Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A772725B4938BDA34B65B3A4EB813F2A77C8522.cer
File:                     7A772725B4938BDA34B65B3A4EB813F2A77C8522.cer (raw, json)
Hash identifier:          Ro+i/25lT81p0226sX4s7p3CED87QT0uvdYwgQjWsHE=
Subject key identifier:   7A:77:27:25:B4:93:8B:DA:34:B6:5B:3A:4E:B8:13:F2:A7:7C:85:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68E5CCD7E0A02713335C7126E327637AB7BC4C3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/0/7A772725B4938BDA34B65B3A4EB813F2A77C8522.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Nov 2023 10:14:42 +0000
Certificate not after:    Sat 16 Nov 2024 10:19:42 +0000
Subordinate resources:    AS: 269226
                          IP: 45.182.72.0/22
                          IP: 2804:6148::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e5:cc:d7:e0:a0:27:13:33:5c:71:26:e3:27:63:7a:b7:bc:4c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 10:14:42 2023 GMT
            Not After : Nov 16 10:19:42 2024 GMT
        Subject: CN=7A772725B4938BDA34B65B3A4EB813F2A77C8522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:29:ed:f9:7d:70:5b:a2:33:8c:57:de:a0:c7:
                    cf:7c:b5:b6:c8:56:e5:d5:23:35:0c:17:e3:24:13:
                    fd:39:e7:01:04:b5:f3:c2:d9:7d:af:51:48:ec:f0:
                    3c:3d:4f:08:eb:d0:1b:69:0f:7b:6f:c5:a4:b7:11:
                    96:09:d0:a4:3f:fe:0f:89:55:36:44:75:d5:7d:c7:
                    42:58:60:ef:19:98:05:d8:cb:73:a4:c6:b2:5e:32:
                    4d:69:e4:95:99:18:ba:ea:72:82:29:c9:01:1f:41:
                    57:6b:73:d5:22:fa:74:d2:f5:73:24:37:3b:cf:47:
                    99:49:9b:60:c1:59:db:7e:f1:49:64:0b:b6:38:26:
                    94:5a:4b:be:55:3b:65:f8:73:f2:e4:3c:07:a8:de:
                    4c:19:6f:55:e5:03:5b:bd:40:8b:13:e5:ef:c1:28:
                    fe:04:a4:7d:4b:a0:5a:96:b4:ec:00:74:9f:d5:05:
                    83:b2:d4:8a:6e:b0:6b:46:37:f5:0b:a0:2f:cc:6c:
                    10:c7:49:ba:51:99:cc:cf:4d:4e:d1:37:c6:23:1a:
                    c8:67:9c:b1:ba:a5:5d:42:8a:01:ee:36:47:63:65:
                    83:cf:17:e0:ba:4f:90:73:e8:c3:c1:8e:c2:fb:ba:
                    d2:2b:48:b1:34:97:d8:7e:26:c1:23:bf:c2:cd:69:
                    4e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:77:27:25:B4:93:8B:DA:34:B6:5B:3A:4E:B8:13:F2:A7:7C:85:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/0/7A772725B4938BDA34B65B3A4EB813F2A77C8522.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.72.0/22
                IPv6:
                  2804:6148::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269226

    Signature Algorithm: sha256WithRSAEncryption
         ac:0b:d8:1c:52:e6:43:7a:84:c0:20:8d:ea:9a:86:9b:25:34:
         42:35:0d:8e:5f:87:f5:d7:66:0e:c4:80:b7:29:0f:b5:9c:0b:
         85:2c:ed:0c:6b:9a:04:c2:0b:8b:55:38:63:ee:d6:b7:b8:5a:
         9b:41:c1:4d:60:b4:56:d7:e2:ec:be:e1:07:cf:61:22:0a:ae:
         60:bd:35:33:6f:66:e5:6d:50:cc:c3:69:9f:7c:09:00:ca:cf:
         a5:39:d5:7f:d8:92:64:c3:dd:0b:d6:5c:b4:92:10:18:c9:38:
         8a:67:44:6b:11:66:b8:ce:4f:34:0e:6e:bc:a7:2b:8c:eb:9e:
         9d:be:19:23:9a:86:6a:a5:cb:d9:ec:d7:ea:0d:3e:af:95:b1:
         ea:c3:bb:67:56:f6:54:81:ec:50:99:67:4a:65:4a:c2:ab:72:
         89:34:06:bc:62:35:1c:4c:e5:12:ee:99:84:ef:f5:95:83:8f:
         7d:8e:dd:0e:2b:b1:f2:4a:97:0a:c1:c4:1f:a0:7e:c2:3a:60:
         f5:99:49:b6:bf:ec:8b:1a:31:61:07:13:5d:a2:53:ab:e6:f1:
         f7:72:61:bc:73:fb:c5:66:1d:39:94:67:f3:df:b4:30:dd:59:
         03:c1:1f:ac:32:08:0b:02:84:fd:fc:4f:bb:1a:05:cc:31:bb:
         83:53:8b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org