Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7B0D48B72953BA7287B21009BCDB530E46D53271.cer
File:                     7B0D48B72953BA7287B21009BCDB530E46D53271.cer (raw, json)
Hash identifier:          TaSA0EDzR0CY9cpMgFK+fmmoc7ig+q9l2nkYJngTu7M=
Subject key identifier:   7B:0D:48:B7:29:53:BA:72:87:B2:10:09:BC:DB:53:0E:46:D5:32:71
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1FD802FBB9E439514D1FDA9BDC4A64B8D64AE38D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7B0D48B72953BA7287B21009BCDB530E46D53271.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Apr 2022 11:16:43 +0000
Certificate not after:    Mon 17 Apr 2023 11:21:43 +0000
Subordinate resources:    AS: 28146
                          AS: 28224
                          AS: 262333
                          AS: 262688
                          IP: 45.71.224.0/22
                          IP: 45.227.192.0/22
                          IP: 45.238.108.0/22
                          IP: 45.238.164.0/22
                          IP: 131.100.96.0/22
                          IP: 138.186.116.0/22
                          IP: 138.204.72.0/22
                          IP: 143.208.12.0/22
                          IP: 143.255.100.0/22
                          IP: 170.0.168.0/22
                          IP: 170.84.56.0/22
                          IP: 170.245.216.0/22
                          IP: 170.247.192.0/22
                          IP: 177.73.188.0/22
                          IP: 177.75.128.0/19
                          IP: 177.86.0.0/21
                          IP: 177.125.32.0/21
                          IP: 177.126.192.0/20
                          IP: 177.154.96.0/20
                          IP: 177.234.132.0/22
                          IP: 179.127.128.0/20
                          IP: 179.127.224.0/20
                          IP: 179.191.36.0/22
                          IP: 186.236.32.0/20
                          IP: 186.250.88.0/22
                          IP: 187.45.96.0/19
                          IP: 187.87.208.0/20
                          IP: 189.126.48.0/20
                          IP: 191.36.132.0/22
                          IP: 200.229.176.0/20
                          IP: 2804:310::/32
                          IP: 2804:108c::/32
                          IP: 2804:1a80::/32
                          IP: 2804:1bd8::/32
                          IP: 2804:26e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d8:02:fb:b9:e4:39:51:4d:1f:da:9b:dc:4a:64:b8:d6:4a:e3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 18 11:16:43 2022 GMT
            Not After : Apr 17 11:21:43 2023 GMT
        Subject: CN=7B0D48B72953BA7287B21009BCDB530E46D53271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5f:1d:6c:c2:f7:80:30:24:64:3a:40:df:6b:
                    c3:61:d4:cd:a1:c2:e1:8b:53:76:e6:4d:8f:37:43:
                    c9:2a:39:36:4e:86:17:3e:49:db:37:5c:bb:97:22:
                    c9:7e:6a:28:60:4f:02:17:4b:9a:91:a1:7a:72:52:
                    0b:5c:6a:db:bd:a9:b1:4c:9a:ca:2a:eb:e2:57:9e:
                    0e:40:10:25:a5:56:56:4c:d9:f3:41:dd:e4:ee:5f:
                    99:be:d1:d0:fb:3c:09:27:a7:39:a2:28:a9:89:d3:
                    76:84:7f:e9:1d:21:1b:b4:5e:4c:11:62:f5:11:1f:
                    00:e1:46:e2:10:ea:56:a1:7c:7f:78:5c:ed:d2:38:
                    48:f7:23:52:b0:39:31:f5:05:a7:28:f5:76:c0:b2:
                    d5:dc:2e:54:f0:cd:91:cd:ba:ac:13:0a:49:3f:7a:
                    d8:89:93:96:f6:d6:78:cf:3b:15:3f:ab:f9:bb:03:
                    1a:55:40:f3:0f:f1:84:61:f4:8f:a5:64:03:4e:53:
                    a8:74:5f:a7:39:4c:84:90:f9:d6:97:53:0c:f8:4a:
                    97:7a:20:d6:e6:b8:76:41:04:ab:67:bb:cd:3b:5d:
                    9e:46:11:31:0f:3f:2d:f0:ab:ca:ce:bc:9b:57:c2:
                    69:23:03:32:8b:75:57:e7:f6:60:2c:f2:24:7b:e0:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:0D:48:B7:29:53:BA:72:87:B2:10:09:BC:DB:53:0E:46:D5:32:71
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7B0D48B72953BA7287B21009BCDB530E46D53271.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.224.0/22
                  45.227.192.0/22
                  45.238.108.0/22
                  45.238.164.0/22
                  131.100.96.0/22
                  138.186.116.0/22
                  138.204.72.0/22
                  143.208.12.0/22
                  143.255.100.0/22
                  170.0.168.0/22
                  170.84.56.0/22
                  170.245.216.0/22
                  170.247.192.0/22
                  177.73.188.0/22
                  177.75.128.0/19
                  177.86.0.0/21
                  177.125.32.0/21
                  177.126.192.0/20
                  177.154.96.0/20
                  177.234.132.0/22
                  179.127.128.0/20
                  179.127.224.0/20
                  179.191.36.0/22
                  186.236.32.0/20
                  186.250.88.0/22
                  187.45.96.0/19
                  187.87.208.0/20
                  189.126.48.0/20
                  191.36.132.0/22
                  200.229.176.0/20
                IPv6:
                  2804:310::/32
                  2804:108c::/32
                  2804:1a80::/32
                  2804:1bd8::/32
                  2804:26e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28146
                  28224
                  262333
                  262688

    Signature Algorithm: sha256WithRSAEncryption
         24:c9:0f:cf:c1:1b:e7:bb:b9:97:4c:a1:0e:e1:49:d2:83:40:
         55:7c:da:4a:25:92:cb:0c:48:8a:82:bc:23:b4:f3:dd:3b:6a:
         f7:a6:a7:5c:83:3f:fa:53:44:c8:c9:50:10:c2:b6:44:51:cc:
         a8:df:0e:9a:4b:74:db:5e:01:99:23:a7:ff:58:62:ed:a4:bf:
         19:32:f8:84:33:4d:c8:07:66:2d:ed:3e:54:a1:c0:91:d6:ba:
         1a:69:c6:3f:ea:0c:f2:77:70:27:b6:6c:b2:92:ce:f8:4a:7d:
         21:93:a8:7e:4d:67:71:92:70:82:57:21:5f:9c:b4:de:30:82:
         41:da:ce:9f:d9:b2:09:f9:f9:b2:48:73:4b:ea:41:62:84:bf:
         af:96:2d:ab:da:f6:0f:40:7c:aa:7d:24:9c:82:f1:9c:38:aa:
         0b:da:6e:b0:2f:f1:37:32:67:ce:3e:80:d4:4e:b7:de:2a:c5:
         c7:02:74:d0:56:33:fd:94:e8:91:e3:36:d0:f5:63:c6:f1:93:
         db:3f:4a:34:75:15:75:42:fb:d3:10:8c:89:8d:79:a8:76:41:
         ad:f9:ce:9e:c4:79:66:03:c9:c2:b3:77:a7:ac:9f:80:89:7e:
         aa:a3:05:35:63:7a:72:00:58:f8:1f:f2:34:4c:88:03:c4:b4:
         9c:3f:66:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org