Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A.cer
File:                     7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A.cer (raw, json)
Hash identifier:          OQ+5/c2hjRtJHFExhoLeuZeRD7KlDs0XJiKv+1nuX7g=
Subject key identifier:   7A:2D:15:9B:5A:87:EF:DC:2D:93:1E:E9:F5:88:A9:32:E1:C9:DE:5A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5ABC32F0F96221B099FC2CB381E4BFAE4082AC99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Aug 2023 13:55:09 +0000
Certificate not after:    Wed 31 Jul 2024 14:00:09 +0000
Subordinate resources:    AS: 28292
                          IP: 177.54.48.0/20
                          IP: 179.127.80.0/20
                          IP: 189.28.176.0/20
                          IP: 189.124.112.0/20
                          IP: 2001:12a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bc:32:f0:f9:62:21:b0:99:fc:2c:b3:81:e4:bf:ae:40:82:ac:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  2 13:55:09 2023 GMT
            Not After : Jul 31 14:00:09 2024 GMT
        Subject: CN=7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d3:5d:a7:ff:e7:1e:4a:38:d6:f7:ee:7c:9d:
                    c7:34:31:01:be:6e:f5:96:b1:6b:84:34:e4:ee:ab:
                    f3:21:ed:7a:ee:bc:01:e7:ff:9c:f9:1d:e7:70:46:
                    b9:8f:cf:e4:63:c9:77:3b:fb:b5:58:64:1a:e2:88:
                    46:0e:21:09:dd:63:8b:91:fe:f6:58:34:bd:7c:43:
                    e6:f7:3b:48:bb:2c:54:9f:94:ee:65:b9:6e:b5:bc:
                    09:17:49:ae:ac:10:ee:11:33:ad:5c:ed:98:c1:57:
                    90:ab:2d:6a:d5:55:11:47:18:78:db:2e:04:95:57:
                    a5:33:18:b0:1b:a3:69:81:0b:ec:5c:86:64:74:8e:
                    c4:e7:08:e1:72:29:e4:be:51:9a:60:b6:e8:a3:68:
                    2f:8b:7a:5e:24:73:2c:a9:6b:b3:e2:72:e1:43:f3:
                    61:9d:7b:73:28:ce:30:9b:e8:94:b0:b0:11:ed:b1:
                    2a:67:81:63:ba:ab:b5:c4:d7:a0:63:e6:e4:0b:b0:
                    b1:46:db:39:0e:ec:b3:a2:82:22:e5:52:b7:ae:cf:
                    79:4b:ad:e1:52:88:7f:5b:9f:17:93:b1:b6:51:9b:
                    5d:72:1f:55:7b:35:97:fb:97:e2:c8:aa:92:af:13:
                    60:ab:d9:73:21:88:9c:c5:bb:d6:fa:14:94:49:03:
                    d1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:2D:15:9B:5A:87:EF:DC:2D:93:1E:E9:F5:88:A9:32:E1:C9:DE:5A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.48.0/20
                  179.127.80.0/20
                  189.28.176.0/20
                  189.124.112.0/20
                IPv6:
                  2001:12a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28292

    Signature Algorithm: sha256WithRSAEncryption
         0c:46:f5:c0:f4:d1:6a:f5:52:3c:3b:35:21:34:04:3d:37:3b:
         0a:93:f6:56:fa:82:3d:7d:e4:ac:16:f5:37:58:83:d3:87:8f:
         a4:7f:a8:0c:43:18:84:f6:25:10:40:52:1b:6f:9a:38:2a:81:
         11:b8:56:81:96:91:70:29:b3:09:8e:6c:67:13:9e:c2:9e:a5:
         91:85:6e:b9:13:7c:94:ae:54:88:da:78:e8:78:33:d1:d7:48:
         79:49:78:d4:0d:09:62:9b:a3:e3:a8:21:ee:74:b9:73:68:09:
         2b:33:bd:76:6e:46:e8:bb:f4:cf:55:54:dc:8e:e0:cf:81:bc:
         ce:5a:98:0e:b9:17:c2:86:41:72:70:eb:7c:66:e8:e6:d8:89:
         33:45:0b:f9:5f:34:08:0c:c9:a5:5e:07:a2:4b:5c:5b:68:0b:
         a0:64:02:90:9a:07:ba:2a:28:8c:33:cc:9c:b0:83:94:59:17:
         b5:95:fc:ea:5e:56:01:05:0d:a5:58:76:27:a6:06:64:10:bc:
         d4:8b:39:aa:8b:75:33:9a:d5:f4:cb:ca:fa:7d:bf:a1:ee:90:
         e4:aa:c2:c7:74:26:90:c8:38:fb:00:b6:65:13:7a:d6:bf:99:
         52:ad:cf:d5:a9:01:94:b9:fd:17:aa:6e:90:c9:f5:dc:e5:13:
         f3:63:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org