Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A42B134EE1B8311A558287574B51A2DBE589928.cer
File:                     7A42B134EE1B8311A558287574B51A2DBE589928.cer (raw, json)
Hash identifier:          JPy9axTpL9vHXxm9ahWcMURO3htL3qgkrtEYSNsQlrU=
Subject key identifier:   7A:42:B1:34:EE:1B:83:11:A5:58:28:75:74:B5:1A:2D:BE:58:99:28
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A10934F28952FAD8917B1FD5C62EFDD2AE5CA0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FpsEnLsgS1L39P5Tr7nukZJwwt9ChqY6v9ZpJtjQg29q/0/7A42B134EE1B8311A558287574B51A2DBE589928.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FpsEnLsgS1L39P5Tr7nukZJwwt9ChqY6v9ZpJtjQg29q/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 18 Feb 2022 19:23:46 +0000
Certificate not after:    Fri 17 Feb 2023 19:28:46 +0000
Subordinate resources:    AS: 264188
                          IP: 138.97.144.0/22
                          IP: 2804:23dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:10:93:4f:28:95:2f:ad:89:17:b1:fd:5c:62:ef:dd:2a:e5:ca:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 18 19:23:46 2022 GMT
            Not After : Feb 17 19:28:46 2023 GMT
        Subject: CN=7A42B134EE1B8311A558287574B51A2DBE589928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:da:a8:08:41:75:eb:a5:c7:da:c5:77:9f:57:
                    4b:ad:8c:75:ff:c1:3b:4c:c7:52:aa:b7:44:bb:60:
                    ea:8d:04:4c:8e:d1:ef:cb:a2:d2:a4:ee:89:7f:9e:
                    be:88:46:34:ee:9d:39:20:b1:cd:22:5e:97:c2:64:
                    d8:3f:a3:07:e1:a9:66:60:53:d1:d3:99:0c:66:76:
                    87:6f:9d:6d:6c:32:23:b9:54:69:81:e1:c3:dc:52:
                    64:e9:31:d6:5e:fb:66:fb:2e:1e:a0:c1:31:ff:f5:
                    34:b0:cd:aa:c7:c4:bf:78:ee:bc:b3:94:4a:bf:9f:
                    c4:96:dc:37:fe:21:16:9c:dd:1c:5e:b3:13:a6:18:
                    d6:bd:3f:cc:68:ac:86:8a:96:63:25:ba:1b:73:08:
                    f3:ae:af:69:6c:58:7a:f8:ce:c5:28:54:1b:55:87:
                    fd:9c:69:69:48:6e:e2:18:a7:00:29:ae:3e:ed:60:
                    ae:f4:b3:68:39:4a:51:09:b6:f1:c2:fd:78:52:88:
                    5d:9c:fc:09:74:4f:bc:a4:0d:36:3f:df:dd:68:93:
                    3d:80:ed:47:45:cb:b3:0e:51:c8:90:a4:d8:e7:f0:
                    35:65:cf:54:d3:d6:17:df:e2:cb:d8:aa:b6:c7:2d:
                    ce:34:28:0a:b4:f5:80:92:aa:7d:4c:c2:12:84:08:
                    3c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:42:B1:34:EE:1B:83:11:A5:58:28:75:74:B5:1A:2D:BE:58:99:28
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FpsEnLsgS1L39P5Tr7nukZJwwt9ChqY6v9ZpJtjQg29q/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FpsEnLsgS1L39P5Tr7nukZJwwt9ChqY6v9ZpJtjQg29q/0/7A42B134EE1B8311A558287574B51A2DBE589928.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.144.0/22
                IPv6:
                  2804:23dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264188

    Signature Algorithm: sha256WithRSAEncryption
         98:cb:85:c6:83:d9:17:fc:5b:4c:e7:ec:43:96:8a:ba:58:76:
         e7:3d:80:12:71:71:fc:72:2b:fb:4d:06:92:e4:b8:9b:bf:04:
         84:c0:d0:04:03:94:6f:21:75:ac:ce:1e:72:d3:f5:df:a9:16:
         ef:4c:ee:2f:76:d3:e6:8a:e9:23:57:9f:d2:04:8c:56:92:50:
         00:9c:00:f2:fd:7a:ee:21:0d:d7:48:93:93:b0:92:f7:27:28:
         bd:3f:51:17:cd:ba:13:0d:1a:7d:8f:24:7a:e8:56:66:c0:6b:
         3c:65:46:ad:7f:11:ec:bf:21:42:43:36:6a:18:3f:f8:e8:0f:
         b2:d9:09:b7:3a:0e:56:9b:41:39:68:57:90:71:26:b6:b8:ea:
         e1:25:01:d1:f3:2c:3a:18:56:87:90:44:c0:b9:52:8d:e3:cb:
         59:18:f5:a4:b9:c2:bd:b2:5a:bb:89:cc:14:82:09:90:3c:9e:
         fb:21:e9:75:35:24:8c:0f:67:56:46:8a:9e:f5:a8:c0:59:3f:
         39:18:58:4b:e0:22:f7:f7:81:9d:16:aa:4d:5b:a1:61:72:82:
         a2:82:fe:ac:2a:ba:d8:9d:cd:f5:10:c5:b6:71:90:ee:06:0a:
         1a:01:66:b8:85:e0:96:98:b6:fb:51:ff:ac:d3:2f:97:97:4a:
         c7:08:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org