Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/709C8B561822BDC89B5B6C63D6E4A3EB9862B8C7.cer
File:                     709C8B561822BDC89B5B6C63D6E4A3EB9862B8C7.cer (raw, json)
Hash identifier:          2HaKPKl2uCem1SzJ0lI3dQmN6rZJZZy/apEw6moy3Do=
Subject key identifier:   70:9C:8B:56:18:22:BD:C8:9B:5B:6C:63:D6:E4:A3:EB:98:62:B8:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01F7727B86E4B2FD53F0153DB8B8A1A98B178287
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/0/709C8B561822BDC89B5B6C63D6E4A3EB9862B8C7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Apr 2023 12:18:37 +0000
Certificate not after:    Thu 11 Apr 2024 12:23:37 +0000
Subordinate resources:    AS: 269373
                          IP: 45.185.112.0/22
                          IP: 2804:63a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f7:72:7b:86:e4:b2:fd:53:f0:15:3d:b8:b8:a1:a9:8b:17:82:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 13 12:18:37 2023 GMT
            Not After : Apr 11 12:23:37 2024 GMT
        Subject: CN=709C8B561822BDC89B5B6C63D6E4A3EB9862B8C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:35:78:bd:ea:42:ef:da:de:4d:c6:1e:e7:
                    36:97:62:f1:b4:4b:58:84:19:46:c8:91:a4:b1:57:
                    7d:3d:df:cb:c9:76:fb:75:c2:a0:9b:fd:be:0a:0f:
                    9e:ed:18:61:bd:fb:13:0d:76:99:a0:78:9e:93:03:
                    5f:2d:d0:7b:71:ce:e7:1c:a2:90:ef:97:15:ff:b1:
                    48:0f:5e:f8:02:c0:ce:14:96:87:9c:f4:e7:70:80:
                    ae:69:a7:a8:f5:59:0f:d1:eb:4e:b6:49:e5:43:3c:
                    cc:83:f8:cd:e1:38:f1:ce:8f:1c:62:22:47:33:27:
                    a9:57:94:12:80:a2:1c:17:3f:37:79:44:b8:01:5f:
                    f0:ed:9c:36:c4:df:dd:ca:28:a0:e2:48:d4:fa:5f:
                    d9:d7:ff:0f:72:e5:30:92:4b:74:e0:8b:de:0f:f8:
                    64:15:8f:fa:8f:b6:c7:45:63:ca:cb:36:e4:b3:8d:
                    0a:33:50:03:b8:14:cf:1c:f0:5c:32:9b:36:38:27:
                    30:75:67:21:be:d8:00:57:16:e9:32:0c:37:eb:b3:
                    70:2f:d0:7a:dc:99:8a:b2:a8:19:23:9e:3c:3c:25:
                    7f:ae:7a:0e:f8:6c:16:f4:c2:81:14:73:4a:df:b8:
                    9b:a1:bf:0e:fa:e2:8d:21:72:19:43:74:58:de:e6:
                    ec:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:9C:8B:56:18:22:BD:C8:9B:5B:6C:63:D6:E4:A3:EB:98:62:B8:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/0/709C8B561822BDC89B5B6C63D6E4A3EB9862B8C7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.112.0/22
                IPv6:
                  2804:63a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269373

    Signature Algorithm: sha256WithRSAEncryption
         b6:87:01:a6:83:42:13:be:96:3c:fc:9b:98:31:c8:e0:bb:9b:
         98:80:24:8c:c9:5a:08:91:fd:91:1f:64:75:dd:b3:8f:7f:51:
         16:24:59:8e:c2:a6:cf:50:e3:af:16:ae:75:70:01:d7:d8:9d:
         13:07:34:9b:ce:61:4d:99:43:2c:df:a3:f3:a5:6b:54:77:d5:
         72:a8:13:45:ba:8a:90:e0:cb:3c:17:9e:84:9d:68:16:27:c7:
         7d:ad:02:c1:3f:30:66:57:a5:cd:ea:28:b8:09:43:cb:9f:9a:
         ab:73:5c:67:5a:a9:96:4f:d9:02:2d:86:ed:1a:cf:06:16:f0:
         e0:56:48:c3:22:c2:c5:6d:c7:b8:10:08:f8:20:42:bd:f1:d8:
         db:d5:9c:29:5d:a1:6f:97:9c:d3:da:55:3d:3c:01:e3:ba:55:
         3e:15:3b:e3:be:ca:6d:23:e0:a3:c2:13:41:c8:9c:99:11:39:
         73:13:9f:78:46:ff:3b:73:95:05:08:dd:0e:49:d9:75:b9:a3:
         c3:b8:52:50:93:e1:a3:0a:08:2f:6e:00:de:38:35:d4:33:ae:
         6b:e7:7b:df:13:e8:a4:42:0c:53:7c:d0:3a:b1:79:84:ce:d1:
         01:cd:3a:08:01:fb:1a:24:14:ca:02:4b:b9:b7:ac:2a:4e:9c:
         2e:81:2f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org