Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.cer
File:                     7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.cer (raw, json)
Hash identifier:          Q16UA9lOpx/0Q+MC6pZHQMuXi6NRR2tso3pj8FBxRxo=
Subject key identifier:   7A:AF:88:25:92:9B:0D:01:AC:2A:8D:CD:98:94:CE:0F:93:33:77:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C0D29A882F6C2A3FCA16B2216C6ADA257153478
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Apr 2023 16:02:38 +0000
Certificate not after:    Fri 19 Apr 2024 16:07:38 +0000
Subordinate resources:    AS: 268088
                          IP: 45.168.100.0/22
                          IP: 2804:57d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0d:29:a8:82:f6:c2:a3:fc:a1:6b:22:16:c6:ad:a2:57:15:34:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 21 16:02:38 2023 GMT
            Not After : Apr 19 16:07:38 2024 GMT
        Subject: CN=7AAF8825929B0D01AC2A8DCD9894CE0F933377B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3c:05:f9:ee:d1:fa:6d:0f:44:56:a3:82:86:
                    42:73:8e:c9:04:f0:54:6c:5e:f3:87:bc:f2:fd:c3:
                    6c:fe:af:fd:90:df:27:7f:2d:e0:00:40:3f:28:9d:
                    c5:94:e6:b9:62:e4:80:a2:c9:bb:43:d0:5c:0b:38:
                    c1:f1:7e:c0:ad:52:62:0b:45:02:2b:35:02:a2:cc:
                    c3:b4:a6:78:2a:4c:f9:8f:a9:cd:25:e9:14:e6:29:
                    5b:7c:9f:db:74:d6:fa:49:a6:1e:e4:4b:3b:d5:47:
                    b7:1e:27:50:05:82:29:59:5b:f1:ad:9a:41:76:03:
                    7d:b0:87:7b:55:75:d1:e3:79:d6:2d:d4:ea:d3:c9:
                    fb:f7:a6:05:2d:89:65:66:b8:64:fa:c2:18:2f:76:
                    bd:cf:71:38:c6:c3:d7:2c:63:68:06:4d:ac:6a:53:
                    5b:23:f9:f8:bc:b3:1a:61:b6:76:81:c9:74:ed:e0:
                    a5:71:8a:04:ab:4d:55:cf:f5:84:17:13:84:e4:17:
                    84:40:3d:c7:1b:2c:4c:22:f5:20:07:59:8a:c4:25:
                    f4:6c:13:23:f1:29:e9:36:b3:e4:dc:b2:b0:b8:b2:
                    f3:f7:af:91:dd:62:8b:79:cf:d4:ec:b1:4b:ff:6d:
                    d1:6b:d7:ae:21:b4:3b:df:21:c4:58:da:95:1d:3e:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:AF:88:25:92:9B:0D:01:AC:2A:8D:CD:98:94:CE:0F:93:33:77:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.100.0/22
                IPv6:
                  2804:57d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268088

    Signature Algorithm: sha256WithRSAEncryption
         49:7b:c2:c4:27:a7:2f:33:a3:7e:a5:10:47:22:3c:38:5c:87:
         78:71:aa:d1:91:f1:93:d4:d4:72:43:19:3b:fc:69:a9:6a:2c:
         9c:5e:40:9d:c0:28:cf:73:9b:2e:46:1c:f2:63:0a:fa:fb:95:
         44:d9:17:d2:3d:c8:9b:0d:7e:aa:41:8c:76:f2:59:19:76:73:
         92:6b:d1:9a:54:39:28:47:36:7e:9c:4c:9e:1c:62:f5:10:9a:
         50:52:5a:9a:3a:89:7b:70:30:86:af:e6:00:c9:80:b7:cc:e2:
         90:52:f6:d6:d3:7c:ba:56:c2:38:51:26:d2:1b:17:3d:37:b4:
         29:cd:70:1a:d8:52:b9:c5:50:15:60:f7:24:e3:28:0e:d0:b0:
         a5:f1:77:52:ed:1d:3d:0c:b0:6c:ee:12:27:a6:0f:a7:13:8f:
         02:ec:bb:3e:4b:09:7d:1d:31:13:ae:aa:f6:aa:1a:38:4c:3a:
         e7:f6:73:f1:70:bf:b2:1e:a5:39:9a:37:3b:d9:93:b4:94:33:
         5c:78:56:05:d3:e1:f4:f0:cb:47:bb:be:ec:59:82:ce:50:42:
         ed:11:48:66:54:20:d4:ba:e5:c1:41:30:08:f4:b7:e8:81:03:
         ee:a1:44:2f:58:4d:ad:c9:13:22:7f:52:61:1a:fe:2d:91:9b:
         8a:b8:e2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org