Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A2637192A4CEEAB16A1CBF718A577CB450247B5.cer
File:                     7A2637192A4CEEAB16A1CBF718A577CB450247B5.cer (raw, json)
Hash identifier:          vUA47aRjvWTby40q6liQYxBMcsgKnVL9UcqPQ7XS9TQ=
Subject key identifier:   7A:26:37:19:2A:4C:EE:AB:16:A1:CB:F7:18:A5:77:CB:45:02:47:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C0EDCBA6E57C6741AF6EAFF911020EF20341AC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/7A2637192A4CEEAB16A1CBF718A577CB450247B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Jan 2023 15:24:35 +0000
Certificate not after:    Wed 24 Jan 2024 15:29:35 +0000
Subordinate resources:    AS: 271150
                          IP: 179.42.108.0/22
                          IP: 2804:7708::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0e:dc:ba:6e:57:c6:74:1a:f6:ea:ff:91:10:20:ef:20:34:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 25 15:24:35 2023 GMT
            Not After : Jan 24 15:29:35 2024 GMT
        Subject: CN=7A2637192A4CEEAB16A1CBF718A577CB450247B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:3b:d7:15:fa:8e:fd:81:70:d5:07:60:9c:
                    49:b9:d9:71:47:c9:d5:37:54:06:12:53:54:72:12:
                    15:da:95:d9:09:3c:b1:95:7c:27:af:1b:f0:94:86:
                    9e:93:53:7c:73:63:27:14:89:21:75:eb:7a:03:de:
                    c8:61:de:66:68:e4:41:1d:81:d2:ff:92:cf:4f:65:
                    a7:a8:4e:fa:0a:37:46:ac:c1:ef:0f:b7:00:a4:ec:
                    a9:41:f5:ee:3a:71:af:30:29:22:92:c4:82:be:40:
                    d9:20:d0:a1:0c:af:b4:ca:54:99:79:0b:8e:29:22:
                    12:b9:5b:f3:36:46:1a:cc:4c:ac:dc:f9:67:cf:02:
                    48:3c:77:22:d2:49:a4:67:66:76:4b:78:ce:7e:9c:
                    5b:89:cb:e8:85:b9:c3:b1:4c:47:db:6b:bf:ef:58:
                    c3:d8:34:a8:d9:40:51:c0:ef:b1:2f:41:88:07:7d:
                    77:96:31:0d:fd:3b:a8:45:99:4c:00:4c:4d:b5:56:
                    d3:28:34:0d:4a:f7:57:03:18:3b:89:b8:64:eb:da:
                    cf:3b:0e:42:9f:b1:9e:64:f5:76:38:81:fc:21:6f:
                    39:22:91:6a:ea:05:60:fe:5c:74:a3:c4:07:67:b7:
                    ed:cd:a2:7e:4a:d5:a6:34:f1:da:d1:9a:a3:88:d8:
                    f8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:26:37:19:2A:4C:EE:AB:16:A1:CB:F7:18:A5:77:CB:45:02:47:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/7A2637192A4CEEAB16A1CBF718A577CB450247B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.108.0/22
                IPv6:
                  2804:7708::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271150

    Signature Algorithm: sha256WithRSAEncryption
         08:b4:54:a9:e1:23:1a:15:4e:86:42:2f:3d:8f:74:c4:6a:29:
         9e:46:a6:02:f4:0c:1f:c1:3f:cb:01:ab:0d:8d:13:69:e4:87:
         62:60:f4:9b:ed:3e:a8:97:75:d7:24:c9:52:05:6e:4d:9c:47:
         21:e6:c9:52:0c:19:1f:fe:f2:9b:d3:45:10:0c:a1:4b:a4:ce:
         af:be:e4:08:6b:51:b3:bd:f8:54:03:5f:cc:4d:c9:1d:85:0f:
         19:31:a5:13:26:bd:37:f3:1f:81:50:a6:4d:f1:96:75:e6:c1:
         0d:99:ed:dd:32:e5:4a:34:19:95:07:7e:5b:20:23:54:f4:58:
         6e:f8:b3:51:83:fe:25:26:31:76:e8:c5:6c:63:40:e4:8c:ae:
         3a:44:b5:88:40:1e:a1:ab:d1:b1:12:11:a4:43:5e:db:3d:ee:
         0c:3e:19:e0:0e:d8:12:a7:e1:ad:08:6d:2b:04:c3:80:63:fc:
         da:cb:52:73:7b:0d:ec:f3:84:6d:9e:ca:88:1c:a6:3b:89:02:
         2f:b6:c8:21:ae:08:e7:79:54:ac:38:f5:9f:52:7d:46:94:aa:
         80:86:57:0d:a9:fa:a8:6e:e1:ee:59:24:38:92:df:6d:4f:ab:
         55:c0:25:7e:0c:29:46:1c:b8:b8:43:cc:53:2f:10:81:8a:92:
         75:3d:1b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org