Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.cer
File:                     CB79DFC1DF1822D301F97D5B20B19091DB3700ED.cer (raw, json)
Hash identifier:          jdqS0LHOnpmFmvRszcYnCSgdjKcuWmc1DLAsna64kWY=
Subject key identifier:   CB:79:DF:C1:DF:18:22:D3:01:F9:7D:5B:20:B1:90:91:DB:37:00:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1CD1BF430F52D2ED0C371E99199E585C47066B2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Jan 2023 15:27:04 +0000
Certificate not after:    Fri 19 Jan 2024 15:32:04 +0000
Subordinate resources:    AS: 263855
                          IP: 138.186.84.0/22
                          IP: 2804:26c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d1:bf:43:0f:52:d2:ed:0c:37:1e:99:19:9e:58:5c:47:06:6b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 20 15:27:04 2023 GMT
            Not After : Jan 19 15:32:04 2024 GMT
        Subject: CN=CB79DFC1DF1822D301F97D5B20B19091DB3700ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:25:9a:fe:d2:32:42:6d:94:b7:2b:58:4b:ed:
                    91:d6:cb:6a:02:8c:e2:5f:7d:a9:cf:fc:5f:9c:05:
                    ab:50:b7:93:29:f6:2a:ea:53:50:53:57:86:de:e5:
                    c2:f4:d1:ce:de:a5:2e:65:70:0f:27:4d:e3:f5:bf:
                    05:aa:f6:d2:d0:2e:e2:bf:00:09:18:14:d4:9c:b6:
                    56:18:8a:d9:5b:40:15:5f:a3:67:e4:7a:3c:70:01:
                    dd:52:e2:39:dd:dc:9f:51:51:c1:b3:37:53:5e:91:
                    3f:4b:a7:b8:f7:65:0d:95:e1:d1:5f:30:8b:ab:fc:
                    7e:bb:83:44:a5:74:da:8b:a3:4e:f8:0a:d1:42:b4:
                    5c:b7:8d:72:91:d2:5a:ab:03:22:0d:0f:51:c7:ef:
                    83:ab:f0:a0:2d:6f:5a:ca:4a:a8:75:be:df:da:6c:
                    3a:e0:28:f3:4b:fa:89:9b:cb:1c:ac:e3:95:89:37:
                    9f:5a:ad:a0:ed:92:34:ee:09:dc:72:b1:bd:29:d2:
                    d1:30:2d:36:e6:99:fc:d0:ac:e1:79:33:31:be:ef:
                    94:81:15:2b:6c:3d:75:42:56:a1:a2:c7:69:57:1a:
                    39:ff:e9:2e:59:cb:e8:54:46:2e:08:35:ad:c5:ba:
                    57:a4:3f:0d:22:f9:b0:9d:30:b8:f3:6c:74:c7:6c:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:79:DF:C1:DF:18:22:D3:01:F9:7D:5B:20:B1:90:91:DB:37:00:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.84.0/22
                IPv6:
                  2804:26c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263855

    Signature Algorithm: sha256WithRSAEncryption
         1b:6f:57:f6:04:0b:bc:87:f7:6d:ca:60:e6:d2:df:af:6e:c6:
         fa:8f:80:8e:43:2f:73:82:0f:6d:dd:82:c3:1b:ef:a2:a0:db:
         b0:49:b5:cc:28:a9:90:14:58:4c:53:54:c5:dd:23:5f:b8:d6:
         fa:a4:96:4d:5b:2e:c6:89:ed:d0:d5:4f:33:bd:80:82:31:24:
         53:2b:07:8b:6d:99:7b:36:6b:64:97:8d:40:fb:aa:86:3e:11:
         f4:a9:a0:c1:a0:bd:91:db:fb:67:c0:0b:35:dd:ac:37:df:c0:
         96:28:8b:40:eb:36:bc:51:58:48:4c:c1:15:45:20:b5:c5:02:
         bd:e0:9b:85:b7:10:f7:59:9a:05:ea:92:4e:cf:28:12:f0:b7:
         36:80:e7:e7:1f:0d:00:25:71:9c:09:66:cd:54:af:6e:a8:47:
         3f:83:8b:72:82:8a:91:c9:13:29:80:91:44:11:73:d2:4f:ae:
         26:07:9b:78:51:7b:6a:61:5e:80:2f:1e:58:65:e8:aa:ce:10:
         09:55:0d:22:20:28:fc:c7:19:f3:8c:d1:a0:55:2c:69:71:84:
         d9:f4:5a:83:39:6c:b4:06:81:1a:81:b4:8f:0a:e6:d5:71:c4:
         8a:e4:61:4d:13:82:b6:44:b5:45:78:14:55:a0:49:66:4b:7d:
         88:76:cd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org