Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/978C058CACCF9405ABB1475ABC54573C186268F7.cer
File:                     978C058CACCF9405ABB1475ABC54573C186268F7.cer (raw, json)
Hash identifier:          P3b+5qdBEo75i7iuMzW+4YYI0xmMvT9rVLh+nj04QeE=
Subject key identifier:   97:8C:05:8C:AC:CF:94:05:AB:B1:47:5A:BC:54:57:3C:18:62:68:F7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23BA6D979ECD2751BFCD38E77FB3C4259729E556
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/978C058CACCF9405ABB1475ABC54573C186268F7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Mar 2023 17:09:24 +0000
Certificate not after:    Sat 02 Mar 2024 17:14:24 +0000
Subordinate resources:    AS: 270757
                          IP: 200.39.132.0/22
                          IP: 2804:70f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ba:6d:97:9e:cd:27:51:bf:cd:38:e7:7f:b3:c4:25:97:29:e5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 17:09:24 2023 GMT
            Not After : Mar  2 17:14:24 2024 GMT
        Subject: CN=978C058CACCF9405ABB1475ABC54573C186268F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:85:64:37:8b:09:94:b5:97:da:47:d4:00:
                    05:f1:7c:d4:8f:67:02:e7:d7:15:be:3b:d7:11:72:
                    94:91:f1:b4:c3:ad:81:89:be:7d:4e:f1:9e:21:c7:
                    0e:80:ec:8f:c7:2b:c9:86:06:fd:80:dd:1b:bf:5e:
                    52:79:13:47:ba:51:02:59:f5:37:4a:56:3d:a9:cf:
                    da:d8:ea:24:c7:09:19:39:8c:34:cf:c2:8d:f4:18:
                    7e:84:1a:df:a1:b5:03:00:a9:ea:23:36:e6:3d:3e:
                    83:e0:b0:7a:c4:b7:11:fa:44:c3:0c:bf:a3:63:54:
                    cc:7b:36:c9:11:92:cc:39:9e:d0:ec:97:fe:c9:48:
                    e9:16:51:a6:e3:43:c6:38:b2:ec:38:98:9a:64:89:
                    cc:65:69:24:99:7d:6c:70:8a:98:8f:63:9b:fe:c2:
                    ee:d0:ac:3b:29:4b:2c:17:20:5f:f8:fa:86:51:20:
                    52:02:4d:b9:48:ab:af:c2:4b:3d:03:92:b4:89:19:
                    61:b2:9f:0e:17:d1:5b:52:a4:c0:f9:3d:6d:d9:ba:
                    0c:da:0c:3e:79:4c:37:53:3c:4f:ae:61:b9:2f:08:
                    19:4c:d6:36:76:27:fb:9f:51:d8:a1:35:22:f7:5e:
                    36:fe:22:2f:12:4c:a3:c8:ce:51:24:29:a5:ba:76:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:8C:05:8C:AC:CF:94:05:AB:B1:47:5A:BC:54:57:3C:18:62:68:F7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/978C058CACCF9405ABB1475ABC54573C186268F7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.132.0/22
                IPv6:
                  2804:70f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270757

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:28:b2:64:e9:4c:7f:12:95:12:e1:96:87:46:07:cc:64:
         53:a4:91:78:22:97:b3:47:3a:f8:8b:fd:b0:48:be:fc:aa:fa:
         0b:7a:5c:61:ba:d9:db:ae:3f:2a:e4:2b:13:17:93:0b:97:c1:
         e7:3b:3d:fa:5a:cc:e0:3e:7a:c3:01:bb:62:81:a0:ea:e0:b9:
         0b:d0:60:16:30:fa:91:d6:95:e8:db:e7:d8:80:fa:05:32:8b:
         84:d0:f1:7a:a6:16:02:44:88:e5:49:77:3b:62:e0:4b:5c:4b:
         e1:83:b0:d4:06:e0:41:23:dc:4c:0b:99:a9:4e:6d:c0:5f:f9:
         83:15:4e:b1:ab:07:f8:86:dc:ff:b0:fe:8b:5f:92:f5:38:8c:
         9b:c4:82:b3:2d:a0:fc:b6:7d:af:ea:3a:79:ae:8e:4e:ce:7e:
         05:a5:54:4b:59:8f:45:d0:4a:23:9d:be:24:d2:de:23:d8:b0:
         9a:e4:1a:fd:5d:3e:50:8d:60:c5:6c:39:b0:bc:e4:9b:73:2f:
         14:aa:68:af:46:41:38:48:4a:12:8c:56:ca:fb:a8:5b:ff:68:
         7e:6e:c0:79:a7:0e:65:16:e0:f9:fb:6c:80:78:6e:f1:46:40:
         c7:7f:aa:69:f1:ca:72:1d:4e:8a:5b:7a:ae:6e:fc:b6:9c:8d:
         7c:ea:e8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org