Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F7DA6BE675346B1980829FEEFA622D0E1A8723B7.cer
File:                     F7DA6BE675346B1980829FEEFA622D0E1A8723B7.cer (raw, json)
Hash identifier:          7U3bMK0nnWeaH/LF04g/bndoVvrQTGbBaVZ+jzkCU+0=
Subject key identifier:   F7:DA:6B:E6:75:34:6B:19:80:82:9F:EE:FA:62:2D:0E:1A:87:23:B7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E662D97F3B428982CC97C855563855F7CBBCAB0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/F7DA6BE675346B1980829FEEFA622D0E1A8723B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Jun 2023 15:23:58 +0000
Certificate not after:    Fri 21 Jun 2024 15:28:58 +0000
Subordinate resources:    AS: 61584
                          IP: 138.94.128.0/22
                          IP: 170.254.168.0/22
                          IP: 2804:23b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:66:2d:97:f3:b4:28:98:2c:c9:7c:85:55:63:85:5f:7c:bb:ca:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 23 15:23:58 2023 GMT
            Not After : Jun 21 15:28:58 2024 GMT
        Subject: CN=F7DA6BE675346B1980829FEEFA622D0E1A8723B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:3f:30:dc:11:c6:f8:da:0d:77:bd:f0:ce:
                    61:6b:f4:68:52:1d:81:80:27:80:4a:63:7c:47:4c:
                    7f:63:57:30:c8:5a:71:f2:f3:bc:02:51:8a:e3:0f:
                    07:ce:79:c1:00:2a:95:38:45:27:cd:59:27:da:fe:
                    73:b5:39:e7:da:1f:78:f1:65:11:cc:75:7f:15:90:
                    1d:36:25:07:a2:89:6a:a0:06:c3:83:8d:82:28:0b:
                    2e:8e:7a:05:ee:6e:df:37:ec:ba:32:2d:f7:57:8b:
                    9f:47:1f:b3:7b:99:c0:69:17:2b:7f:7d:73:c2:5c:
                    6f:9c:fc:84:9f:25:ea:c7:91:dc:88:f1:16:08:f6:
                    11:32:d3:1a:a3:6c:d8:c9:0f:73:e9:6b:0c:40:75:
                    51:d7:71:81:48:8f:56:c7:c8:9f:a1:2a:e4:b1:13:
                    61:59:bf:37:fa:5c:55:4e:b3:61:ba:cc:cb:69:36:
                    51:8d:00:3b:e3:12:d9:92:47:fb:21:09:a4:11:41:
                    68:a7:43:7f:cb:97:dd:e2:a8:9b:b6:80:19:9c:b6:
                    68:de:82:b7:d4:90:b1:d3:d7:44:2b:cb:b5:ad:56:
                    86:b5:33:9f:c2:9c:3d:ba:8c:bc:72:2c:17:49:68:
                    f6:39:2f:89:1b:c7:37:bc:fe:bf:9c:6e:90:65:8c:
                    51:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:DA:6B:E6:75:34:6B:19:80:82:9F:EE:FA:62:2D:0E:1A:87:23:B7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/F7DA6BE675346B1980829FEEFA622D0E1A8723B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.128.0/22
                  170.254.168.0/22
                IPv6:
                  2804:23b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61584

    Signature Algorithm: sha256WithRSAEncryption
         43:f9:6e:c6:df:27:1f:18:5a:2c:cd:29:92:0b:f1:97:6e:1c:
         b5:be:09:dc:a1:2b:e3:7c:f4:22:c4:02:a4:c7:a3:08:95:aa:
         ef:a1:df:5d:f5:13:2f:4d:ba:93:f7:75:c2:15:17:e9:e8:7f:
         96:51:e9:29:51:b8:4e:fb:45:43:f8:09:44:2d:9a:8e:c9:5f:
         89:91:15:e2:05:80:3e:f9:42:00:f7:36:7a:88:83:07:79:cf:
         92:82:4b:cd:86:ec:be:ab:04:d5:f1:f8:17:26:36:73:20:b1:
         99:58:b7:d5:53:6e:ca:8b:40:d2:46:30:ee:0a:b2:6a:b3:ed:
         ff:51:91:a3:b0:a5:9e:3e:ce:8d:b1:14:21:8c:ce:ed:21:99:
         8d:2f:3f:6a:81:03:82:c5:01:8d:34:9b:d2:71:c9:77:aa:dc:
         c8:e4:13:ee:40:59:50:96:96:1a:a4:ab:eb:6c:f4:b0:48:43:
         76:a5:85:b0:b7:8a:4c:b8:6d:1a:f1:27:dd:0f:c2:b5:e7:22:
         df:84:68:98:7b:be:86:4c:25:5b:41:b8:88:49:55:19:f6:4d:
         ed:b4:91:12:81:c9:68:91:81:fc:37:74:a6:6e:65:3a:8d:09:
         b3:60:5c:f1:96:ba:ca:78:8f:3d:77:9c:8f:3a:97:32:cf:3f:
         d5:0d:91:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org