Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A3A1FF9516DFB13106C14198759B14FBC43C3D0.cer
File:                     7A3A1FF9516DFB13106C14198759B14FBC43C3D0.cer (raw, json)
Hash identifier:          KaQ8C1xqtViOVmLo8QOEpYCXmC+yzOOjg0qbIbf3KP4=
Subject key identifier:   7A:3A:1F:F9:51:6D:FB:13:10:6C:14:19:87:59:B1:4F:BC:43:C3:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6961F5665237911730A24D6F21796B63301215BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/7A3A1FF9516DFB13106C14198759B14FBC43C3D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 07 Nov 2022 12:22:21 +0000
Certificate not after:    Mon 06 Nov 2023 12:27:21 +0000
Subordinate resources:    AS: 262290
                          IP: 138.118.16.0/22
                          IP: 186.226.200.0/21
                          IP: 2804:24c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:61:f5:66:52:37:91:17:30:a2:4d:6f:21:79:6b:63:30:12:15:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 12:22:21 2022 GMT
            Not After : Nov  6 12:27:21 2023 GMT
        Subject: CN=7A3A1FF9516DFB13106C14198759B14FBC43C3D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:d9:59:2c:3d:5c:b8:cd:b3:ad:15:f3:68:
                    45:5c:4b:dd:3d:38:96:1c:18:1c:b7:ae:75:38:5d:
                    d1:57:9e:82:65:42:97:ff:ea:94:f0:a7:13:32:57:
                    65:7b:d2:e1:1a:67:e0:d4:94:5c:82:38:ea:e8:4b:
                    23:9e:50:c2:81:bb:0a:61:07:f7:e3:b4:0e:e9:90:
                    88:cd:a9:bd:a6:e6:1f:fb:be:87:f4:1e:43:7d:ae:
                    55:a3:0c:1e:42:64:84:1b:55:5c:29:61:d3:c6:48:
                    c9:08:d2:bf:e2:9f:ff:4e:0c:82:ef:40:4e:3c:78:
                    c3:15:87:7e:37:6e:45:48:13:ee:cd:b3:1e:58:05:
                    e6:23:a0:98:36:11:93:d1:5c:ca:62:02:dd:b5:3c:
                    ff:8e:d9:5b:53:e3:28:da:c5:1e:04:78:13:63:9e:
                    cd:e9:9e:2e:3f:37:c2:c3:a9:7d:a6:d7:d4:48:db:
                    9a:00:cf:bb:a7:f6:99:b8:d8:b8:7a:26:d6:8b:68:
                    bb:fe:a8:2c:7d:47:61:af:09:10:8b:26:33:07:5f:
                    7a:71:07:21:32:15:e6:5c:06:1b:06:9a:2e:5a:37:
                    bb:03:65:24:87:12:ba:e3:37:37:61:42:60:cc:e0:
                    6d:1f:4e:2f:8b:f3:29:af:a6:0d:d1:61:a9:c9:e0:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:3A:1F:F9:51:6D:FB:13:10:6C:14:19:87:59:B1:4F:BC:43:C3:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/7A3A1FF9516DFB13106C14198759B14FBC43C3D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.16.0/22
                  186.226.200.0/21
                IPv6:
                  2804:24c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262290

    Signature Algorithm: sha256WithRSAEncryption
         9c:42:31:03:60:79:b4:0e:19:82:f1:5b:1d:67:2c:7c:d5:bd:
         08:db:69:6f:1c:43:20:2f:8b:38:ce:9e:17:e4:bc:23:01:3a:
         15:eb:17:da:b7:8e:1c:79:40:3c:45:93:b8:42:0a:31:6c:0b:
         e9:d1:54:b8:cd:89:88:50:dd:dc:7b:67:4c:1c:70:12:31:ee:
         53:32:eb:d3:47:59:93:ad:38:7b:ba:e3:bf:a4:10:de:3c:0e:
         07:60:b4:d8:8b:4e:f0:81:8f:bd:36:54:55:3c:76:14:1a:0a:
         6a:cd:ac:f6:1e:0a:c9:12:e6:e7:79:54:bc:f6:b1:23:49:56:
         aa:d0:6c:99:e8:c4:ff:72:63:d7:b7:7a:4a:ff:c4:43:ae:fd:
         5f:2b:6d:cf:97:cb:04:04:de:57:86:d8:cc:97:19:da:45:be:
         23:5f:ef:ea:98:0e:cb:6a:94:d4:d6:6e:09:70:c6:d5:f1:91:
         c5:24:e8:77:88:81:82:56:15:58:db:b1:3c:e4:7b:75:09:38:
         e2:bc:e7:92:c3:36:0d:7b:67:9f:57:f0:e8:f5:52:45:29:65:
         02:f7:72:6a:cc:ef:0c:73:23:d2:65:04:5b:0f:d3:b5:48:8c:
         70:69:79:5a:39:df:45:1c:88:56:ea:00:cd:68:9e:36:a9:8a:
         a4:49:87:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org