Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/879BC76A25D9B0F626CCBEB3A36E638FD8A69471.cer
File:                     879BC76A25D9B0F626CCBEB3A36E638FD8A69471.cer (raw, json)
Hash identifier:          vJWfq4wqcFUS5yrTYSKEQtNpRHJegtP+fkl6p2r3fkU=
Subject key identifier:   87:9B:C7:6A:25:D9:B0:F6:26:CC:BE:B3:A3:6E:63:8F:D8:A6:94:71
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E96CA30A03929B3B598EFB56FB4CC9B7470FFC7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/879BC76A25D9B0F626CCBEB3A36E638FD8A69471.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Jun 2023 19:02:59 +0000
Certificate not after:    Fri 21 Jun 2024 19:07:59 +0000
Subordinate resources:    AS: 264414
                          IP: 131.221.60.0/22
                          IP: 2804:1e34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:96:ca:30:a0:39:29:b3:b5:98:ef:b5:6f:b4:cc:9b:74:70:ff:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 23 19:02:59 2023 GMT
            Not After : Jun 21 19:07:59 2024 GMT
        Subject: CN=879BC76A25D9B0F626CCBEB3A36E638FD8A69471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:76:35:47:30:87:46:39:c6:98:9a:93:49:cf:
                    77:96:00:8b:06:f1:5a:3b:fe:bf:6a:7f:33:d9:c4:
                    83:3a:bd:85:f7:ba:a8:ad:b5:f0:74:56:a7:22:2d:
                    05:8a:4d:97:a8:27:8e:91:40:8c:14:1b:78:a0:83:
                    96:92:23:9c:44:89:8b:fc:4c:0c:a2:5d:e2:38:0b:
                    cc:8d:34:ca:56:b0:86:fb:f8:09:e3:bd:bd:b1:e9:
                    8d:6b:92:8f:1b:ea:58:2d:11:bd:57:42:5f:31:3a:
                    98:11:48:22:23:85:97:8e:7e:0d:a7:f7:4a:3d:07:
                    76:1c:b4:37:0d:43:e5:5b:3e:53:17:e0:7b:88:9f:
                    2d:ce:dd:4b:f4:00:6b:92:8f:ab:da:76:b1:32:bb:
                    9d:8b:ba:81:c4:24:03:41:a0:de:91:1a:e4:6f:0f:
                    2c:2e:6d:2b:4f:f1:22:78:96:8d:69:f3:e9:24:4c:
                    e2:87:1f:9a:8d:04:95:da:ca:7b:59:1c:43:5a:16:
                    af:44:a5:cd:cd:06:0c:88:81:49:b5:06:8c:0e:fd:
                    5b:cb:de:97:3f:ac:f4:f1:06:fb:3f:e1:87:14:da:
                    97:44:a3:07:9c:4c:83:fe:9e:bf:88:be:af:eb:5b:
                    4d:87:fd:31:b4:90:a1:e3:37:da:65:f6:42:69:4f:
                    b4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:9B:C7:6A:25:D9:B0:F6:26:CC:BE:B3:A3:6E:63:8F:D8:A6:94:71
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/879BC76A25D9B0F626CCBEB3A36E638FD8A69471.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.60.0/22
                IPv6:
                  2804:1e34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264414

    Signature Algorithm: sha256WithRSAEncryption
         8d:0b:3a:a7:4e:2a:c4:fe:33:2d:56:22:d8:a6:50:9b:a8:7f:
         de:11:db:3d:fe:3a:a2:a6:00:6e:2b:52:49:48:78:35:73:0a:
         ef:ff:b4:e1:63:74:20:c6:01:d1:c0:ee:64:1d:25:8b:63:ff:
         a8:b9:4d:6b:d7:7a:bd:56:bb:14:60:e8:aa:a3:69:f2:b5:20:
         7a:cc:ed:e2:79:bb:be:1d:dc:ee:59:81:81:ba:d6:67:57:83:
         d7:f2:fe:bb:4b:e8:7f:bb:e7:26:d8:7e:70:2b:ef:cf:f3:3e:
         3b:67:ee:e4:c8:71:aa:6b:4b:d4:73:5a:e1:23:a4:2f:6a:bd:
         8e:6d:8c:fc:35:ea:ae:7c:67:b0:28:cc:4f:87:c7:bc:5a:d4:
         07:18:4b:02:3b:b8:11:ef:89:c2:49:06:4c:0f:65:d6:d5:1e:
         d3:62:fa:27:02:9b:a4:21:8a:06:48:31:cb:03:06:01:18:60:
         84:b3:3e:05:96:45:53:4e:2c:14:d9:d0:f5:de:74:2b:5c:0a:
         da:f7:8e:c1:38:7d:9a:80:6a:b6:2c:03:8e:de:97:b6:06:2b:
         85:d8:ae:83:73:76:ae:cc:c0:37:f5:ed:37:75:f7:aa:2c:e5:
         10:28:97:af:3d:64:2d:27:f9:f3:39:a8:3d:48:09:ec:58:4d:
         96:f4:0b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:40 2024 by rpki-client on console-ams.rpki-client.org