Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A413B78BE6FCE4E566F3F1295EE1118E98656302.cer
File:                     A413B78BE6FCE4E566F3F1295EE1118E98656302.cer (raw, json)
Hash identifier:          LO/X0Hr8sop4FNWCdYqJ8OsyXxgCIZOaD2nNDI67crU=
Subject key identifier:   A4:13:B7:8B:E6:FC:E4:E5:66:F3:F1:29:5E:E1:11:8E:98:65:63:02
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C7C55DBD3242F710EBA3CDC2C29571E15076041
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/0/A413B78BE6FCE4E566F3F1295EE1118E98656302.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 20:14:54 +0000
Certificate not after:    Mon 24 Jun 2024 20:19:54 +0000
Subordinate resources:    AS: 263443
                          IP: 177.91.132.0/22
                          IP: 2804:11d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7c:55:db:d3:24:2f:71:0e:ba:3c:dc:2c:29:57:1e:15:07:60:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 26 20:14:54 2023 GMT
            Not After : Jun 24 20:19:54 2024 GMT
        Subject: CN=A413B78BE6FCE4E566F3F1295EE1118E98656302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5d:c3:31:bd:47:46:43:3a:15:a2:dc:51:c8:
                    9a:79:f8:bb:7d:ae:e6:97:69:e7:8a:8c:c0:2d:f7:
                    46:65:ab:03:63:d4:7b:80:f7:0a:3f:ea:d9:2a:06:
                    43:9f:a7:d6:5a:2a:3b:32:c1:9e:36:15:21:ba:a0:
                    e2:e4:45:95:df:e9:24:b4:68:57:9b:50:c0:7e:85:
                    c7:5e:c4:24:dd:a5:c8:61:05:64:46:66:c8:d5:c7:
                    c1:b2:3b:8b:98:a8:e0:26:76:34:b5:a3:32:59:f7:
                    2f:50:78:d5:e6:f3:34:f0:06:20:fb:1c:63:60:5d:
                    f4:43:4f:fa:00:17:d6:14:0c:50:b1:06:37:06:a2:
                    89:22:e8:13:f3:20:e9:c5:8a:76:45:7c:09:8f:a6:
                    d7:91:59:57:00:37:c8:56:d7:3d:17:e7:ff:da:bd:
                    ae:89:de:51:9f:c2:a3:00:55:ca:4c:2d:1d:51:b5:
                    73:03:66:e7:ae:aa:1c:e1:4d:05:58:d9:8d:5e:49:
                    a9:eb:c1:ac:08:aa:04:d1:d3:f7:b7:1f:62:85:a1:
                    f1:e8:85:09:a9:94:e7:9a:b4:b9:c1:45:13:83:a0:
                    a0:0f:03:1e:15:0a:01:3a:49:da:6a:b6:81:63:61:
                    9e:27:a8:4c:21:3c:a9:fb:ab:96:99:0e:38:6d:92:
                    10:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:13:B7:8B:E6:FC:E4:E5:66:F3:F1:29:5E:E1:11:8E:98:65:63:02
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/0/A413B78BE6FCE4E566F3F1295EE1118E98656302.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.132.0/22
                IPv6:
                  2804:11d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263443

    Signature Algorithm: sha256WithRSAEncryption
         74:f3:68:d7:38:24:8b:92:dd:97:cc:29:82:5a:ec:54:20:f4:
         51:79:a3:ab:60:8a:91:3e:8d:66:89:77:de:61:73:e4:79:d7:
         7c:97:67:84:99:7e:95:ea:1a:8f:92:6c:b4:b9:c3:61:9e:4d:
         c5:1f:60:b0:9c:a7:01:4b:f8:9d:04:7b:1d:1c:b2:21:94:c0:
         11:37:be:e5:76:63:8b:f9:a0:67:e3:cc:4e:0e:a2:9e:66:1c:
         91:5b:6c:aa:20:41:e3:fd:47:cf:dc:36:5d:18:9e:9e:6b:7f:
         ff:3e:11:3e:a3:90:d0:59:ec:dd:ca:66:1d:45:07:e2:f4:40:
         08:cb:ad:28:aa:28:3d:04:4c:0f:49:b8:5e:06:2a:6f:31:03:
         3f:e0:a3:1e:da:ef:33:76:03:92:31:e0:b7:de:9c:b2:23:d7:
         78:82:f1:ad:f0:fc:00:41:c8:4f:6d:35:d9:93:57:f8:e3:52:
         9d:24:d8:d2:ae:3b:d2:67:6a:0a:90:62:5e:71:6e:4a:0a:ed:
         57:74:09:4e:c8:b3:d8:07:d1:44:02:97:94:4e:2d:b3:4e:c0:
         21:76:2c:bc:c3:45:c7:b7:42:01:45:0b:70:ad:4f:c1:18:b9:
         8b:04:d7:33:85:0c:77:48:aa:34:c1:f1:32:bb:35:c3:69:a6:
         df:3b:a7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org