Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7159DD0D2DE022650C2526E3276BD39C7268E3E5.cer
File:                     7159DD0D2DE022650C2526E3276BD39C7268E3E5.cer (raw, json)
Hash identifier:          e9X7JphxkI8zBIeoO7ADlnQ5ChdqjPIbz7GCti1YyL8=
Subject key identifier:   71:59:DD:0D:2D:E0:22:65:0C:25:26:E3:27:6B:D3:9C:72:68:E3:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       05B69653EC9D1B5C22E74D8620B8D3550F8F844B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/7159DD0D2DE022650C2526E3276BD39C7268E3E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Oct 2023 16:08:31 +0000
Certificate not after:    Thu 03 Oct 2024 16:13:31 +0000
Subordinate resources:    AS: 266200
                          IP: 160.20.180.0/22
                          IP: 2804:3c44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b6:96:53:ec:9d:1b:5c:22:e7:4d:86:20:b8:d3:55:0f:8f:84:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  5 16:08:31 2023 GMT
            Not After : Oct  3 16:13:31 2024 GMT
        Subject: CN=7159DD0D2DE022650C2526E3276BD39C7268E3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:69:2c:d8:81:e8:e0:3f:99:6b:b3:65:fc:
                    91:a6:49:71:fc:1b:5c:04:7d:2d:b0:0b:62:d1:2b:
                    b1:74:61:30:1b:97:29:14:a8:9c:46:04:cc:c3:e3:
                    eb:43:68:a5:2c:06:25:f2:8c:7d:7b:f5:d9:a9:1d:
                    45:25:1d:5b:32:f8:4e:8f:35:64:6b:b5:c5:14:6d:
                    80:79:26:13:33:96:30:9b:af:07:b1:d5:b1:4e:f2:
                    34:4c:d6:e6:27:c3:80:ce:0c:76:8b:fd:9e:e4:f4:
                    c4:12:7e:46:c0:71:8b:ac:bb:f6:0d:92:28:3b:a9:
                    66:bc:7d:ce:5e:96:d1:bd:72:44:0c:fd:e6:4f:b1:
                    95:d7:8c:2c:e0:82:2a:bf:4f:89:16:8d:ba:d4:4c:
                    0b:d0:d3:70:c1:95:8e:59:ac:42:9a:d0:f2:42:fd:
                    ba:ae:52:4f:47:ce:4e:d2:cf:9a:0b:da:28:86:86:
                    3c:f8:4c:74:89:97:60:0a:6d:ad:4c:66:9c:0c:89:
                    11:81:b5:d9:2d:72:5e:45:a5:46:3b:73:90:f6:89:
                    dc:62:29:09:23:db:5a:0c:fe:99:c1:ca:65:da:89:
                    06:3f:73:c8:6a:c6:a1:1b:51:bd:2b:d2:77:ba:ea:
                    16:c1:a2:68:af:f8:c1:22:f4:0e:2f:20:7c:79:8e:
                    03:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:59:DD:0D:2D:E0:22:65:0C:25:26:E3:27:6B:D3:9C:72:68:E3:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/7159DD0D2DE022650C2526E3276BD39C7268E3E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.180.0/22
                IPv6:
                  2804:3c44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266200

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:4c:ee:a8:10:7b:7c:50:55:97:d1:7a:c5:bc:36:98:42:
         31:4c:9e:ea:ac:69:91:3d:c2:78:8c:1d:00:00:99:be:6d:26:
         9a:b6:3c:f5:72:5d:1b:08:e3:27:f3:1b:0a:7b:3c:ad:7d:cd:
         bc:fc:08:43:56:b7:51:7c:5c:08:f7:5a:78:c0:2b:5a:dd:fd:
         e0:00:87:fe:39:12:c7:64:3a:46:ff:30:bc:e2:cd:15:16:9d:
         bd:07:31:17:05:e3:a5:aa:a6:d1:e9:13:b6:75:db:ce:92:6c:
         76:57:58:4b:6d:c2:09:d9:30:1c:19:22:48:a2:31:35:cd:c1:
         cd:56:17:55:0e:e2:eb:bd:00:d0:aa:f1:84:8e:ed:f1:0c:de:
         ce:05:0b:38:0c:03:12:24:a4:1a:a7:28:f9:ec:74:fe:13:b5:
         9f:cc:9f:ea:45:60:dd:3f:a8:e5:de:2a:70:fb:d7:91:fd:c5:
         4d:f5:07:cb:8c:0e:16:f3:9b:80:7a:7a:4a:f8:46:fd:85:da:
         e9:8e:47:57:57:12:55:b1:49:85:39:af:a1:13:7c:29:af:66:
         49:98:18:92:b0:31:83:64:d7:10:90:8d:cd:72:bd:55:92:21:
         6b:fd:f6:6f:e4:f6:77:32:2b:6a:de:d4:22:06:c4:09:d2:7d:
         5d:87:3d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org