Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7100B547C8B908DFD2B8AD727B2B1267B000832C.cer
File:                     7100B547C8B908DFD2B8AD727B2B1267B000832C.cer (raw, json)
Hash identifier:          5y1fR0RFOkYNAz41TnNqcglyZree2gk/vTGTyb6FZ80=
Subject key identifier:   71:00:B5:47:C8:B9:08:DF:D2:B8:AD:72:7B:2B:12:67:B0:00:83:2C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2638B07BFD760CEA8DB3C453CA8626E83FE549D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/7100B547C8B908DFD2B8AD727B2B1267B000832C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Mar 2023 17:38:23 +0000
Certificate not after:    Mon 04 Mar 2024 17:43:23 +0000
Subordinate resources:    AS: 269411
                          IP: 45.186.52.0/22
                          IP: 2804:642c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:38:b0:7b:fd:76:0c:ea:8d:b3:c4:53:ca:86:26:e8:3f:e5:49:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  6 17:38:23 2023 GMT
            Not After : Mar  4 17:43:23 2024 GMT
        Subject: CN=7100B547C8B908DFD2B8AD727B2B1267B000832C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:90:a4:93:5b:0f:63:cf:0c:42:00:7e:01:
                    26:5f:69:d7:dd:64:ca:02:e0:0f:a8:09:f9:fe:c8:
                    6a:20:4d:62:b1:cd:98:78:76:6a:50:e1:57:ec:5b:
                    3c:c4:62:72:92:51:f8:be:23:f8:05:51:fb:63:5c:
                    56:bf:43:a3:e3:44:ed:41:79:9e:43:f3:bc:88:87:
                    6e:48:a2:9d:95:d8:f7:63:0b:39:c6:b8:bb:d6:2b:
                    88:00:30:26:0f:55:67:f4:a2:c5:2f:5d:8f:ea:f8:
                    30:d3:94:15:d6:af:ae:fd:67:9c:d3:aa:5d:19:48:
                    ff:5c:38:19:90:8f:86:4f:b4:cf:c7:8d:32:90:a9:
                    b9:7e:71:89:2b:4c:be:5f:74:2e:ab:9f:d1:6c:a8:
                    8b:2b:46:9f:d8:c5:d9:36:0d:e1:2e:34:d8:9a:3c:
                    0a:80:a8:a9:d2:c3:1b:dd:1f:ac:6c:21:7b:83:b4:
                    06:a1:b5:03:fe:ae:71:2d:4a:78:c9:c0:a1:f7:8c:
                    bd:b2:c8:fb:d0:c0:fc:a7:bf:97:b5:a1:37:7b:bc:
                    35:4c:4b:3d:18:a9:6e:16:f3:21:db:d7:f0:81:2d:
                    64:15:3c:84:e5:7f:5b:11:19:b2:82:47:5b:59:02:
                    72:f9:af:ba:5a:9a:4e:f1:da:41:cf:65:54:95:50:
                    a0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:00:B5:47:C8:B9:08:DF:D2:B8:AD:72:7B:2B:12:67:B0:00:83:2C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/7100B547C8B908DFD2B8AD727B2B1267B000832C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.52.0/22
                IPv6:
                  2804:642c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269411

    Signature Algorithm: sha256WithRSAEncryption
         af:a6:fc:78:1b:f3:90:83:6d:eb:78:a7:1d:e0:44:a2:c6:2b:
         16:83:18:07:91:70:3a:31:12:bc:1d:b6:43:81:e0:32:e0:03:
         c6:70:ef:79:63:4c:cc:83:ca:5c:02:9c:8d:c6:8e:1c:83:f6:
         0f:65:a9:fe:2b:78:7c:29:f4:9d:6f:72:b2:76:e3:08:ac:b3:
         0a:24:1f:23:a7:3e:6b:49:7b:dd:e0:1e:3a:cd:27:94:53:b7:
         59:c2:31:e4:30:78:5b:73:33:a9:d8:cf:b3:5d:a3:22:b7:fa:
         89:9e:77:c0:a0:cb:15:3a:c9:a4:8f:3f:16:80:94:32:9c:28:
         9c:45:86:07:c1:f0:8b:e8:06:67:09:d0:44:bf:78:4c:37:3e:
         7b:2d:e3:cd:ed:98:2f:c9:88:b7:5c:53:57:fe:09:0d:19:e7:
         6a:38:f0:a2:41:ae:22:50:bd:10:a9:53:3f:d6:06:64:1d:4f:
         89:56:6f:13:8b:69:55:d3:81:94:4e:7d:23:1c:61:d0:fa:5f:
         61:ff:da:f6:5e:d9:cd:6a:1b:35:ca:3d:77:07:7a:cd:69:0e:
         fb:a5:8a:44:de:c9:cb:6a:47:c1:0a:75:62:37:8d:6d:14:d2:
         82:4f:2a:ea:fd:ea:9f:72:0b:4e:52:a8:12:d0:74:1c:25:ed:
         80:88:cb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org