Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.cer
File:                     7FE0F22C7FC909A759F205D5F392B7F33D0E650B.cer (raw, json)
Hash identifier:          YMGiAu9PSygsszmbViUGKDKbQaF+NDIN93VYFbpX0zE=
Subject key identifier:   7F:E0:F2:2C:7F:C9:09:A7:59:F2:05:D5:F3:92:B7:F3:3D:0E:65:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       224482875348A909368BA397B059120B2B7E56B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Dec 2023 22:25:36 +0000
Certificate not after:    Mon 02 Dec 2024 22:30:36 +0000
Subordinate resources:    AS: 264163
                          IP: 138.97.112.0/22
                          IP: 2804:2374::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:44:82:87:53:48:a9:09:36:8b:a3:97:b0:59:12:0b:2b:7e:56:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  4 22:25:36 2023 GMT
            Not After : Dec  2 22:30:36 2024 GMT
        Subject: CN=7FE0F22C7FC909A759F205D5F392B7F33D0E650B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:87:b7:86:33:ac:bd:00:4c:75:0c:4d:2c:
                    37:cc:57:6c:91:5e:8b:83:a0:01:fb:5d:77:23:44:
                    7f:a7:34:ab:72:36:97:81:ee:f5:55:19:af:0e:77:
                    cd:55:2c:46:46:59:d6:52:c1:63:63:42:ff:a2:d1:
                    0b:a3:4f:66:c1:17:fb:ab:31:e4:18:44:41:19:87:
                    c5:d2:a5:79:cf:0a:ae:e4:2c:b0:ab:0f:1f:00:51:
                    12:f4:7e:db:e3:f1:ae:a8:35:d1:a6:27:1b:b6:84:
                    aa:02:eb:b9:f7:08:dc:8e:ee:da:c6:e2:57:7c:6f:
                    7b:9c:ab:fc:57:0b:69:58:05:25:7c:a9:40:28:15:
                    8b:64:1d:d0:c6:99:5c:46:ed:6f:36:d2:9f:fc:5d:
                    6f:8e:76:8e:1b:05:53:e7:39:fd:a3:31:13:96:68:
                    27:cc:0b:4c:07:e7:99:9f:ec:49:ba:ad:d2:a4:7e:
                    76:fd:ce:7f:75:88:f3:61:30:b3:d5:ed:07:b3:2c:
                    91:fd:ad:ee:60:13:9a:44:15:39:22:6b:46:64:55:
                    99:16:64:90:06:fd:f5:33:84:81:a8:13:19:80:3c:
                    d0:eb:38:10:61:b8:70:9e:0c:4f:ff:13:b7:64:eb:
                    c1:28:98:d8:f0:fc:50:36:2b:99:60:21:38:e7:9e:
                    57:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:E0:F2:2C:7F:C9:09:A7:59:F2:05:D5:F3:92:B7:F3:3D:0E:65:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.112.0/22
                IPv6:
                  2804:2374::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264163

    Signature Algorithm: sha256WithRSAEncryption
         1e:1e:79:3a:3c:ae:a2:52:9b:2b:c7:83:1a:1f:50:e3:fe:ac:
         df:50:6f:be:3d:f5:88:68:b3:fd:d2:c7:51:64:bd:02:20:87:
         af:fb:bb:7f:c8:f2:a7:25:95:b7:02:b2:9e:73:1e:fd:16:0f:
         a2:64:cb:11:3e:45:45:d6:c1:c6:cd:73:28:91:ab:7e:15:56:
         40:18:2e:ca:a3:dc:d2:88:c0:21:b7:94:d9:41:cb:81:3c:88:
         df:ef:64:c5:bb:06:72:3b:b0:79:ea:ea:f9:ed:fb:91:81:84:
         85:5b:dc:5e:3c:a6:e5:6e:24:2e:b6:54:15:14:d4:e8:df:64:
         08:d9:88:1d:c0:72:fa:d4:60:8b:9d:40:19:72:4a:42:39:4d:
         c0:6b:47:0a:11:af:d1:b7:e2:40:40:45:58:20:99:d4:23:06:
         2e:15:e7:d8:2d:4d:b0:6f:91:49:24:dd:e3:06:6a:44:23:34:
         96:44:08:39:3f:64:bd:99:73:45:cb:91:36:5f:73:de:fe:ed:
         9c:e0:dc:2a:19:92:32:7d:b8:cc:eb:46:b6:ab:e5:e6:49:06:
         4d:46:42:41:4e:1c:e8:74:51:28:17:cc:af:59:a2:b1:57:61:
         d1:0f:3e:4e:b8:20:4a:8f:27:6e:a2:dd:be:21:ba:c6:7e:34:
         f0:36:2b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org