Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7F8EA995A4408768396ABD97DA2AABC1207C94EC.cer
File:                     7F8EA995A4408768396ABD97DA2AABC1207C94EC.cer (raw, json)
Hash identifier:          McfNS6LqvTA8Hppo9nqdJRDZ466Ta6LLiA3Ac7CvZnk=
Subject key identifier:   7F:8E:A9:95:A4:40:87:68:39:6A:BD:97:DA:2A:AB:C1:20:7C:94:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7289538D4C1EC3ED9C880AB4CEB2045A486C92DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/7F8EA995A4408768396ABD97DA2AABC1207C94EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 28 Jan 2023 14:55:13 +0000
Certificate not after:    Sat 27 Jan 2024 15:00:13 +0000
Subordinate resources:    AS: 28191
                          IP: 186.193.176.0/20
                          IP: 189.90.32.0/20
                          IP: 2804:c2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:89:53:8d:4c:1e:c3:ed:9c:88:0a:b4:ce:b2:04:5a:48:6c:92:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 28 14:55:13 2023 GMT
            Not After : Jan 27 15:00:13 2024 GMT
        Subject: CN=7F8EA995A4408768396ABD97DA2AABC1207C94EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ee:8c:32:c7:38:61:3b:51:96:31:72:3f:0b:
                    6e:ce:2d:7b:fb:db:86:70:68:2f:41:8e:05:6d:0d:
                    6b:e3:ce:52:85:fa:2a:c5:c5:cc:e1:f7:94:3a:54:
                    fe:3f:0f:a7:27:22:a8:b4:11:a5:49:4c:10:e6:11:
                    0a:20:4f:c8:df:53:f8:20:ad:1d:0d:17:3c:07:e5:
                    13:16:1a:f4:65:e6:74:a8:a4:0c:84:8c:78:c3:c4:
                    ed:1a:65:23:2d:63:cb:78:e9:ac:cd:8a:a2:35:50:
                    54:fa:7f:4a:69:df:37:5d:1a:82:e8:4a:79:a9:8a:
                    f0:bd:60:f4:68:4e:b4:2a:c6:61:5c:ad:6c:e2:8f:
                    3e:d2:56:6d:d1:c3:0d:2c:b9:0e:b3:19:6e:c0:3d:
                    11:bd:fc:ff:d2:0b:80:0f:8c:58:56:8b:da:47:e1:
                    c3:f8:ce:73:be:cf:c0:46:e2:81:fa:6e:4a:d8:d9:
                    94:f7:f4:0d:25:e1:1c:d2:67:26:e3:c2:cb:56:3e:
                    d4:9c:3e:de:89:82:1d:82:2b:c6:87:ac:d6:ea:55:
                    98:8d:ad:40:32:8e:e6:0d:27:14:9f:c5:4d:a9:4e:
                    c6:50:d8:1d:f4:da:b1:67:c9:65:99:ff:63:f2:a1:
                    c2:4d:03:00:64:63:69:ed:47:1d:5d:85:37:44:03:
                    76:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:8E:A9:95:A4:40:87:68:39:6A:BD:97:DA:2A:AB:C1:20:7C:94:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/7F8EA995A4408768396ABD97DA2AABC1207C94EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.176.0/20
                  189.90.32.0/20
                IPv6:
                  2804:c2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28191

    Signature Algorithm: sha256WithRSAEncryption
         ac:8d:60:45:dc:95:4c:ce:d8:f7:e3:21:90:ca:01:c7:0b:38:
         34:d8:45:d7:a1:02:5f:51:4a:da:e9:3c:b6:6c:13:78:37:67:
         1b:d3:fa:e9:4c:05:3c:9f:e0:c6:01:d3:c0:91:ab:e6:a0:81:
         07:2a:7b:35:f8:19:c8:aa:f9:a7:78:be:cf:b5:da:b0:ae:a5:
         c5:be:67:cf:0e:bd:24:b2:85:79:50:c5:96:96:36:a6:8f:31:
         df:7f:c8:64:43:87:79:ae:a0:c0:73:c9:24:16:e2:f7:3d:90:
         ec:0f:dd:f6:e5:c4:47:75:72:74:e9:10:b4:50:80:b5:c5:11:
         3a:7e:98:c2:4b:8e:cb:5c:dd:a7:1f:ab:ea:aa:8c:7c:a7:26:
         96:5d:52:4e:82:46:d4:32:68:6f:43:e5:0f:e2:42:a1:b7:3d:
         a2:50:09:6b:e2:db:2c:3a:d3:24:db:59:39:72:d5:2e:cf:3d:
         38:44:91:c1:b3:95:05:19:b6:c3:27:fe:ed:02:02:91:cb:bd:
         d5:3f:f4:f4:83:9f:b5:91:b7:b4:0a:80:e4:8e:89:2f:a2:e5:
         b2:41:f9:fd:fd:42:74:4b:32:c6:e7:46:40:2f:d0:21:ff:24:
         91:2f:b0:1f:e9:f0:70:2d:f0:55:34:f9:f1:c7:54:3f:73:17:
         c8:a9:13:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org