Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7ABB6B59054A649CACCC9CEA32D96A4D579F1370.cer
File:                     7ABB6B59054A649CACCC9CEA32D96A4D579F1370.cer (raw, json)
Hash identifier:          /T5VrhLqeU7Wrxov6tI+M5YYob9juKUeFwvospo2iz0=
Subject key identifier:   7A:BB:6B:59:05:4A:64:9C:AC:CC:9C:EA:32:D9:6A:4D:57:9F:13:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       333E70AB4793DC8A31285A5C089C51B6B23249D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/7ABB6B59054A649CACCC9CEA32D96A4D579F1370.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Jun 2023 17:07:06 +0000
Certificate not after:    Mon 03 Jun 2024 17:12:06 +0000
Subordinate resources:    AS: 28669
                          IP: 45.234.40.0/22
                          IP: 168.227.12.0/22
                          IP: 170.238.116.0/22
                          IP: 177.36.160.0/20
                          IP: 177.107.80.0/20
                          IP: 177.137.64.0/20
                          IP: 179.189.224.0/20
                          IP: 186.195.144.0/20
                          IP: 186.225.96.0/19
                          IP: 187.108.32.0/20
                          IP: 187.111.160.0/20
                          IP: 189.8.80.0/20
                          IP: 189.28.144.0/20
                          IP: 191.241.224.0/19
                          IP: 201.46.16.0/20
                          IP: 2804:290::/32
                          IP: 2804:7cc::/32
                          IP: 2804:4bec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3e:70:ab:47:93:dc:8a:31:28:5a:5c:08:9c:51:b6:b2:32:49:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  5 17:07:06 2023 GMT
            Not After : Jun  3 17:12:06 2024 GMT
        Subject: CN=7ABB6B59054A649CACCC9CEA32D96A4D579F1370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:72:da:30:4d:00:b3:25:14:72:da:d6:34:41:
                    01:89:7f:47:0a:df:a2:c1:86:cd:10:a2:38:90:1f:
                    0f:30:e4:e6:ff:26:93:43:97:23:1f:cf:82:c3:a9:
                    f7:3f:a5:41:1c:00:0b:1a:3c:8f:c3:0a:99:70:b8:
                    15:95:74:34:a8:41:65:a2:0a:da:d3:05:d4:e1:d3:
                    4f:65:9a:e0:59:a5:73:41:73:70:36:9a:4e:ac:de:
                    61:89:5f:5a:5d:48:7e:93:37:2d:df:d7:46:f1:69:
                    64:2f:f1:5e:ad:e2:34:44:81:2b:5e:bc:c8:92:15:
                    0f:d6:20:8e:d0:b5:ba:92:83:17:6e:f1:b7:c9:d1:
                    52:b2:b0:b4:5a:0b:05:57:93:d3:26:5a:4a:ac:99:
                    9b:9a:30:bb:f8:97:78:0a:f7:35:0f:49:38:61:5d:
                    73:6e:96:ab:d6:5a:21:eb:87:d9:c7:6f:50:6c:7c:
                    97:4b:9e:a0:f1:ef:d3:d4:e4:6b:6e:a4:d7:f1:19:
                    68:37:c1:3f:49:fe:da:0f:f6:b4:0d:66:43:ab:2d:
                    83:26:55:9b:2e:25:f5:84:16:10:f6:f9:87:f0:fb:
                    d4:2d:c5:98:ea:46:cb:19:7c:f4:30:2b:6f:62:34:
                    c5:ac:b4:16:f1:1c:ec:cb:1a:f5:8f:76:1c:84:ca:
                    f5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:BB:6B:59:05:4A:64:9C:AC:CC:9C:EA:32:D9:6A:4D:57:9F:13:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/7ABB6B59054A649CACCC9CEA32D96A4D579F1370.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.40.0/22
                  168.227.12.0/22
                  170.238.116.0/22
                  177.36.160.0/20
                  177.107.80.0/20
                  177.137.64.0/20
                  179.189.224.0/20
                  186.195.144.0/20
                  186.225.96.0/19
                  187.108.32.0/20
                  187.111.160.0/20
                  189.8.80.0/20
                  189.28.144.0/20
                  191.241.224.0/19
                  201.46.16.0/20
                IPv6:
                  2804:290::/32
                  2804:7cc::/32
                  2804:4bec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28669

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:0b:b9:c4:6a:3b:5a:d6:9a:7b:42:43:15:a0:87:70:f0:
         7f:f5:73:32:30:64:7a:34:84:e0:f6:a9:c0:83:1f:1a:8e:52:
         c6:12:6c:99:6c:06:c2:c3:f0:43:49:a5:76:8b:3f:72:ac:a9:
         6e:e5:e2:b9:3b:90:a6:f6:7c:1b:a0:c3:95:23:d5:d9:75:9b:
         76:82:68:32:88:5a:a2:e9:07:11:77:c7:02:0b:c2:5c:be:27:
         0a:db:c6:13:78:c3:33:01:6f:e0:c9:f7:aa:36:e0:03:76:65:
         69:c6:49:e1:3a:e4:89:b9:ea:d8:e5:12:79:23:34:a4:d3:de:
         c2:ea:a8:27:c9:64:32:c3:71:8a:f9:2f:b5:d0:c8:ba:3b:d3:
         97:7f:db:b1:5e:68:1c:6b:b8:7c:e2:30:2a:db:6a:e9:12:06:
         b1:7c:bb:ea:ac:77:58:79:42:68:bf:59:ad:fd:b1:65:86:f1:
         fc:83:94:3f:cc:d2:bb:ea:b0:72:23:a1:6d:f3:26:b3:40:02:
         dc:0d:c3:5d:e9:8f:41:0a:9c:ca:cd:1e:7b:83:bd:4b:0f:6b:
         80:13:c0:30:70:5e:ff:ce:09:79:b6:e4:54:b8:a7:96:1c:50:
         4b:96:9f:ec:cc:f0:0c:44:5c:86:3c:d4:aa:cd:94:13:28:69:
         de:1a:07:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org