Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7459A5D0BF8F3BE479B08DA3EE96A177472F86BB.cer
File:                     7459A5D0BF8F3BE479B08DA3EE96A177472F86BB.cer (raw, json)
Hash identifier:          INFVgpPg804JiDb+Aha2gcLM5mvvSkTX0Idey5udgyI=
Subject key identifier:   74:59:A5:D0:BF:8F:3B:E4:79:B0:8D:A3:EE:96:A1:77:47:2F:86:BB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6501A2A94175F412D9AE221DA2F0013DEE14077E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/7459A5D0BF8F3BE479B08DA3EE96A177472F86BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Sep 2023 21:16:59 +0000
Certificate not after:    Fri 13 Sep 2024 21:21:59 +0000
Subordinate resources:    AS: 269036
                          IP: 45.178.172.0/22
                          IP: 190.83.43.0/24
                          IP: 200.188.218.0/23
                          IP: 2804:5e7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:01:a2:a9:41:75:f4:12:d9:ae:22:1d:a2:f0:01:3d:ee:14:07:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 15 21:16:59 2023 GMT
            Not After : Sep 13 21:21:59 2024 GMT
        Subject: CN=7459A5D0BF8F3BE479B08DA3EE96A177472F86BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:28:a5:68:5d:14:bf:ef:c4:ac:e6:de:79:49:
                    f1:cd:0e:68:6d:4d:f4:0a:07:36:3f:f9:22:bf:1e:
                    12:c3:7a:cc:a4:53:ce:e3:f3:fe:31:87:d1:61:ab:
                    5a:46:45:77:2a:90:58:ca:64:78:26:7e:b3:8d:18:
                    2e:dc:78:48:95:0d:bf:be:44:cb:e4:d9:8b:6c:1a:
                    4c:8f:0b:dd:d4:09:e2:b0:e5:1b:e0:e2:bd:fe:58:
                    f9:e7:4d:c3:fa:65:3a:ae:79:9a:7b:a6:c0:62:87:
                    94:01:40:6b:23:bd:33:2d:b3:c6:98:e8:7d:fe:23:
                    71:60:34:a7:15:14:d7:8d:6f:74:bf:ec:80:25:a5:
                    13:0e:ec:31:53:58:fc:76:07:3c:b1:a2:a5:ef:a5:
                    c3:13:bd:1d:95:dd:e5:e9:37:c0:97:71:7d:8c:b8:
                    e5:69:f9:fb:e1:dc:5b:69:54:69:0c:09:98:32:18:
                    2f:ac:d3:e7:16:56:dc:bb:b7:10:24:a2:d0:cc:dd:
                    bb:a4:c1:a8:ce:2c:d9:95:a2:0e:8c:21:c1:b4:65:
                    c2:aa:21:0a:c3:35:d2:b0:74:03:c7:6d:2e:24:85:
                    47:83:88:fb:06:3a:15:52:e6:b4:a4:22:bc:d0:e5:
                    39:92:1c:54:2d:bb:db:27:bc:e4:43:a1:4b:e5:c3:
                    4b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:59:A5:D0:BF:8F:3B:E4:79:B0:8D:A3:EE:96:A1:77:47:2F:86:BB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/7459A5D0BF8F3BE479B08DA3EE96A177472F86BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.172.0/22
                  190.83.43.0/24
                  200.188.218.0/23
                IPv6:
                  2804:5e7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269036

    Signature Algorithm: sha256WithRSAEncryption
         68:28:5d:c2:e0:39:a6:22:cd:64:51:25:98:e4:7a:56:de:27:
         88:87:7c:40:76:e3:57:47:14:af:e7:2b:08:d5:84:05:e1:91:
         e8:c4:ff:df:44:2a:fa:38:c4:b6:47:1a:d7:66:59:09:6f:f7:
         67:26:89:17:89:4d:66:e3:85:59:85:29:8d:51:d0:10:df:00:
         8f:14:65:9c:f4:00:41:0f:be:e8:b2:01:58:76:bb:49:3d:f9:
         73:a0:e7:7a:50:68:64:dd:2c:95:6f:f0:a6:10:f5:29:75:90:
         64:30:9a:14:a9:57:34:f8:52:51:26:e4:99:da:e9:dc:05:c4:
         fd:a8:1b:c4:e8:c6:52:2a:1e:e2:ee:d6:de:96:9b:4b:cb:97:
         c2:42:0e:7d:56:0d:7e:5a:f5:29:90:69:8e:e9:6b:02:14:ff:
         14:de:c2:96:b2:84:36:13:75:81:4e:87:89:b8:c3:42:b7:bc:
         10:c7:61:fa:65:3d:f0:a0:14:a0:86:8d:ae:49:4c:6e:43:39:
         3a:f7:d5:97:f1:cc:dd:8d:b0:1f:ae:ce:5c:5c:06:23:a0:4e:
         d9:42:c0:39:42:e1:d0:6d:6e:dc:42:05:a4:88:5a:72:37:5e:
         d9:3d:e2:b1:a0:b4:24:c5:ed:33:54:d1:99:de:9d:3d:b9:f6:
         e0:64:6d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org