Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B7FC5A3358B8D8DAF5A14659C06420F84C493A0B.cer
File:                     B7FC5A3358B8D8DAF5A14659C06420F84C493A0B.cer (raw, json)
Hash identifier:          dbvGD2pmGQwgcjXqkQb/L5FsvQ26/RCPNcc8Auujmyg=
Subject key identifier:   B7:FC:5A:33:58:B8:D8:DA:F5:A1:46:59:C0:64:20:F8:4C:49:3A:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0856645FF7576D4DB64F9588A482AEEEA7135DCA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/B7FC5A3358B8D8DAF5A14659C06420F84C493A0B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Jan 2023 19:11:50 +0000
Certificate not after:    Wed 03 Jan 2024 19:16:50 +0000
Subordinate resources:    AS: 263320
                          IP: 191.7.144.0/20
                          IP: 2804:143c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:56:64:5f:f7:57:6d:4d:b6:4f:95:88:a4:82:ae:ee:a7:13:5d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  4 19:11:50 2023 GMT
            Not After : Jan  3 19:16:50 2024 GMT
        Subject: CN=B7FC5A3358B8D8DAF5A14659C06420F84C493A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:cf:c6:da:a6:03:fb:c3:ff:10:ca:25:75:
                    e9:cc:5d:a1:4d:8c:34:60:8d:3f:59:e9:40:72:29:
                    6d:42:3d:d0:5d:b3:9b:bc:11:38:db:41:7d:90:6d:
                    4f:d9:56:e2:f8:3f:34:16:05:9f:ab:7f:c9:32:da:
                    42:48:8f:7b:69:06:9f:26:e4:21:ce:71:7f:3e:f5:
                    70:16:9d:d6:e2:cf:5b:35:dd:6d:dd:dd:9c:dd:f4:
                    60:e3:04:fc:31:10:6e:75:db:b5:cf:bc:f4:60:05:
                    03:ec:2c:d9:6f:64:4b:dc:bb:02:54:01:26:ea:51:
                    e4:5b:33:a2:dd:f5:22:3e:cf:e4:67:06:8d:e4:e5:
                    f8:32:41:64:86:7f:20:0b:3a:73:f1:20:13:ec:02:
                    9a:24:5d:7a:7a:7a:9b:e7:c4:ea:83:0b:54:4d:98:
                    36:2e:4e:38:dc:63:fa:ee:43:55:70:39:7b:c1:96:
                    2a:0c:76:73:0e:8e:cc:84:ae:1f:ab:0b:e8:34:39:
                    f6:b8:68:23:91:c4:66:2d:0f:4c:4f:36:55:3a:02:
                    92:89:4f:6e:c8:53:ef:a4:67:6a:45:19:00:78:07:
                    7d:5c:21:20:43:0c:c7:d1:f2:49:14:e4:b4:47:de:
                    4e:57:4e:55:8b:e5:06:52:6a:b8:7e:da:a6:21:69:
                    db:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:FC:5A:33:58:B8:D8:DA:F5:A1:46:59:C0:64:20:F8:4C:49:3A:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/B7FC5A3358B8D8DAF5A14659C06420F84C493A0B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.144.0/20
                IPv6:
                  2804:143c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263320

    Signature Algorithm: sha256WithRSAEncryption
         99:73:90:b0:10:ff:7b:38:ed:64:06:4b:d2:f1:a1:bf:b3:5f:
         59:14:cb:bd:80:3a:54:3e:b1:4b:ad:97:cc:8a:10:df:43:0a:
         d9:0e:a9:d3:73:0e:39:a3:fb:cb:54:5d:57:d0:50:11:4a:9b:
         ec:b0:91:25:98:88:d5:f6:18:a4:7c:26:71:44:49:3b:63:1f:
         4d:42:1f:07:ad:7e:be:bf:d2:44:f2:d9:80:1b:cf:c6:51:80:
         b6:85:c1:36:fa:40:a0:0e:3b:a5:18:d7:f3:01:02:e0:3f:2d:
         e7:eb:9b:6b:57:f0:41:c7:81:b2:29:63:6c:96:0c:83:c9:a9:
         33:ba:98:e3:45:0d:80:c1:46:97:d7:8c:35:24:c8:5a:82:9a:
         8d:9f:78:a1:c9:0d:9d:fe:b3:2d:24:07:d7:9f:16:9c:ba:c3:
         e9:ce:c4:6b:27:bb:d2:82:20:b7:3e:0e:73:d0:f3:08:6a:02:
         72:b8:7b:84:ea:26:47:2b:13:9d:0f:cb:70:77:77:31:13:12:
         da:37:2a:84:58:42:30:49:72:52:49:0d:5c:a2:c3:84:05:94:
         fc:ef:fd:51:48:0e:cf:12:99:d5:d2:79:d1:48:1c:79:f2:8b:
         c3:d6:42:43:5d:d9:71:97:da:a8:90:f8:67:41:f6:7f:da:3a:
         40:c8:14:d3
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUCFZkX/dXbU22T5WIpIKu7qcTXcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMDQxOTExNTBaFw0yNDAxMDMxOTE2NTBaMDMxMTAvBgNV
BAMTKEI3RkM1QTMzNThCOEQ4REFGNUExNDY1OUMwNjQyMEY4NEM0OTNBMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxaM/G2qYD+8P/EMoldenMXaFN
jDRgjT9Z6UByKW1CPdBds5u8ETjbQX2QbU/ZVuL4PzQWBZ+rf8ky2kJIj3tpBp8m
5CHOcX8+9XAWndbiz1s13W3d3Zzd9GDjBPwxEG5127XPvPRgBQPsLNlvZEvcuwJU
ASbqUeRbM6Ld9SI+z+RnBo3k5fgyQWSGfyALOnPxIBPsApokXXp6epvnxOqDC1RN
mDYuTjjcY/ruQ1VwOXvBlioMdnMOjsyErh+rC+g0Ofa4aCORxGYtD0xPNlU6ApKJ
T27IU++kZ2pFGQB4B31cISBDDMfR8kkU5LRH3k5XTlWL5QZSarh+2qYhadtpAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS3/FozWLjY2vWh
RlnAZCD4TEk6CzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83QjJKTGRERXNDTWlhdzN6a1ZrWUFOWEw3Q0R4YmFOempX
R25iNjJqOEtrNy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83QjJKTGRERXNDTWlhdzN6a1ZrWUFOWEw3Q0R4YmFOempX
R25iNjJqOEtrNy8wL0I3RkM1QTMzNThCOEQ4REFGNUExNDY1OUMwNjQyMEY4NEM0
OTNBMEIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBL8HkDANBAIAAjAHAwUA
KAQUPDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBJgwDQYJKoZIhvcNAQELBQAD
ggEBAJlzkLAQ/3s47WQGS9Lxob+zX1kUy72AOlQ+sUutl8yKEN9DCtkOqdNzDjmj
+8tUXVfQUBFKm+ywkSWYiNX2GKR8JnFESTtjH01CHwetfr6/0kTy2YAbz8ZRgLaF
wTb6QKAOO6UY1/MBAuA/Lefrm2tX8EHHgbIpY2yWDIPJqTO6mONFDYDBRpfXjDUk
yFqCmo2feKHJDZ3+sy0kB9efFpy6w+nOxGsnu9KCILc+DnPQ8whqAnK4e4TqJkcr
E50Py3B3dzETEto3KoRYQjBJclJJDVyiw4QFlPzv/VFIDs8SmdXSedFIHHnyi8PW
QkNd2XGX2qiQ+GdB9n/aOkDIFNM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org