Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A3BA57E30934B9B2BDD8F784422222B0C1ACB00.cer
File:                     7A3BA57E30934B9B2BDD8F784422222B0C1ACB00.cer (raw, json)
Hash identifier:          qW0gsdkg7/Rqgb82qeAPNdELBZ8aNWkVNMgjH93oK3I=
Subject key identifier:   7A:3B:A5:7E:30:93:4B:9B:2B:DD:8F:78:44:22:22:2B:0C:1A:CB:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       522E4DC518506462D1A656813C917F68978680EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eu5WvN6E9rPihRsqQnD2stgBeiVGv1VvupTr21VDQ1sk/0/7A3BA57E30934B9B2BDD8F784422222B0C1ACB00.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eu5WvN6E9rPihRsqQnD2stgBeiVGv1VvupTr21VDQ1sk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 12:00:48 +0000
Certificate not after:    Mon 23 Sep 2024 12:05:48 +0000
Subordinate resources:    AS: 273731
                          IP: 2804:8b6c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2e:4d:c5:18:50:64:62:d1:a6:56:81:3c:91:7f:68:97:86:80:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 12:00:48 2023 GMT
            Not After : Sep 23 12:05:48 2024 GMT
        Subject: CN=7A3BA57E30934B9B2BDD8F784422222B0C1ACB00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8f:1b:49:66:67:6d:e9:ff:f0:13:8d:35:1d:
                    e0:c5:b5:50:87:88:d3:21:82:67:6c:6a:f5:a0:29:
                    fc:14:3c:08:1f:20:d5:cc:c0:e4:be:14:be:86:eb:
                    09:1f:66:6b:71:9b:f2:21:ea:a4:c5:83:d1:de:35:
                    71:5c:12:a2:66:a3:48:a9:50:b8:9b:34:84:82:00:
                    5c:88:08:14:45:83:5b:01:8b:9d:4b:77:c9:ef:cc:
                    bb:61:d4:f8:e8:fb:1e:55:12:6d:4d:0f:e4:8f:05:
                    c2:63:e0:fc:34:6c:ac:53:e8:55:98:09:e4:65:fe:
                    39:96:16:03:50:4d:f4:d9:0e:da:1a:eb:66:73:bc:
                    74:9b:2e:37:2d:f0:af:a6:39:74:c3:a0:ac:56:5d:
                    71:1c:76:70:a1:a9:d2:fb:d6:18:54:d4:4e:12:92:
                    42:00:fb:1e:8a:15:a9:dd:3c:89:2a:4a:24:05:e7:
                    5a:7b:5a:c2:65:ad:b3:60:4e:d3:9f:df:e4:11:6f:
                    a9:37:83:d8:94:49:ef:28:9a:b5:c3:53:43:df:cc:
                    8d:47:fd:65:2c:a4:47:99:3c:21:ed:3a:0d:77:cc:
                    a8:e6:75:a3:f8:0f:71:49:2e:2d:43:74:62:81:79:
                    8c:70:f5:a7:f4:0b:e1:b3:b1:d5:97:61:5c:08:2e:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:3B:A5:7E:30:93:4B:9B:2B:DD:8F:78:44:22:22:2B:0C:1A:CB:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eu5WvN6E9rPihRsqQnD2stgBeiVGv1VvupTr21VDQ1sk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eu5WvN6E9rPihRsqQnD2stgBeiVGv1VvupTr21VDQ1sk/0/7A3BA57E30934B9B2BDD8F784422222B0C1ACB00.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273731

    Signature Algorithm: sha256WithRSAEncryption
         89:d2:09:72:f0:d5:ba:f5:c7:e6:50:6a:ef:c7:11:44:fe:11:
         1e:83:07:36:a7:f6:86:c4:3b:e9:53:88:9a:38:c5:cf:7a:9e:
         53:c6:b0:1c:c2:55:c9:55:af:88:ef:06:02:0d:cc:fb:e1:ec:
         21:5e:40:9d:58:29:cc:d7:47:85:7a:28:83:3c:a1:a8:52:3f:
         b3:b6:9b:59:16:9d:1a:bf:b2:7b:f5:46:0d:91:d9:fa:56:f6:
         bd:c4:bc:9f:77:f8:71:ac:92:7d:9e:0c:28:30:7d:8b:50:a9:
         f8:6d:bc:d7:f4:97:a5:92:0c:ef:a1:74:03:7e:f2:73:f0:11:
         ef:7a:45:ec:13:01:da:2c:be:f2:92:da:c1:59:ce:11:6e:9c:
         43:71:25:16:19:d6:68:d4:0b:f7:68:94:35:d2:6a:86:6a:cb:
         58:75:a9:17:b9:cb:d7:c1:31:32:28:47:49:58:2c:e7:59:71:
         ff:10:e5:e1:ee:0b:ea:d8:50:ad:a2:2a:3e:cb:25:e3:fd:d9:
         00:fa:15:74:eb:17:22:0c:7c:01:4c:b5:29:78:ae:fb:78:e6:
         3e:b7:be:45:e0:4a:46:06:0d:f7:e0:fe:81:95:42:58:a6:e3:
         9b:ed:86:dc:a9:d9:20:6a:2a:be:01:72:99:95:1a:ec:68:95:
         b1:86:91:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:31:57 2025 by rpki-client