Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.cer
File:                     7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.cer (raw, json)
Hash identifier:          B56+e6m7GVgrwVm/HRsTZybm4u1rqh/7FpT9izj6zeo=
Subject key identifier:   7A:3F:90:7A:7F:1E:82:A3:12:A9:EC:D2:C4:A3:E4:20:33:9C:2C:6A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       56185A3C0AD34377E0E84FA41D6C762D4BD2030E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Jun 2023 18:09:37 +0000
Certificate not after:    Thu 20 Jun 2024 18:14:37 +0000
Subordinate resources:    AS: 10954
                          IP: 161.148.0.0/16
                          IP: 189.9.0.0/16
                          IP: 200.198.192.0/18
                          IP: 2804:150::/30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:18:5a:3c:0a:d3:43:77:e0:e8:4f:a4:1d:6c:76:2d:4b:d2:03:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 22 18:09:37 2023 GMT
            Not After : Jun 20 18:14:37 2024 GMT
        Subject: CN=7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:58:71:8d:7d:1d:9d:04:89:a0:d9:f9:05:f1:
                    fd:ba:67:f6:f9:3a:e7:f2:1b:9d:5e:3a:ae:61:fe:
                    a6:4a:f2:f8:e4:77:07:91:cc:f0:22:3a:be:0b:23:
                    94:96:3a:c8:f2:03:50:21:03:cf:16:b8:6b:4f:20:
                    e8:64:77:dd:89:cf:19:7c:c5:86:92:d4:2c:c4:b2:
                    16:62:40:6c:c2:5e:dc:c7:89:7c:19:0e:25:66:98:
                    db:22:a4:00:5a:19:6c:a5:66:86:14:0a:ad:84:fe:
                    bc:dc:e8:36:57:ba:3a:73:7d:8f:66:ec:47:59:ba:
                    89:d8:59:5d:02:14:76:8f:dd:66:fb:43:d4:ea:b5:
                    53:d4:27:0c:b4:fc:9e:05:aa:6d:95:48:b4:36:c0:
                    af:84:9b:30:8b:4e:e2:34:00:ef:e0:82:c6:85:84:
                    bc:52:79:22:fd:5d:b8:31:c7:89:89:d4:a7:bb:1a:
                    c6:5a:f1:37:be:21:0e:a4:c4:45:ed:88:96:ee:0b:
                    2a:32:f8:63:6a:b4:d9:c3:1f:44:0b:8f:2c:47:5a:
                    3b:2b:1b:6d:22:19:a0:c4:11:d5:04:32:49:c1:6d:
                    f2:87:60:b9:fe:e8:fd:47:d2:09:9b:8f:d4:f3:2e:
                    e2:5a:d3:7e:e2:ac:4f:bb:73:b9:19:af:ac:ac:ab:
                    ea:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:3F:90:7A:7F:1E:82:A3:12:A9:EC:D2:C4:A3:E4:20:33:9C:2C:6A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.148.0.0/16
                  189.9.0.0/16
                  200.198.192.0/18
                IPv6:
                  2804:150::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10954

    Signature Algorithm: sha256WithRSAEncryption
         54:9a:d5:41:22:de:a7:1a:34:09:92:1e:41:29:7d:d1:0c:d9:
         ff:74:7d:db:ed:46:9d:20:e0:01:58:53:33:01:b2:4f:a9:c1:
         c2:b2:7a:4b:8e:46:f7:e5:a3:cb:98:d6:c2:09:bb:60:93:7b:
         53:08:f9:0c:5f:60:59:99:12:1a:81:51:67:2c:24:8f:e6:55:
         13:54:c8:18:08:62:43:05:07:f8:9c:03:c4:3e:5f:1d:30:1c:
         74:5a:50:b4:6a:3d:32:e1:99:0f:19:a3:67:50:38:9c:11:57:
         61:2c:35:9b:ee:4e:02:71:42:bb:fe:c2:d6:68:63:d6:2b:60:
         86:9a:1c:9e:18:b5:3b:a6:90:8d:3a:43:20:ea:6d:cf:39:a0:
         4b:a3:70:c1:fe:36:9e:e6:79:06:8d:90:d6:24:3d:95:dc:a5:
         9f:1e:2a:57:9e:12:ce:ab:f5:7f:39:99:13:40:7b:68:a4:c5:
         33:34:23:36:a1:91:15:7c:9e:25:64:46:af:67:45:c1:ca:87:
         a6:7c:53:23:15:3e:94:6b:57:86:9f:9d:18:a5:5e:bd:3b:50:
         0b:ff:86:b2:b9:36:81:0b:d9:7d:2e:be:23:1c:92:70:4b:00:
         3f:a5:ec:40:4b:42:ce:dd:33:92:5a:42:d9:fc:a3:4c:fb:ad:
         cc:5a:2a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org