Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7591761A375FA28BE01555D39899D25E97FAD3A1.cer
File:                     7591761A375FA28BE01555D39899D25E97FAD3A1.cer (raw, json)
Hash identifier:          HkU3mZgPDEjRZ/J5+mmeiNY3qGHG6yCOe8tjFm5nOSc=
Subject key identifier:   75:91:76:1A:37:5F:A2:8B:E0:15:55:D3:98:99:D2:5E:97:FA:D3:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       663C839417C0E009C7A18736AA811F5E43EDA2C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/7591761A375FA28BE01555D39899D25E97FAD3A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 18:48:23 +0000
Certificate not after:    Mon 23 Sep 2024 18:53:23 +0000
Subordinate resources:    AS: 266168
                          IP: 160.19.244.0/22
                          IP: 2804:3bbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3c:83:94:17:c0:e0:09:c7:a1:87:36:aa:81:1f:5e:43:ed:a2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 18:48:23 2023 GMT
            Not After : Sep 23 18:53:23 2024 GMT
        Subject: CN=7591761A375FA28BE01555D39899D25E97FAD3A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:bd:3a:ae:59:f4:60:5d:ef:26:1a:07:5a:
                    6b:fd:b1:46:fb:50:6c:ca:1d:d9:15:bf:39:6b:4f:
                    f8:ad:8f:3d:08:76:69:33:f4:23:cb:d5:39:8b:e6:
                    8b:a6:d8:21:18:9d:f1:da:12:32:15:23:7e:19:87:
                    b7:ed:1e:28:b6:e4:fe:b3:36:bf:d8:93:bf:5f:26:
                    44:0d:cc:aa:1f:fe:eb:e2:c2:1c:df:ca:88:65:30:
                    22:2e:8f:1a:7e:ef:70:02:01:99:68:c5:40:7d:52:
                    60:d8:41:52:d3:29:87:df:ce:7a:83:4e:44:10:a6:
                    91:7e:40:d2:af:52:9d:d7:f1:10:69:6c:70:09:a5:
                    bc:1e:19:68:69:80:34:3b:4e:a4:65:4f:51:34:62:
                    f8:e8:da:0c:5f:d8:e9:34:d8:7c:d8:a6:b0:78:02:
                    9e:b9:28:7a:dc:8a:3d:1a:91:f2:91:f7:a3:00:cc:
                    31:5c:b6:9a:af:ac:fa:47:49:0e:c3:6b:64:50:0d:
                    2f:eb:81:59:7e:c3:e7:c5:c8:c5:cc:16:8c:df:7c:
                    e4:e9:96:97:48:0a:c1:8a:fb:fb:64:75:52:50:19:
                    62:30:33:7b:4a:b9:d1:1b:5a:83:03:03:1e:23:73:
                    2f:57:87:9f:66:b2:83:f0:69:bf:93:38:4c:0b:70:
                    67:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:91:76:1A:37:5F:A2:8B:E0:15:55:D3:98:99:D2:5E:97:FA:D3:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/7591761A375FA28BE01555D39899D25E97FAD3A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.244.0/22
                IPv6:
                  2804:3bbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266168

    Signature Algorithm: sha256WithRSAEncryption
         95:96:fa:aa:97:8d:da:96:59:ef:27:79:7d:ad:e3:66:a0:93:
         41:b6:34:31:e2:65:80:77:70:86:63:27:5c:ae:9f:84:27:2e:
         35:4a:28:92:5c:fa:06:8f:0b:b4:cb:fe:c3:12:90:82:c8:8d:
         c2:33:a4:26:3c:9a:2b:9b:d6:f5:5e:90:13:1c:d3:d5:af:96:
         89:2b:f9:dc:6d:da:8a:90:34:1a:a2:6b:b8:39:f9:fb:6b:51:
         b4:15:17:92:e2:05:14:4a:be:54:86:db:f5:97:fc:ab:b3:f5:
         8e:b3:b5:7a:8b:55:c2:a0:b3:db:49:b3:79:62:99:47:bc:13:
         72:c2:fb:0e:4b:2e:2a:2b:ad:11:6a:57:a8:19:0e:57:c5:60:
         50:6a:31:0b:06:78:f4:66:a2:ea:4e:fc:19:1c:60:32:90:59:
         6e:ab:b8:37:7e:bc:81:78:e8:d9:3e:8c:a8:9e:38:d8:06:ef:
         e4:51:c0:d1:0f:24:13:46:3a:1c:b8:cc:85:18:d8:ce:44:16:
         57:9c:1f:b6:89:d0:c4:1c:22:c6:26:cd:19:e9:af:19:f4:aa:
         b1:44:6b:dd:dd:f9:a5:42:05:f9:c3:ee:ba:a3:5c:b4:60:e8:
         4c:6f:3f:20:35:90:2a:86:4d:7b:bc:94:2c:a9:1d:3c:3a:be:
         30:a0:9e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org