Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/01A7321D10D87964257FBE633B42964CCD98A77A.cer
File:                     01A7321D10D87964257FBE633B42964CCD98A77A.cer (raw, json)
Hash identifier:          9/B9MVLRJCFODEyuWkfYEOoZE8COo1dTLN6mMwmmhSA=
Subject key identifier:   01:A7:32:1D:10:D8:79:64:25:7F:BE:63:3B:42:96:4C:CD:98:A7:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       09439BC8E19746539E304EADB11717396D2C0492
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/01A7321D10D87964257FBE633B42964CCD98A77A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Feb 2023 18:59:22 +0000
Certificate not after:    Tue 20 Feb 2024 19:04:22 +0000
Subordinate resources:    AS: 268673
                          IP: 45.165.104.0/22
                          IP: 2804:54d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:43:9b:c8:e1:97:46:53:9e:30:4e:ad:b1:17:17:39:6d:2c:04:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 18:59:22 2023 GMT
            Not After : Feb 20 19:04:22 2024 GMT
        Subject: CN=01A7321D10D87964257FBE633B42964CCD98A77A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:80:88:06:14:2a:e9:a7:77:ed:1e:2a:cf:
                    87:a5:61:1c:9a:e5:96:8f:6b:61:8f:46:66:6a:72:
                    29:66:96:f2:ab:47:f2:c7:63:dd:14:0a:ca:09:70:
                    eb:06:30:c7:be:78:9b:0a:5f:9f:c9:6c:b6:6a:9a:
                    87:ed:51:14:af:ce:2f:2a:41:da:ee:49:53:17:57:
                    73:93:95:4a:8d:a5:b8:6d:7b:aa:ab:c4:0a:6c:e2:
                    78:1c:97:ac:cc:c9:fa:6c:12:98:04:bd:2b:e5:96:
                    b0:b3:3b:c8:0d:ae:59:4a:a7:99:5b:13:7f:05:c9:
                    a4:2e:03:8d:c6:8a:24:77:12:0e:8d:19:0c:08:71:
                    b5:68:7e:45:f9:1f:fc:e1:8e:53:94:cd:6b:49:4a:
                    f3:b4:a4:a2:2f:b8:55:d2:54:a8:b9:85:ac:93:ca:
                    b9:3e:ae:31:d0:80:1f:f1:12:60:72:a2:ea:bc:3d:
                    e3:26:aa:59:6a:fc:f6:8d:e4:63:bc:0a:3b:a0:66:
                    4d:db:9f:b4:17:4c:55:cd:f7:01:65:3e:de:dc:91:
                    c4:1a:d9:90:94:8c:71:76:a3:91:72:de:a1:17:ca:
                    76:9b:b6:bb:d6:eb:18:2c:62:81:4d:77:1c:09:09:
                    36:05:ad:6d:01:22:e4:8a:12:0d:c4:58:a5:f9:16:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:A7:32:1D:10:D8:79:64:25:7F:BE:63:3B:42:96:4C:CD:98:A7:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/01A7321D10D87964257FBE633B42964CCD98A77A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.104.0/22
                IPv6:
                  2804:54d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268673

    Signature Algorithm: sha256WithRSAEncryption
         82:7e:3e:e8:4b:4f:ca:f6:55:33:12:1c:67:1e:63:8c:53:cf:
         a5:5b:d0:e2:a0:a9:ce:82:31:68:b6:2e:35:12:db:00:59:9d:
         91:4d:c7:00:2a:57:96:01:05:a3:a8:59:61:fa:bd:35:1e:91:
         f0:77:92:52:2e:12:c8:bb:7a:de:36:d2:33:26:ab:94:35:7e:
         c2:fe:ef:32:20:1c:c2:25:c0:8f:68:e6:b1:b8:16:4b:28:09:
         2f:d9:d3:b2:3b:80:45:53:b7:ae:ab:17:33:ff:20:52:5a:df:
         58:e0:6a:83:f8:fa:7f:00:33:3b:b4:97:8e:1a:4f:1a:6d:b9:
         b5:87:72:de:4f:b5:57:4d:03:bc:98:c9:b3:de:62:09:5e:0f:
         2f:cf:49:e2:fa:2c:8c:43:5a:6b:8c:59:cf:94:88:fb:e8:87:
         0e:f1:3e:f0:6c:20:9c:13:2f:93:f5:76:74:a9:3c:2f:e4:fc:
         67:4a:f5:6b:27:dc:3f:16:43:19:2c:8d:0d:38:c7:84:f5:b4:
         7a:8a:fc:aa:b0:93:84:88:76:85:6a:28:fa:e7:68:f4:4c:68:
         70:d6:bd:22:71:7d:21:74:21:09:5d:54:82:22:03:5d:78:34:
         15:4c:ee:4a:c1:53:51:26:e6:8f:af:b2:91:03:99:ef:5d:0a:
         b1:e6:bb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org