Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7B5759C375D861C7409D94AFE284881988AE6013.cer
File:                     7B5759C375D861C7409D94AFE284881988AE6013.cer (raw, json)
Hash identifier:          ULn808pryLxrqR2L/Uxn4uO7jU0bFs4MZWhcHMCTQYk=
Subject key identifier:   7B:57:59:C3:75:D8:61:C7:40:9D:94:AF:E2:84:88:19:88:AE:60:13
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4790681D99E90BB74C7601C7C35AD15F75919D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/7B5759C375D861C7409D94AFE284881988AE6013.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 17:43:13 +0000
Certificate not after:    Wed 19 Mar 2025 17:48:13 +0000
Subordinate resources:    AS: 267145
                          IP: 45.230.28.0/22
                          IP: 2804:48cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:90:68:1d:99:e9:0b:b7:4c:76:01:c7:c3:5a:d1:5f:75:91:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 17:43:13 2024 GMT
            Not After : Mar 19 17:48:13 2025 GMT
        Subject: CN=7B5759C375D861C7409D94AFE284881988AE6013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:cb:46:87:bf:06:68:96:73:88:f6:9e:4f:
                    bf:c5:0a:8d:e1:52:f9:59:0d:9f:98:14:1a:c1:8d:
                    22:84:44:83:1c:14:55:89:94:6a:ff:ed:3f:79:e3:
                    bc:b8:eb:07:b8:59:83:43:d9:82:83:71:9c:77:f2:
                    62:89:05:fb:c6:52:4e:93:05:69:e5:d0:5b:79:7c:
                    4e:d3:2d:a0:0b:ff:e3:7e:9e:fb:79:c4:56:1d:7a:
                    9c:9e:ec:27:3e:11:36:70:96:84:57:c9:31:4d:a1:
                    bc:19:eb:28:f0:a0:c7:86:70:62:0b:96:8d:ae:a2:
                    a1:59:f4:f4:cb:06:e0:ba:08:c2:69:5e:14:9b:95:
                    4c:23:e5:e2:7f:94:a7:d9:79:84:98:49:ee:45:f0:
                    e7:43:1c:c9:e5:cc:82:44:b1:02:12:9a:ce:31:d0:
                    4d:c5:f9:9b:53:12:52:d5:f6:cf:41:b9:7a:4c:5d:
                    72:5d:b7:90:5b:f1:93:d4:92:90:e7:0a:ce:0b:cd:
                    d1:84:46:57:ed:ea:7c:64:e2:ce:31:6e:cf:e0:6c:
                    3f:b0:0d:fe:7f:ed:bb:4f:81:37:6b:c2:0d:69:d5:
                    71:f3:6d:ef:2d:d2:06:a2:4b:cd:8c:88:21:eb:a5:
                    a9:8c:f8:93:7b:a6:fd:3a:11:e1:cf:96:19:16:e3:
                    73:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:57:59:C3:75:D8:61:C7:40:9D:94:AF:E2:84:88:19:88:AE:60:13
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/7B5759C375D861C7409D94AFE284881988AE6013.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.28.0/22
                IPv6:
                  2804:48cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267145

    Signature Algorithm: sha256WithRSAEncryption
         3e:23:6e:9b:c4:39:a9:52:0f:db:d9:68:ad:14:05:33:df:9a:
         56:65:41:f8:5b:5b:81:b1:29:aa:0f:f5:aa:4c:30:95:c9:42:
         90:a5:cf:87:a1:99:8c:02:95:b8:ca:7c:c1:e7:a6:85:87:34:
         69:02:09:55:a5:7b:0a:04:d4:47:1d:4a:08:af:d8:d1:bf:2d:
         0f:ed:7f:d8:40:0a:a6:9f:0a:f2:c9:fd:06:0b:b4:59:94:f7:
         bb:ad:b9:58:48:2a:4a:1d:95:76:f8:de:2a:18:15:2d:d0:c2:
         b2:5e:f9:63:50:42:62:5c:a4:41:f0:32:4f:51:6e:10:f1:ad:
         9f:e5:b0:06:28:22:0d:de:6f:25:a1:b5:50:e7:fc:3e:ae:39:
         6b:3b:12:20:ea:e4:76:dc:7e:c0:8f:3c:61:02:39:6f:1c:e1:
         32:02:49:fa:0a:af:47:8f:33:e1:3e:1d:47:cc:a6:7c:1a:40:
         83:b1:61:df:03:23:cc:50:70:9e:f5:d5:06:e7:db:a9:81:90:
         f3:96:eb:68:15:e7:26:77:fb:da:69:1c:0c:2c:59:c7:01:54:
         e3:d0:51:eb:3f:20:ba:c6:ba:fe:43:13:db:33:88:95:ad:5c:
         fb:04:ed:3d:8d:29:b0:2c:de:0f:75:26:8b:bc:dd:48:a8:81:
         f0:ba:22:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org