Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A1B820FFE18C258AA721C331744D0F1984702BD.cer
File:                     7A1B820FFE18C258AA721C331744D0F1984702BD.cer (raw, json)
Hash identifier:          aiW57O/98HiQ1uySzWS2ekNvmxsWhBhZfxL74jQCE58=
Subject key identifier:   7A:1B:82:0F:FE:18:C2:58:AA:72:1C:33:17:44:D0:F1:98:47:02:BD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       37E9A7F09A5778C001B75537CBEF1A9A77F52A01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/7A1B820FFE18C258AA721C331744D0F1984702BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 21:05:38 +0000
Certificate not after:    Wed 10 Apr 2024 21:10:38 +0000
Subordinate resources:    AS: 267056
                          IP: 45.226.208.0/22
                          IP: 2804:4778::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e9:a7:f0:9a:57:78:c0:01:b7:55:37:cb:ef:1a:9a:77:f5:2a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 21:05:38 2023 GMT
            Not After : Apr 10 21:10:38 2024 GMT
        Subject: CN=7A1B820FFE18C258AA721C331744D0F1984702BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:2b:1e:c2:60:f3:31:72:7d:8f:f2:4f:50:
                    65:29:31:7c:ff:34:d0:14:a6:d2:30:fa:f6:e1:fa:
                    90:70:1f:8b:86:ff:52:19:80:2d:11:70:bd:a8:48:
                    32:3f:50:66:7f:df:88:0f:a8:a3:bd:c3:81:26:a4:
                    f6:dc:28:16:50:92:56:05:b7:18:c5:25:7a:33:87:
                    e5:69:f1:ab:a4:f3:76:37:6f:c7:a1:f4:be:0c:99:
                    ec:81:f8:8b:19:92:37:3b:31:aa:c1:44:b6:0d:51:
                    d4:df:c9:cb:a8:a0:5f:7a:de:d2:73:12:ff:4a:8b:
                    2d:1e:21:e6:3a:ba:9e:93:16:4a:35:22:92:a2:04:
                    31:d9:09:cb:c8:f3:45:d3:7b:3d:65:91:b9:79:3a:
                    00:72:a0:84:ff:c0:dc:72:33:4c:e4:a4:92:d5:b5:
                    7e:fb:a7:c9:7e:d2:49:6c:ca:55:94:9f:46:fc:6a:
                    f8:08:dc:c8:9a:8b:27:9b:62:bf:3b:fe:15:00:f0:
                    50:79:1d:9c:e0:2f:b4:ad:35:fd:31:d1:15:05:ad:
                    c1:f1:aa:8f:04:30:b5:0a:f3:c9:fe:43:b8:43:42:
                    cc:8d:e5:0d:5c:66:93:fb:e2:b5:b1:99:64:a7:0e:
                    8f:9a:23:ca:04:38:9b:3a:84:a8:0a:da:51:7e:fa:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:1B:82:0F:FE:18:C2:58:AA:72:1C:33:17:44:D0:F1:98:47:02:BD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/7A1B820FFE18C258AA721C331744D0F1984702BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.208.0/22
                IPv6:
                  2804:4778::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267056

    Signature Algorithm: sha256WithRSAEncryption
         1e:35:ee:0e:f3:17:4e:1e:4e:c0:6f:39:b5:e0:60:3c:c5:ee:
         a2:e0:46:b7:7c:a1:22:44:ea:df:eb:f4:d7:93:42:2d:c1:17:
         d2:cf:f4:c7:f7:7b:d6:2d:47:57:c4:81:ba:a9:64:62:fd:46:
         c8:6a:fb:63:4f:30:33:c4:2f:86:31:da:9c:0d:28:16:86:67:
         4d:3d:86:e5:62:36:ca:99:81:4c:2b:ca:4a:d5:9c:09:84:9e:
         3d:47:53:93:0a:84:65:b2:c8:fa:f6:86:4c:ca:20:64:d1:e9:
         78:31:a2:c1:f0:73:fe:ea:d1:29:17:d6:5f:f0:80:5a:7a:7b:
         3e:bc:54:05:1f:f7:2e:a6:5e:e3:fb:b0:bd:38:93:93:9e:e2:
         53:8c:bb:69:dc:99:6e:ed:75:92:e9:9f:a2:ee:eb:f8:70:b7:
         70:8c:cf:5c:6f:13:15:1d:76:30:14:70:c4:0f:0d:f4:97:32:
         52:11:a0:c8:84:84:f4:1b:c9:80:17:ca:73:4b:8d:d5:cf:59:
         62:b5:02:fe:ea:91:b4:d4:2f:81:a6:f4:6f:0e:cd:1d:0c:85:
         a1:1e:5a:43:68:db:54:45:e5:53:81:12:c9:41:cf:97:57:54:
         e5:8e:e4:0f:31:f8:39:0b:91:c8:3f:db:5c:82:0d:14:73:e6:
         b9:52:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org