Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73.cer
File:                     7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73.cer (raw, json)
Hash identifier:          iHyXmGbtStE/I7jhUGDR5jdFIOZJA0IPJlZ5/chhYa0=
Subject key identifier:   7C:A4:D5:46:E6:B2:3F:9E:CA:C6:24:39:F3:30:03:DF:4D:1A:0D:73
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       655D7072B377B239B1E5C7AB7499292AB9947860
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 15:43:10 +0000
Certificate not after:    Tue 03 Sep 2024 15:48:10 +0000
Subordinate resources:    AS: 268303
                          IP: 45.237.212.0/22
                          IP: 2804:4f18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5d:70:72:b3:77:b2:39:b1:e5:c7:ab:74:99:29:2a:b9:94:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 15:43:10 2023 GMT
            Not After : Sep  3 15:48:10 2024 GMT
        Subject: CN=7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:86:df:46:e7:e4:56:cc:50:29:89:84:bd:
                    be:22:00:8f:f3:27:5b:b2:c7:6e:f1:0b:da:1d:d0:
                    54:7f:75:79:39:f8:d6:32:4f:51:7a:21:fc:ae:b8:
                    b3:95:c1:6b:14:9f:c8:63:0a:2e:f6:ca:94:35:2b:
                    96:b4:45:ee:56:55:67:e7:cc:4b:03:60:63:2b:a7:
                    08:cf:48:27:46:af:54:97:2b:f3:0e:1a:3a:f2:80:
                    1b:74:23:32:c8:88:8e:31:d4:4d:9f:aa:b1:c3:89:
                    a0:09:5d:f4:1a:11:4e:95:c1:e0:63:56:94:9e:92:
                    43:80:54:d4:df:fe:ca:27:28:fe:d6:4a:3e:26:47:
                    7f:11:9d:d9:e9:50:78:80:4f:bb:ee:c4:e5:2a:90:
                    79:05:46:27:e6:2a:62:0b:78:2d:a8:70:67:a3:36:
                    fe:d4:22:ee:12:eb:9b:4b:a1:41:c2:7a:e5:7d:21:
                    28:7d:6e:be:0b:bb:9c:35:fd:56:c4:d0:1f:f6:20:
                    1c:95:57:57:85:c6:f2:e8:e4:5d:dc:77:8c:5a:21:
                    50:de:f1:d1:64:c0:86:78:14:c9:97:41:ff:46:d1:
                    0a:7d:58:b8:22:4c:f9:40:03:f2:13:d8:8d:b4:c3:
                    43:17:4b:66:7b:d9:39:b4:fc:de:46:44:e4:ed:70:
                    4c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:A4:D5:46:E6:B2:3F:9E:CA:C6:24:39:F3:30:03:DF:4D:1A:0D:73
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.212.0/22
                IPv6:
                  2804:4f18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268303

    Signature Algorithm: sha256WithRSAEncryption
         90:91:1e:6c:66:6c:da:64:43:4d:f5:1c:70:9f:c7:5a:ba:27:
         b2:58:c0:4f:b2:d4:75:7a:5e:dc:3f:7c:34:76:0c:40:fe:9f:
         b8:e5:30:88:0f:e4:02:31:dd:45:fd:eb:a3:34:66:f0:40:ed:
         e3:f8:d5:c2:c7:d9:d3:31:a7:0a:ac:18:6e:aa:93:71:6a:90:
         11:b5:0f:3f:26:93:d6:9e:78:e8:75:9c:d2:d4:0b:f7:a5:18:
         a2:ac:ac:00:d0:cd:fe:c4:1a:15:e8:c6:a9:fb:0f:21:47:ce:
         f9:17:c6:c8:11:4c:11:22:cf:33:d3:fa:56:55:5a:1f:e9:7e:
         30:91:ba:f5:1d:32:c6:a7:e5:20:cc:0a:f5:b1:b3:fd:23:39:
         a4:e2:55:96:83:be:5d:69:e1:a1:f3:9a:42:40:1e:af:21:8a:
         69:4f:85:d3:7a:89:ae:56:9f:98:ce:95:58:6e:94:72:e5:9b:
         48:31:cb:d9:c7:04:a1:df:19:1e:f1:17:c1:8a:8b:97:10:3f:
         bd:23:d3:af:7d:64:23:37:d3:78:f3:a9:cd:3c:a2:b5:6e:99:
         cc:c5:48:d9:c6:1c:a2:5a:56:6a:27:dc:42:20:89:25:47:47:
         2f:06:f5:a7:47:21:d2:0b:9a:c5:23:c7:a1:af:be:d9:73:ad:
         6c:43:7d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org