Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.cer
File:                     1C7D3973B001C126A2DDD8239CD138E09A85FC78.cer (raw, json)
Hash identifier:          miNrzaHYfEdRkPKiS4XTgEYt67T6iOYXPjM4DXUcVvg=
Subject key identifier:   1C:7D:39:73:B0:01:C1:26:A2:DD:D8:23:9C:D1:38:E0:9A:85:FC:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       63AE85FE2BCCFBEDAB2B6DD3DD38642EE1EA636D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Jun 2023 13:15:10 +0000
Certificate not after:    Sat 22 Jun 2024 13:20:10 +0000
Subordinate resources:    AS: 269667
                          IP: 45.191.60.0/22
                          IP: 2804:680c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ae:85:fe:2b:cc:fb:ed:ab:2b:6d:d3:dd:38:64:2e:e1:ea:63:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 24 13:15:10 2023 GMT
            Not After : Jun 22 13:20:10 2024 GMT
        Subject: CN=1C7D3973B001C126A2DDD8239CD138E09A85FC78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:16:42:89:8b:06:a3:6c:20:10:45:ae:54:
                    2e:10:d4:d6:24:75:07:71:26:39:0f:64:b6:e3:c1:
                    b2:ef:3e:ac:5d:c2:17:df:8b:a8:1a:11:68:52:73:
                    d6:d1:de:10:d3:be:0e:8d:68:1f:55:3d:88:00:48:
                    99:7c:be:46:47:50:9e:92:e4:61:8b:9a:d0:2a:f0:
                    48:92:64:a2:c5:76:a3:5e:4b:4a:da:b4:7f:69:d8:
                    a5:3e:cb:9c:47:a9:d1:ed:82:34:ea:9d:62:f1:c5:
                    86:9c:a0:42:b3:f0:82:8b:07:c5:cc:90:9f:45:bb:
                    6d:c1:7b:02:a1:e2:9c:a5:dd:cf:ad:22:86:07:42:
                    c2:9e:47:21:34:15:2c:d8:9e:48:86:c8:11:e7:e8:
                    d5:bc:d5:8c:f4:48:e8:47:1c:c3:27:15:1b:0d:9e:
                    15:9c:69:52:25:2c:83:63:57:16:2e:ad:38:8d:f4:
                    a7:d4:b9:7f:45:f5:05:68:d1:c6:5b:45:b4:4f:85:
                    01:e9:14:06:21:d2:84:16:25:14:d3:36:50:37:46:
                    22:3d:b1:1f:11:fd:3c:8a:2b:8d:50:41:4f:58:77:
                    74:85:39:56:4a:42:5d:0f:9d:0e:2c:b8:40:7b:1e:
                    4a:19:ad:db:be:f1:b3:d2:ad:6f:b2:2c:bb:28:42:
                    af:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:7D:39:73:B0:01:C1:26:A2:DD:D8:23:9C:D1:38:E0:9A:85:FC:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.60.0/22
                IPv6:
                  2804:680c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269667

    Signature Algorithm: sha256WithRSAEncryption
         9c:bb:9e:af:e7:85:e4:e5:1e:de:12:5f:1d:1a:c6:1a:ca:85:
         c5:9c:7a:51:af:36:aa:5a:9d:4e:2e:8f:06:d8:4f:79:6f:6a:
         d2:23:26:76:32:a5:cb:0d:83:9a:0b:a7:d0:2b:6d:86:91:51:
         8a:b8:a3:1a:24:70:f9:80:bd:b7:fa:29:bc:57:2f:b6:be:6a:
         ec:32:29:3e:e1:a6:ee:5b:36:ec:be:e5:c9:9a:64:de:07:e3:
         90:f2:69:28:0b:a1:f3:24:ab:e2:7e:bf:14:99:94:de:4a:5a:
         6a:0c:e7:be:59:f1:2b:df:da:5b:3d:94:44:bf:5d:e8:e8:60:
         b3:97:00:3b:12:b9:49:65:4c:b5:30:3c:41:06:5f:93:20:71:
         12:90:db:71:50:ca:ff:f4:ff:31:cc:62:df:76:54:c1:f7:70:
         d9:47:e0:81:db:cc:9e:0e:e0:90:45:54:d1:e0:3a:3c:81:e7:
         94:29:ba:65:cf:a1:b4:f7:85:80:2c:9f:39:5a:54:41:37:87:
         2a:ad:46:54:ab:99:7f:7e:91:1b:d2:e9:53:8a:df:8c:0c:2f:
         1f:7b:14:60:cb:60:6c:f7:91:f3:41:3a:26:fe:4c:20:e6:34:
         56:ec:dc:18:fe:83:23:f5:e1:97:7d:0b:bc:76:5f:b8:6c:98:
         e8:93:15:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org