Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/02A7BD152292373BB2FD78CDF1E472A9ADB44F6E.cer
File:                     02A7BD152292373BB2FD78CDF1E472A9ADB44F6E.cer (raw, json)
Hash identifier:          8EKvQY/aIFORu1N9NGobTXkxwh50buuMfIuwdfKbLTg=
Subject key identifier:   02:A7:BD:15:22:92:37:3B:B2:FD:78:CD:F1:E4:72:A9:AD:B4:4F:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B7B1BABCE282A8A6FE87920B626796D0D4764F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/0/02A7BD152292373BB2FD78CDF1E472A9ADB44F6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 May 2023 17:52:12 +0000
Certificate not after:    Thu 16 May 2024 17:57:12 +0000
Subordinate resources:    AS: 268391
                          IP: 45.160.36.0/22
                          IP: 2804:5078::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7b:1b:ab:ce:28:2a:8a:6f:e8:79:20:b6:26:79:6d:0d:47:64:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 18 17:52:12 2023 GMT
            Not After : May 16 17:57:12 2024 GMT
        Subject: CN=02A7BD152292373BB2FD78CDF1E472A9ADB44F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d3:36:81:22:bd:b8:18:5e:7e:2f:11:53:ca:
                    33:13:5e:55:c4:39:3f:da:c9:9e:5d:78:99:50:2d:
                    09:af:30:4f:80:97:64:ad:ad:1d:54:79:54:f7:c6:
                    38:1c:b0:a5:c2:22:6a:5d:e7:d5:06:24:52:ec:a7:
                    d3:ed:0f:64:94:83:34:5a:e3:cf:ee:8b:0c:91:21:
                    77:a0:01:c6:86:62:49:8e:95:ed:95:3a:ff:1e:fc:
                    e3:87:0d:00:3a:16:eb:b3:a0:68:f7:51:fb:91:80:
                    91:2f:52:79:c6:3c:c4:27:b0:0d:b0:b1:91:c1:61:
                    d3:3c:79:c5:ac:45:ae:c5:34:48:ce:70:08:00:de:
                    19:50:19:ba:8a:b8:4b:34:f9:e6:1f:88:5f:00:de:
                    6d:89:99:2f:ee:8f:b6:78:93:e1:3c:1d:20:95:cb:
                    2f:5a:2b:bc:35:eb:bb:50:ca:bf:ce:9c:36:2a:c8:
                    69:29:1c:0e:74:b6:0f:1d:1c:c2:2b:dd:e4:4d:77:
                    36:7c:50:8f:06:44:a4:ba:5a:d9:7c:9b:38:c5:1d:
                    8e:a1:c4:74:c0:5f:0b:44:2f:56:ed:e5:60:0d:b3:
                    5b:7b:7c:a7:ac:03:43:60:69:d8:35:9c:d0:31:5d:
                    d9:39:cf:dc:7a:87:ee:b8:3d:71:f8:6b:0f:7b:ff:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:A7:BD:15:22:92:37:3B:B2:FD:78:CD:F1:E4:72:A9:AD:B4:4F:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/0/02A7BD152292373BB2FD78CDF1E472A9ADB44F6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.36.0/22
                IPv6:
                  2804:5078::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268391

    Signature Algorithm: sha256WithRSAEncryption
         35:47:b0:c1:81:90:7a:71:68:71:ba:db:3c:59:ba:17:35:c1:
         b1:e9:eb:3d:14:74:c2:4c:f8:f4:cd:13:4f:84:30:90:37:93:
         c9:24:56:cd:c4:d1:07:d8:77:ba:72:f1:22:4f:ef:82:e7:c3:
         3a:71:be:49:46:8d:9b:9b:75:d2:a6:5d:0e:79:36:34:b3:51:
         02:83:30:63:95:59:7e:44:00:13:fd:5f:9d:d3:25:fd:f6:90:
         ae:bd:33:07:77:19:3d:cd:bb:5b:84:63:fd:af:7d:06:8a:12:
         cc:c2:00:ab:2a:5a:dd:d5:9a:62:d0:ce:ec:8c:79:1d:c1:55:
         05:e1:81:37:a9:cf:6d:89:13:09:d1:04:82:76:08:44:8a:ed:
         f9:7d:f8:f8:7a:08:f5:c9:ce:59:72:38:05:44:cd:2d:a0:1d:
         e3:2e:47:80:27:cc:b5:d5:87:04:1e:13:aa:f5:98:98:fa:c5:
         e3:37:af:16:a7:d4:83:61:df:1c:57:d9:e5:60:3e:51:02:5d:
         8f:7a:5d:50:31:5b:1e:cc:29:3a:23:2b:8d:11:c6:4c:31:74:
         da:d0:81:8e:09:b6:76:b2:8d:f7:20:bb:d1:4d:69:36:2b:1f:
         82:de:e2:db:e0:cf:42:0a:81:46:b6:f2:3e:a8:89:d6:96:88:
         ad:2d:e4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org