Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.cer
File:                     7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.cer (raw, json)
Hash identifier:          eIO8kmMVR1G4we5QJU6dXcSzPZkI40sI5JborroJnyg=
Subject key identifier:   7A:6C:A5:F8:25:4E:06:00:BF:D3:A4:5A:EE:DE:35:C2:4A:71:CC:D1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1CE67F8B0C9A79E7033656F7F750833345D59DE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 12:03:42 +0000
Certificate not after:    Tue 07 Jan 2025 12:08:42 +0000
Subordinate resources:    AS: 265276
                          IP: 168.90.140.0/22
                          IP: 2804:2d58::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e6:7f:8b:0c:9a:79:e7:03:36:56:f7:f7:50:83:33:45:d5:9d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 12:03:42 2024 GMT
            Not After : Jan  7 12:08:42 2025 GMT
        Subject: CN=7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:51:5d:1e:cc:ec:fa:59:63:3f:45:1b:28:
                    a2:c2:41:06:78:3f:04:c8:f5:1f:38:3e:26:3b:58:
                    4a:ee:fb:40:84:22:17:cf:3b:b7:64:d7:a0:1f:0d:
                    0b:cd:4e:a2:80:0f:68:46:6d:0c:9d:7c:9a:be:00:
                    8c:49:99:2b:7b:c5:06:bc:a7:dc:cb:9b:a9:3b:46:
                    38:93:7e:71:38:44:c0:f7:20:69:4f:6b:c4:cf:6b:
                    1b:20:0f:d4:03:16:09:74:c1:c6:32:1a:27:64:42:
                    6a:df:49:f1:6f:bf:15:32:c4:31:27:4a:84:7a:60:
                    43:bf:1b:50:4e:56:95:17:99:51:b6:85:e3:2f:a2:
                    bb:75:0a:a3:b4:6c:6d:73:da:97:cb:ab:4a:28:d0:
                    70:69:b7:7c:e5:9a:68:57:a3:b3:3b:5d:69:9f:a4:
                    65:c7:3e:c3:c9:ff:41:91:43:b0:0c:4f:34:ac:7a:
                    12:d5:8f:75:de:1d:f5:2a:7c:3a:14:58:16:03:d5:
                    73:e1:d3:f9:7a:42:fc:ba:77:63:da:a2:5e:e7:52:
                    3b:de:e4:ba:81:68:94:63:5d:74:12:b1:53:fc:b6:
                    9b:20:46:74:63:1d:28:80:59:4c:0b:eb:d4:1d:b1:
                    55:5e:e8:ce:ec:73:b2:5c:9c:72:56:42:75:74:bd:
                    e5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:6C:A5:F8:25:4E:06:00:BF:D3:A4:5A:EE:DE:35:C2:4A:71:CC:D1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.140.0/22
                IPv6:
                  2804:2d58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265276

    Signature Algorithm: sha256WithRSAEncryption
         3c:e7:87:ef:c9:47:78:4a:49:50:60:f4:fe:aa:b6:e4:73:9c:
         ea:71:bb:4e:be:84:91:19:1f:8a:50:24:e9:e1:07:0c:ec:0f:
         9a:30:5a:45:ea:04:1f:1d:79:14:87:49:c0:42:ab:d1:a5:a1:
         ef:d7:84:74:b5:9c:54:54:ef:83:0a:79:09:e5:12:a7:d9:ad:
         be:5c:24:4b:04:16:d9:9c:c7:d3:e2:a5:a8:ef:38:77:ca:0a:
         42:bc:8c:40:ed:f8:19:9c:d1:d0:2e:8c:74:47:1e:ab:e1:e6:
         c8:d6:e9:42:63:2b:d1:1c:d0:47:48:51:25:06:bd:9f:51:ec:
         a7:b7:8b:8a:c8:8e:d3:25:e5:cb:24:f8:8a:35:aa:fb:1f:9b:
         28:29:24:8e:c4:b4:93:f2:e9:4b:e7:91:92:15:a0:40:ff:e6:
         c6:70:1c:f3:27:96:e4:97:7f:fa:d6:23:a4:83:cd:64:61:94:
         91:ec:4e:58:6a:42:59:fb:49:f7:d2:72:91:db:b9:96:39:17:
         c3:55:2e:2b:8d:f2:9d:30:75:7b:fc:fb:be:b0:b5:8d:7f:cf:
         ed:25:03:32:82:b3:c9:be:52:4b:ed:1a:c9:a0:34:45:60:27:
         04:b2:07:aa:26:27:fc:17:93:f1:c9:f0:c1:da:ea:ef:48:6f:
         2f:1a:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org