Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/07461AF10ECF1C93F0D86652694C336908EF8DE7.cer
File:                     07461AF10ECF1C93F0D86652694C336908EF8DE7.cer (raw, json)
Hash identifier:          D8Mz4I1b7Vu3kLvNZfyuJ40II0420TIBxteWxxvx4hU=
Subject key identifier:   07:46:1A:F1:0E:CF:1C:93:F0:D8:66:52:69:4C:33:69:08:EF:8D:E7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16B575AB90BC886A586C30DD91F8CC9A1FB0D2B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/07461AF10ECF1C93F0D86652694C336908EF8DE7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Nov 2023 01:29:59 +0000
Certificate not after:    Sat 16 Nov 2024 01:34:59 +0000
Subordinate resources:    AS: 268847
                          IP: 45.173.252.0/22
                          IP: 2804:5b78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b5:75:ab:90:bc:88:6a:58:6c:30:dd:91:f8:cc:9a:1f:b0:d2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 01:29:59 2023 GMT
            Not After : Nov 16 01:34:59 2024 GMT
        Subject: CN=07461AF10ECF1C93F0D86652694C336908EF8DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d4:2c:77:b4:2c:2f:80:29:3c:de:bd:ae:6e:
                    b0:44:d6:f5:f9:b1:81:81:1b:de:dc:c8:07:b2:54:
                    5f:ff:97:65:13:84:29:f9:35:c8:ac:cb:77:8f:84:
                    0d:8f:8a:49:51:e9:80:50:f4:f1:ea:a7:54:ff:a1:
                    60:08:69:54:2d:30:85:de:fd:17:1e:52:29:2e:2a:
                    72:fc:08:cc:63:ca:13:da:87:13:54:06:15:4f:ac:
                    1e:56:7a:d3:51:73:ee:a3:5b:ef:91:03:97:b1:57:
                    c8:1a:9a:ac:52:cd:57:b3:12:e4:06:22:66:c9:f4:
                    8a:61:74:bc:59:98:62:9c:01:ce:ce:46:a6:89:0b:
                    c2:75:79:d6:b9:7a:56:2b:5a:4c:68:4b:05:08:0c:
                    5a:03:97:b1:2e:24:9f:c2:cb:21:d4:c3:5f:1d:eb:
                    54:75:df:eb:92:59:a7:60:72:08:31:47:5a:9b:8d:
                    0a:1d:d1:d2:e7:97:1c:44:60:68:66:3c:b7:d0:25:
                    66:51:e2:7f:1e:0d:7c:6f:ab:fd:b1:99:18:35:9a:
                    d8:ad:73:7a:be:e5:ef:6f:16:b9:9b:8e:c6:70:e9:
                    99:54:dc:70:3d:cb:c8:39:c4:76:04:10:4b:01:f0:
                    4d:31:b2:f0:b5:ae:84:6a:fa:7b:f6:c3:ae:43:23:
                    ea:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:46:1A:F1:0E:CF:1C:93:F0:D8:66:52:69:4C:33:69:08:EF:8D:E7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/07461AF10ECF1C93F0D86652694C336908EF8DE7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.252.0/22
                IPv6:
                  2804:5b78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268847

    Signature Algorithm: sha256WithRSAEncryption
         18:67:09:9e:ae:ef:0b:55:7b:1a:89:aa:24:2b:9d:58:22:09:
         f6:80:1d:5d:a8:ed:a7:a5:aa:60:34:0f:ba:1c:02:3b:00:55:
         0a:db:ee:4b:24:da:0e:7d:35:f1:01:c2:5b:40:63:3c:26:6f:
         9e:71:e1:44:e8:37:f6:28:cd:da:66:4d:d0:0f:3c:6e:f9:a1:
         2c:2e:93:fb:13:e3:77:a4:aa:42:22:3a:9a:6a:96:28:b7:97:
         5b:6f:df:21:25:1b:56:29:43:bc:b5:2e:eb:3a:db:27:b1:95:
         40:ab:14:2f:8a:66:7e:24:bf:4e:e5:c3:e2:a4:b9:d7:a8:e2:
         b1:f2:5e:10:f5:1f:c0:22:33:05:2e:ab:6a:4b:a0:75:ec:86:
         96:97:06:d0:35:81:01:0d:c6:8b:b7:b8:67:4b:4d:c6:7a:37:
         4c:7d:4e:9d:ff:eb:3b:15:d1:3b:51:22:49:ee:05:5c:76:63:
         9e:b4:f2:20:c1:cb:e4:77:02:33:c8:30:90:b3:24:fb:00:c5:
         55:a6:c3:12:2b:de:70:32:94:5b:db:f8:06:01:dd:04:bf:72:
         38:65:51:14:1f:77:88:16:e3:54:24:48:8c:51:6d:91:2e:be:
         95:f5:32:4b:b0:3c:ac:6d:be:31:e0:26:aa:54:31:54:5e:5f:
         5b:b1:c6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org