92:fc:b0:a4:08:
         5e:95:1f:35:e4:a8:3f:db:87:28:37:b5:9f:f4:6e:70:60:ca:
         bc:dd:ff:f1:c2:6c:7c:10:ca:4f:d8:97:89:05:9b:67:7f:bb:
         09:7f:8e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org