Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B76B865FA27BE8AC2B689160DABDBA58A0AD75F1.cer
File:                     B76B865FA27BE8AC2B689160DABDBA58A0AD75F1.cer (raw, json)
Hash identifier:          +0ikmOW63uiDCSABYLMxROw6ze/uKKDWcpYQQYahbU8=
Subject key identifier:   B7:6B:86:5F:A2:7B:E8:AC:2B:68:91:60:DA:BD:BA:58:A0:AD:75:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4CE9BA4C674753F41F6AC11931B92CB729A86451
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/B76B865FA27BE8AC2B689160DABDBA58A0AD75F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 12:40:13 +0000
Certificate not after:    Tue 11 Feb 2025 12:45:13 +0000
Subordinate resources:    AS: 269153
                          IP: 45.180.236.0/22
                          IP: 2804:6038::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e9:ba:4c:67:47:53:f4:1f:6a:c1:19:31:b9:2c:b7:29:a8:64:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 12:40:13 2024 GMT
            Not After : Feb 11 12:45:13 2025 GMT
        Subject: CN=B76B865FA27BE8AC2B689160DABDBA58A0AD75F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:8c:02:8a:aa:92:bf:80:b0:82:97:a8:7e:
                    0f:ce:80:59:7b:cd:44:78:ae:27:57:af:05:d7:d1:
                    01:83:0c:16:e7:2e:2b:4d:a3:f8:c2:8b:04:00:88:
                    e9:91:62:c9:e9:30:bf:d3:3c:99:f9:81:b9:c8:ba:
                    76:9e:10:9f:66:4e:cd:e1:d6:0f:fc:64:c2:24:93:
                    79:6b:65:2f:29:84:08:c1:87:fb:61:b5:e9:d7:d6:
                    eb:18:b9:7e:56:99:14:85:f9:fa:2e:ed:ea:2b:9f:
                    dd:53:f9:84:84:c3:c8:07:78:b3:88:68:2c:dd:af:
                    ab:62:5d:8b:bc:76:33:bb:24:36:97:d0:11:45:52:
                    a8:8d:78:f0:88:6f:f7:df:47:cc:41:98:72:27:76:
                    b0:ec:ba:b9:bf:34:20:25:ca:a6:fb:37:7e:b4:0a:
                    00:15:07:ec:73:0d:7c:e0:c9:d3:0a:62:a4:15:fd:
                    4a:b5:b7:dd:c7:9e:03:a4:2d:4b:44:cb:5d:65:35:
                    38:26:01:5b:0f:e1:4a:29:ff:f3:d2:11:43:59:11:
                    cf:9f:78:aa:4d:07:eb:82:9a:b3:ce:c2:9d:16:87:
                    72:eb:ce:f1:92:70:7a:4c:39:8d:d8:70:f7:58:ab:
                    a2:21:e5:ea:3a:b0:5d:06:b5:12:72:a9:0d:4d:a3:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:6B:86:5F:A2:7B:E8:AC:2B:68:91:60:DA:BD:BA:58:A0:AD:75:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/B76B865FA27BE8AC2B689160DABDBA58A0AD75F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.236.0/22
                IPv6:
                  2804:6038::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269153

    Signature Algorithm: sha256WithRSAEncryption
         13:17:9e:c6:1f:eb:ec:37:f5:0e:f5:5b:4d:2c:13:e2:fa:bd:
         1d:e1:13:e1:a8:b0:45:c6:8d:7c:1f:64:fd:2b:84:63:3b:a4:
         cd:06:63:86:a0:56:51:3b:a9:60:81:c1:af:f6:77:35:5c:e7:
         21:7c:10:b5:fd:54:02:36:4c:de:d4:9a:a7:9f:9b:ca:03:6b:
         ef:a7:d2:80:29:7a:45:11:24:75:d0:32:ce:54:51:1a:99:9e:
         64:49:23:88:b1:bf:29:d3:cf:f3:8c:de:a8:94:3c:b7:8d:23:
         f4:a7:dd:bd:dd:62:f6:14:ae:9f:1a:5e:4e:85:82:26:91:73:
         bd:a7:8e:55:88:c9:50:f4:e3:f1:8c:66:c0:69:26:17:84:fc:
         e5:af:4d:59:d4:ec:ee:eb:1b:f5:22:e9:7d:68:15:3e:b1:0d:
         61:fd:83:3f:be:36:a6:ea:31:67:c0:02:da:45:68:eb:c8:c4:
         72:27:c3:64:72:27:17:72:49:dc:41:af:e4:32:00:e0:25:d2:
         d8:19:c4:65:d0:41:5b:22:a3:00:ee:8b:9b:26:7f:04:06:89:
         4d:1f:e6:fe:51:5c:5d:ad:76:a3:37:7d:65:1d:5a:76:c5:4d:
         a8:c9:3b:f4:3c:24:8a:2c:35:0e:eb:19:33:55:a8:13:10:9a:
         52:6d:ad:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org