Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7453716841B3C3BFA0F638368F0F8373F22FF193.cer
File:                     7453716841B3C3BFA0F638368F0F8373F22FF193.cer (raw, json)
Hash identifier:          E4ekMdzRYMWLAc3l7fofmLbOKzPNnnJbQTsGleqE/GY=
Subject key identifier:   74:53:71:68:41:B3:C3:BF:A0:F6:38:36:8F:0F:83:73:F2:2F:F1:93
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7960CCDE51E5848829D93DF5C94843EED57FE60C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/7453716841B3C3BFA0F638368F0F8373F22FF193.mft
caRepository:             rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 19:18:22 +0000
Certificate not after:    Tue 03 Dec 2024 19:23:22 +0000
Subordinate resources:    AS: 268746
                          IP: 45.171.228.0/22
                          IP: 2804:5a10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:60:cc:de:51:e5:84:88:29:d9:3d:f5:c9:48:43:ee:d5:7f:e6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 19:18:22 2023 GMT
            Not After : Dec  3 19:23:22 2024 GMT
        Subject: CN=7453716841B3C3BFA0F638368F0F8373F22FF193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:33:2a:19:00:a8:2d:bd:41:4b:5f:4d:4d:86:
                    a0:17:12:a9:2f:35:8a:9b:d3:16:82:8b:de:1e:4c:
                    d6:45:42:8e:fa:6c:81:51:7f:52:db:42:07:62:38:
                    b8:21:ee:7d:f1:35:f3:b1:33:4f:0b:a5:99:ac:e0:
                    76:e7:7b:f4:0f:ac:fc:a3:40:85:ea:3f:df:65:8f:
                    c3:b0:9c:94:e7:4f:51:04:f4:a2:a7:e5:4a:1f:84:
                    af:bc:f7:5d:b6:75:e8:41:47:5b:c3:34:98:fb:b4:
                    06:36:6b:df:e2:f9:89:90:68:36:86:1b:cc:27:1c:
                    66:da:3f:d5:36:39:d9:eb:6e:cd:c2:7f:bf:f5:3e:
                    ba:4f:ed:76:21:a5:4d:d8:60:f0:77:53:0e:da:63:
                    bf:75:03:7d:82:53:2e:53:f0:62:6a:64:61:ee:34:
                    80:bb:c9:cb:fb:27:85:8c:8b:40:ae:07:0d:1c:e8:
                    ae:36:fd:37:a5:e2:ef:47:f9:a8:a0:3c:60:d5:13:
                    6c:2b:83:12:27:a7:68:2c:bc:85:88:8e:10:af:4b:
                    e9:e5:8c:db:58:ae:60:64:00:20:c9:30:4e:a9:d2:
                    3d:bc:89:95:75:9a:d9:75:d4:24:3a:91:9a:7a:43:
                    c2:51:58:7a:35:85:05:1c:cb:34:64:03:68:3a:4d:
                    5e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:53:71:68:41:B3:C3:BF:A0:F6:38:36:8F:0F:83:73:F2:2F:F1:93
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/7453716841B3C3BFA0F638368F0F8373F22FF193.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.228.0/22
                IPv6:
                  2804:5a10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268746

    Signature Algorithm: sha256WithRSAEncryption
         9e:1f:34:e7:75:9e:10:93:50:a1:d0:e8:a2:f6:e1:73:97:12:
         75:1a:39:f9:f3:64:4c:2b:3c:3b:bb:55:c6:b3:54:f5:e4:10:
         aa:98:9f:51:a2:4e:5d:7e:e0:9a:c9:28:49:c0:98:5c:62:14:
         5d:b0:04:05:89:5d:b5:ba:fd:fd:ce:1b:69:e3:16:f6:c7:c4:
         d4:6b:7f:ec:f9:3f:b2:bf:d9:b8:b9:65:ea:67:cd:04:85:3d:
         cf:59:d6:cd:90:0e:f0:7f:10:f6:bf:64:e0:9e:5e:ff:29:d7:
         5e:92:57:68:08:3b:12:c2:4e:d6:f1:a9:92:c1:46:91:66:95:
         4d:ba:0c:60:38:40:55:aa:f2:5b:a4:dc:49:93:24:5a:b7:70:
         1d:50:2d:e0:1d:99:c0:94:c1:ce:10:49:7d:44:f7:d5:e6:6d:
         70:be:ed:65:12:85:f8:a1:6f:56:41:1e:3c:0b:e2:51:86:c3:
         67:04:a2:4f:09:65:42:9d:34:ac:ab:84:28:41:bb:ee:78:4b:
         0f:bd:6d:37:d5:9f:16:0e:5f:24:28:e4:a9:0a:c4:11:a5:d5:
         68:bd:7a:2a:ee:dd:ab:99:39:1a:55:82:e3:be:5e:38:cf:07:
         ec:a5:39:b1:f1:3c:b9:67:9e:6d:7f:e7:db:37:05:88:9d:b8:
         98:7e:44:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org