Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer
File:                     7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer (raw, json)
Hash identifier:          YuBOQ90xDVZYtGdq9lMY/JRJ63iilCRKHZmrXin9smI=
Subject key identifier:   7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       300AD41CF7E8233ABC1D434ED0EB1BF3603F3F6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 01:19:33 +0000
Certificate not after:    Thu 11 Jul 2024 01:24:33 +0000
Subordinate resources:    AS: 267614
                          IP: 45.71.108.0/22
                          IP: 2804:43fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0a:d4:1c:f7:e8:23:3a:bc:1d:43:4e:d0:eb:1b:f3:60:3f:3f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 01:19:33 2023 GMT
            Not After : Jul 11 01:24:33 2024 GMT
        Subject: CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:65:41:e5:03:e8:5e:d2:62:ec:a7:3e:f1:
                    16:a2:17:2a:52:7f:96:ce:ce:eb:d3:9a:ae:db:66:
                    15:f3:c4:ac:97:69:87:59:14:40:75:34:42:f0:06:
                    fa:03:dc:d6:ba:a6:9c:04:ef:9a:91:c4:29:04:1b:
                    9e:1d:2c:5a:cb:5d:08:04:3d:40:7c:ed:16:73:a6:
                    8b:99:c0:dd:03:b9:bb:8c:a5:d1:ce:22:de:bf:c0:
                    bd:6e:ec:5a:7f:53:c5:d2:8f:ea:ae:3c:49:d9:2e:
                    0a:3a:07:20:8c:11:1c:fc:11:c2:b9:7b:2e:a1:14:
                    c2:d2:06:ba:aa:47:1c:43:da:c2:28:c5:98:2a:48:
                    d4:f1:83:04:3b:dc:5d:ae:0d:fc:50:16:8f:f7:ec:
                    45:2e:24:47:1d:23:38:ad:89:3d:ea:d0:5c:3b:23:
                    fd:ca:8e:51:7c:e3:2a:7c:ca:a8:d5:81:93:07:bc:
                    49:37:a6:02:d0:72:e5:36:27:92:9c:44:98:09:e6:
                    26:4c:8b:1b:4b:c8:cb:e4:0e:64:9f:5e:58:0c:1e:
                    c4:a6:b4:cb:6c:86:44:ef:3f:41:c0:04:4f:b4:a8:
                    13:9a:5e:d2:61:7d:8b:05:dc:36:64:61:b0:ca:dd:
                    61:36:c1:d6:e2:e3:d8:f6:51:0b:ab:63:64:06:f1:
                    d9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.108.0/22
                IPv6:
                  2804:43fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267614

    Signature Algorithm: sha256WithRSAEncryption
         05:9d:9a:5e:6f:90:33:c4:60:01:6d:36:9a:bb:2a:b9:4f:50:
         07:d1:92:99:59:42:bb:1b:de:cf:e0:07:67:a9:b6:ff:e1:db:
         82:68:03:a3:78:ec:77:8e:ff:ac:3a:23:90:91:2f:54:43:5c:
         8b:1d:20:ec:9d:f6:c0:2b:a8:9e:64:d6:42:63:c3:fd:9a:f2:
         73:0e:e8:2a:f1:3a:bb:e2:ed:e0:ee:62:3f:77:5e:c6:8c:64:
         36:8c:86:22:35:46:c7:31:b5:02:ca:7c:d9:c7:b7:8b:c5:9b:
         c3:75:38:25:c5:37:1f:ee:96:f1:eb:08:ea:fd:c4:11:39:da:
         6e:74:98:df:25:35:43:b5:c7:b2:d2:84:5f:1b:13:03:c1:a6:
         fe:7d:17:0c:ba:a4:3b:16:9a:54:a0:3a:3f:f1:1d:47:ab:e0:
         29:8f:d1:be:fb:8d:9a:c6:78:b4:83:12:08:9a:fd:f3:3b:25:
         62:fd:b4:05:3e:6e:52:0e:57:7e:8f:ea:af:1e:4a:f5:46:b7:
         dc:5a:50:f9:fe:b5:55:7c:16:7d:64:0a:6d:a4:54:f0:6d:b5:
         60:a1:b0:fe:36:17:d0:a6:b8:0e:6b:db:77:91:86:7b:ba:e8:
         28:ce:c6:c5:3f:1c:d4:cd:75:a1:25:8c:13:bd:a2:d8:8e:b9:
         55:92:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org