Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7290B7A0179E2C55CDBEA9434D1E9E612E4A52B7.cer
File:                     7290B7A0179E2C55CDBEA9434D1E9E612E4A52B7.cer (raw, json)
Hash identifier:          ohXSgibkeELNl9KKo8Y9LjAqGXghPWVWsNv2NDlkZOw=
Subject key identifier:   72:90:B7:A0:17:9E:2C:55:CD:BE:A9:43:4D:1E:9E:61:2E:4A:52:B7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BBDF6117C9B649F63EDCFF7D3B669F78398B43E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/7290B7A0179E2C55CDBEA9434D1E9E612E4A52B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 23:39:44 +0000
Certificate not after:    Mon 03 Mar 2025 23:44:44 +0000
Subordinate resources:    AS: 273459
                          IP: 2804:8ef8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:bd:f6:11:7c:9b:64:9f:63:ed:cf:f7:d3:b6:69:f7:83:98:b4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 23:39:44 2024 GMT
            Not After : Mar  3 23:44:44 2025 GMT
        Subject: CN=7290B7A0179E2C55CDBEA9434D1E9E612E4A52B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:fb:7c:81:77:ee:fe:d5:2e:c7:fa:48:00:
                    9e:a0:36:4f:18:7a:be:3b:7d:11:03:99:c9:49:5e:
                    97:90:c8:76:48:c8:01:cb:66:50:ca:2f:75:04:96:
                    02:56:2c:70:f9:cc:bf:71:df:d9:62:3a:95:57:61:
                    02:fd:44:01:69:99:68:1e:b9:a5:eb:6b:4f:8f:86:
                    df:de:87:43:7c:5f:c3:8e:04:1a:cb:cc:6f:4f:37:
                    e3:31:b7:41:7c:08:5b:50:5a:09:84:11:08:10:f5:
                    c2:c0:a3:0d:a1:4e:7f:88:7b:83:53:d9:c5:e0:f7:
                    42:b8:c2:cf:01:be:cb:ba:99:27:30:bc:07:f0:46:
                    72:17:0b:da:79:ae:01:08:2c:17:f4:d9:e8:42:c3:
                    da:17:b6:61:9d:52:50:34:28:47:90:40:ab:90:59:
                    44:84:25:fa:eb:73:1a:f3:ea:66:97:3a:ff:93:34:
                    7d:bd:07:65:e3:05:ae:be:94:cc:ac:a4:3d:1c:5d:
                    3b:3d:83:21:44:6c:cb:83:cd:02:35:b1:b2:f3:e5:
                    51:3d:9b:55:57:ff:bf:6a:2e:e5:8e:44:f0:b8:d1:
                    c9:02:fb:3b:5d:f0:18:bb:2a:5e:ff:2e:92:67:99:
                    29:a7:95:26:e7:29:4b:5c:31:e7:90:f1:3e:92:22:
                    73:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:90:B7:A0:17:9E:2C:55:CD:BE:A9:43:4D:1E:9E:61:2E:4A:52:B7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/7290B7A0179E2C55CDBEA9434D1E9E612E4A52B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273459

    Signature Algorithm: sha256WithRSAEncryption
         2b:fd:06:8d:44:15:c6:80:50:f3:be:f5:ec:5e:04:19:9d:c8:
         c5:12:fe:c8:5e:6a:65:9d:71:39:9f:39:87:4e:42:e0:bb:e2:
         a7:f4:11:0e:4f:04:f5:33:65:4b:cf:71:89:e4:1c:40:d9:31:
         98:bf:bd:16:8a:16:62:9c:f3:99:d2:56:3e:7b:87:bb:e3:47:
         92:2c:2b:98:b3:10:4f:80:c1:ce:f8:9c:9f:50:b3:a9:03:71:
         d9:0d:65:09:21:56:58:f3:18:da:4b:03:39:a3:37:18:60:43:
         41:d2:0a:25:68:0f:9f:45:35:79:eb:10:a7:df:6b:5d:2c:b7:
         a8:d0:c0:82:a5:cb:c8:ff:23:46:8a:93:1c:3b:31:3a:b4:27:
         ef:e8:d9:eb:b2:05:16:9e:77:11:5c:d0:54:9f:d4:82:f0:49:
         79:08:b2:59:88:25:8b:5f:3b:74:6e:f3:d5:d6:18:b1:df:a2:
         16:4e:f8:3d:f8:a7:17:47:f9:de:65:ea:b9:9e:fd:fe:f2:ae:
         50:c9:06:9e:9e:2c:bf:1e:ba:21:fd:28:22:97:32:77:19:d7:
         11:aa:ff:01:76:d4:56:01:d9:59:ea:af:d7:ca:e0:d2:75:1c:
         c7:4b:d4:10:95:aa:d2:7b:e4:b3:2e:0c:bf:48:a7:21:e1:bb:
         bc:9d:a1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org