Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D.cer
File:                     7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D.cer (raw, json)
Hash identifier:          M9BgmnopRrY3mMTeSm0YJiq/82+nHzm9gwjH6FbPAnQ=
Subject key identifier:   7A:8A:52:E1:0C:E2:8F:02:16:87:2E:59:AD:50:CA:6A:E4:BC:4A:6D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7069AAE27057D4CA64646FC5C487454E3A29F525
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0/7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Jan 2023 00:16:02 +0000
Certificate not after:    Tue 09 Jan 2024 00:21:02 +0000
Subordinate resources:    AS: 268170
                          IP: 45.170.208.0/22
                          IP: 2804:5920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:69:aa:e2:70:57:d4:ca:64:64:6f:c5:c4:87:45:4e:3a:29:f5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 10 00:16:02 2023 GMT
            Not After : Jan  9 00:21:02 2024 GMT
        Subject: CN=7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8e:a3:58:74:40:83:83:ac:3c:95:02:09:d2:
                    50:f5:e3:ee:cc:3c:3e:82:ab:91:69:4c:f7:44:14:
                    1d:6c:d7:10:1d:bb:fd:6f:1c:b4:0b:b5:df:79:00:
                    eb:e4:68:49:fb:c6:da:45:78:c8:48:c3:96:ae:f7:
                    8b:d8:12:e9:a3:a6:f3:38:4a:40:19:4d:bc:01:43:
                    e9:db:7d:b9:d5:cd:24:20:42:af:2e:88:f1:0d:97:
                    39:9f:c0:26:80:cf:98:b0:4b:2c:43:cc:ab:e4:6d:
                    96:99:20:25:1a:6b:2e:70:5d:e8:89:8b:41:fd:f0:
                    8d:38:0d:92:fc:4d:66:2c:62:e8:34:c7:4f:c4:80:
                    c2:3b:9d:28:d8:59:26:2a:ab:b0:6a:e2:97:9d:52:
                    46:5c:a2:a6:d1:9e:e2:f2:3e:04:36:c4:ee:cc:29:
                    43:bc:97:9c:73:02:04:1b:d1:98:ae:54:08:d1:28:
                    2b:72:d6:cc:2f:d0:ac:9e:79:85:48:89:24:15:c8:
                    e7:92:15:5b:95:11:68:1e:c2:1b:12:67:05:6e:86:
                    c3:b7:ed:28:c6:0b:62:a8:d0:e8:4b:3e:5a:e2:47:
                    a7:d9:a8:23:fd:64:2c:4a:97:07:b8:c0:a4:de:eb:
                    94:61:45:f6:57:82:a7:ee:78:55:14:a2:cf:13:30:
                    6c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:8A:52:E1:0C:E2:8F:02:16:87:2E:59:AD:50:CA:6A:E4:BC:4A:6D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0/7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.208.0/22
                IPv6:
                  2804:5920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268170

    Signature Algorithm: sha256WithRSAEncryption
         25:64:70:0a:28:2d:8c:2d:05:66:46:58:b3:8b:91:17:1a:50:
         4c:87:f8:16:cb:6c:ff:5d:af:c0:4f:49:36:c2:f2:5e:57:b4:
         bd:8b:3d:76:a6:38:45:31:0a:20:04:bc:7c:21:cc:5f:6f:5c:
         7e:a1:6a:c4:9a:23:40:c7:e4:e2:ee:fe:4e:84:ec:d5:e1:4e:
         ce:3b:97:59:e9:80:6e:5c:c7:dc:f4:c4:71:9a:78:ea:3f:3d:
         a7:3f:c2:1b:22:9f:c4:36:ef:a2:8f:02:37:79:e5:6c:87:30:
         3a:54:a8:89:3f:75:d1:3d:19:07:b8:cd:9b:22:24:50:54:71:
         5d:2d:53:55:7d:b4:af:11:74:f4:21:fd:d9:94:44:7f:a8:4d:
         f8:19:cf:3c:5f:69:ce:4c:8d:e4:dd:0c:97:10:f2:4c:12:fa:
         8c:3d:36:80:8c:fd:42:3e:57:0b:47:0e:0f:6a:4b:f4:5d:b2:
         c6:bd:cf:57:aa:b6:2c:8d:c5:74:ff:ba:b4:4a:59:48:e3:59:
         8b:04:f1:7a:e0:9e:0a:d0:bf:df:50:a1:dd:81:d6:2d:41:e2:
         1d:97:c4:18:59:f5:63:8c:f7:ac:cd:00:c3:b1:ff:48:a3:cc:
         aa:7b:98:3f:ff:e8:e7:3c:51:b4:53:eb:c4:2f:4d:5e:0c:d2:
         bd:26:bc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org