Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7C2B62DDAC7CD557627D3A7FA657743CC2942997.cer
File:                     7C2B62DDAC7CD557627D3A7FA657743CC2942997.cer (raw, json)
Hash identifier:          saadCf9WO/f6Tpj13ooj/Mm9bO6CAl/7UdeArMt9Q5s=
Subject key identifier:   7C:2B:62:DD:AC:7C:D5:57:62:7D:3A:7F:A6:57:74:3C:C2:94:29:97
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4561D06C9EE93795756A0E106D7DEE23C526CD6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/7C2B62DDAC7CD557627D3A7FA657743CC2942997.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 02 Mar 2024 13:00:58 +0000
Certificate not after:    Sat 01 Mar 2025 13:05:58 +0000
Subordinate resources:    AS: 268332
                          IP: 45.238.136.0/22
                          IP: 2804:4f88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:61:d0:6c:9e:e9:37:95:75:6a:0e:10:6d:7d:ee:23:c5:26:cd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  2 13:00:58 2024 GMT
            Not After : Mar  1 13:05:58 2025 GMT
        Subject: CN=7C2B62DDAC7CD557627D3A7FA657743CC2942997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:43:92:a6:32:b8:eb:d3:51:b4:1b:d1:bb:
                    50:21:88:9c:00:16:01:d7:78:f0:73:e5:0d:f5:6b:
                    8b:ed:6f:fa:0e:2e:06:a6:27:e0:c2:97:b3:bf:e4:
                    20:df:ed:2f:e5:e0:3f:16:16:3c:db:0a:d3:d3:e8:
                    db:5c:72:8b:c7:5e:c0:51:50:19:de:da:bd:5d:6e:
                    ca:b2:1a:da:46:6e:ce:66:5a:50:b6:e5:80:fd:32:
                    47:08:74:a5:9c:5f:87:79:49:3b:04:c5:61:08:4a:
                    e8:22:3a:ad:42:41:9a:f7:64:dd:d5:12:91:69:8d:
                    2e:35:a8:22:b5:a6:3d:b7:db:18:7b:29:fd:cc:5f:
                    e7:4b:f1:2c:bd:52:ae:b1:97:47:c8:b8:11:e0:c5:
                    57:e4:62:57:2f:4b:92:a1:b6:01:67:cc:08:af:7b:
                    a3:ee:a8:9c:ea:54:0e:f7:e3:99:4b:39:9a:ee:f5:
                    49:ca:5f:c8:b6:18:17:ea:c7:e0:1d:b8:6d:88:bb:
                    ee:87:33:13:9c:ad:53:71:da:35:cf:67:bc:65:80:
                    4d:5b:86:78:47:32:85:e1:5b:a4:71:5c:4f:9c:a1:
                    3b:97:37:32:af:21:ae:2d:02:37:4d:b2:8d:e6:bc:
                    f7:1f:c3:19:bc:5c:4a:62:49:84:ed:bc:e6:e3:cf:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:2B:62:DD:AC:7C:D5:57:62:7D:3A:7F:A6:57:74:3C:C2:94:29:97
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/7C2B62DDAC7CD557627D3A7FA657743CC2942997.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.136.0/22
                IPv6:
                  2804:4f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268332

    Signature Algorithm: sha256WithRSAEncryption
         47:a9:e1:08:4c:3e:87:e0:dd:f2:fc:4f:0c:d7:4f:2c:28:4f:
         6b:a4:3b:91:12:74:40:b9:1e:9c:93:ec:e7:92:65:e8:09:ba:
         06:f3:28:e7:34:3b:a5:88:a0:a9:56:74:1c:ba:ee:0e:70:42:
         98:a8:f1:69:dd:51:da:ac:b5:df:8b:d9:83:a1:43:ba:cf:94:
         7d:ac:44:ec:15:16:38:2d:7e:90:99:77:ca:29:84:5e:9f:d7:
         87:63:81:e8:cb:b1:45:d8:4f:76:84:26:f4:96:92:f4:25:a0:
         fc:7e:b4:29:0f:70:17:f2:04:06:1e:a2:6a:bf:73:b8:e0:25:
         98:ea:67:8e:4c:4c:c8:21:4a:0c:22:08:68:57:e0:7c:77:ed:
         83:05:82:aa:03:ff:a9:46:4b:95:5c:32:c9:7c:45:f5:56:27:
         e3:85:e5:fc:08:fe:16:96:ae:1c:40:e1:f3:50:02:bb:ed:f4:
         62:36:b5:c2:80:fd:e3:5e:a2:67:ce:9c:3c:e8:25:4f:c9:08:
         6b:dc:23:81:65:f0:18:5b:eb:8b:b8:f5:c6:4f:a9:2c:eb:61:
         4f:9c:77:43:4d:7a:5e:22:a3:91:5c:35:38:ff:38:4c:e8:3a:
         61:7f:7c:f8:5d:42:6e:52:87:5b:22:f5:2b:a9:ba:1d:84:6a:
         93:4f:f2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org