Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8.cer
File:                     C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8.cer (raw, json)
Hash identifier:          w+q0VHnZRzCAnCph4oqFF3mP9nNpopDT45jEsEx6hbw=
Subject key identifier:   C7:EF:6E:14:93:EA:A9:C2:D3:64:7B:EE:A8:2D:FF:84:70:2D:21:C8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       742EA30F4CC5F2B4B9FCEAE60755F01E5FD0DFC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Dec 2023 17:16:29 +0000
Certificate not after:    Mon 09 Dec 2024 17:21:29 +0000
Subordinate resources:    AS: 268413
                          IP: 45.160.180.0/22
                          IP: 2804:50d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2e:a3:0f:4c:c5:f2:b4:b9:fc:ea:e6:07:55:f0:1e:5f:d0:df:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 11 17:16:29 2023 GMT
            Not After : Dec  9 17:21:29 2024 GMT
        Subject: CN=C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:da:2f:2a:67:b6:92:51:65:ad:18:69:7f:
                    81:ef:06:86:75:fb:27:b9:0a:8e:4d:e1:15:05:eb:
                    35:7b:ef:79:f1:fe:95:a8:a7:e3:da:52:2e:51:3a:
                    e8:64:18:73:46:db:1c:74:b9:df:5f:b4:1e:6e:57:
                    da:8f:9c:b7:d7:a8:78:92:af:2d:71:70:9c:e4:58:
                    a5:58:b2:2d:1b:57:14:4a:d8:88:f5:b3:46:96:45:
                    36:38:06:e7:20:53:53:bf:f3:63:ca:6a:7e:14:84:
                    3a:6e:41:8f:f2:da:db:b5:66:52:3c:86:77:b3:21:
                    65:06:51:3b:e3:7f:c8:57:78:52:a3:4d:ff:e2:cb:
                    35:3d:ac:ef:84:3c:df:d7:07:3a:1f:b8:94:90:f3:
                    47:c9:60:60:48:43:25:17:b4:7a:35:a4:3c:78:f0:
                    63:b6:59:91:de:2c:ed:50:bd:44:c6:a6:a2:30:22:
                    81:f4:45:6d:ee:21:66:8e:be:bd:f8:6d:cc:0d:d5:
                    f1:d9:ca:43:1b:5e:89:c0:cc:21:f5:4c:21:89:3a:
                    57:b1:9b:6c:40:3d:01:6a:df:01:57:ae:af:94:83:
                    6f:03:18:d9:fb:79:eb:cc:b9:10:05:f4:b9:21:4e:
                    2a:a9:62:45:97:b9:f1:cb:50:58:0f:d7:d4:cb:fd:
                    87:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:EF:6E:14:93:EA:A9:C2:D3:64:7B:EE:A8:2D:FF:84:70:2D:21:C8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.180.0/22
                IPv6:
                  2804:50d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268413

    Signature Algorithm: sha256WithRSAEncryption
         29:fd:9d:6b:42:15:20:f2:6b:e7:ed:a8:98:20:cf:06:52:46:
         59:3d:27:50:df:2f:b9:cb:cf:f2:f8:65:f6:f8:34:75:7d:d6:
         7c:ae:ad:e2:e9:98:af:15:6f:c9:13:bd:f0:f5:2e:45:a0:ba:
         60:1f:33:3b:6c:77:f9:2e:6d:b4:cd:0f:53:64:1e:3a:d7:10:
         75:39:bb:b4:3d:7f:1d:09:f2:8d:7b:6d:41:4a:b0:75:85:6c:
         53:d9:cb:2c:10:94:56:c1:ec:d9:06:c8:83:46:8f:7f:d3:80:
         70:a1:c7:6d:7c:ae:b4:82:ce:34:ad:c5:b2:57:f6:15:04:50:
         7a:1b:59:c7:a8:78:33:fd:65:e2:2b:59:e0:a2:d0:30:a3:a2:
         80:63:9e:77:58:6d:82:c1:f6:a7:fc:b9:35:34:b2:cb:6a:eb:
         16:19:7f:bf:a5:ed:e3:d8:66:18:d7:a4:37:07:53:5b:a6:8f:
         b8:dc:fc:6f:f6:33:5f:b1:3e:df:09:0d:23:6f:06:03:61:5f:
         7d:87:76:48:da:d8:47:39:d9:e1:1b:78:4f:2d:cc:fd:b7:ba:
         aa:82:95:2b:8a:df:67:f2:20:39:f4:2e:3d:3b:be:16:13:b9:
         01:19:bb:98:38:9a:21:ad:d1:63:fe:5e:bd:7a:9e:64:64:25:
         b2:be:bd:13
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUdC6jD0zF8rS5/OrmB1XwHl/Q38gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMTExNzE2MjlaFw0yNDEyMDkxNzIxMjlaMDMxMTAvBgNV
BAMTKEM3RUY2RTE0OTNFQUE5QzJEMzY0N0JFRUE4MkRGRjg0NzAyRDIxQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtntovKme2klFlrRhpf4HvBoZ1
+ye5Co5N4RUF6zV773nx/pWop+PaUi5ROuhkGHNG2xx0ud9ftB5uV9qPnLfXqHiS
ry1xcJzkWKVYsi0bVxRK2Ij1s0aWRTY4BucgU1O/82PKan4UhDpuQY/y2tu1ZlI8
hnezIWUGUTvjf8hXeFKjTf/iyzU9rO+EPN/XBzofuJSQ80fJYGBIQyUXtHo1pDx4
8GO2WZHeLO1QvUTGpqIwIoH0RW3uIWaOvr34bcwN1fHZykMbXonAzCH1TCGJOlex
m2xAPQFq3wFXrq+Ug28DGNn7eevMuRAF9LkhTiqpYkWXufHLUFgP19TL/Yf/AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTH724Uk+qpwtNk
e+6oLf+EcC0hyDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ENVY1ZFdBdkJoV0xZek5jeVFYZ0VCMTFmSml0R0Nhdzl4
S3J5TVZYNUw4MS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRDVWNWRXQXZCaFdMWXpOY3lRWGdFQjExZkppdEdDYXc5
eEtyeU1WWDVMODEvMC9DN0VGNkUxNDkzRUFBOUMyRDM2NDdCRUVBODJERkY4NDcw
MkQyMUM4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItoLQwDQQCAAIwBwMF
ACgEUNQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBh9MA0GCSqGSIb3DQEBCwUA
A4IBAQAp/Z1rQhUg8mvn7aiYIM8GUkZZPSdQ3y+5y8/y+GX2+DR1fdZ8rq3i6Ziv
FW/JE73w9S5FoLpgHzM7bHf5Lm20zQ9TZB461xB1Obu0PX8dCfKNe21BSrB1hWxT
2cssEJRWwezZBsiDRo9/04BwocdtfK60gs40rcWyV/YVBFB6G1nHqHgz/WXiK1ng
otAwo6KAY553WG2Cwfan/Lk1NLLLausWGX+/pe3j2GYY16Q3B1Nbpo+43Pxv9jNf
sT7fCQ0jbwYDYV99h3ZI2thHOdnhG3hPLcz9t7qqgpUrit9n8iA59C49O74WE7kB
GbuYOJohrdFj/l69ep5kZCWyvr0T
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org