Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.cer
File:                     7CAD81394911919A4CBA9E9939030CFB3F3B9D90.cer (raw, json)
Hash identifier:          DkRN3xP5BpLHaQcGLFq3SP6YWEoFZk+v9Qxfx3hA5bc=
Subject key identifier:   7C:AD:81:39:49:11:91:9A:4C:BA:9E:99:39:03:0C:FB:3F:3B:9D:90
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D40AF6785027478F55ABC2E83E3C186FD17687E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Feb 2024 14:56:04 +0000
Certificate not after:    Tue 04 Feb 2025 15:01:04 +0000
Subordinate resources:    AS: 264133
                          IP: 138.59.192.0/22
                          IP: 2804:22f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:40:af:67:85:02:74:78:f5:5a:bc:2e:83:e3:c1:86:fd:17:68:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 14:56:04 2024 GMT
            Not After : Feb  4 15:01:04 2025 GMT
        Subject: CN=7CAD81394911919A4CBA9E9939030CFB3F3B9D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:36:77:be:11:9f:07:8e:81:1e:d7:30:64:
                    b9:f4:3d:8c:0e:25:22:38:6f:d2:60:ce:3d:18:fc:
                    f2:fe:1a:a7:5f:11:b6:1f:74:a9:3f:29:b9:16:0d:
                    77:ca:12:ea:4c:10:5b:26:b9:53:ed:51:cb:ac:97:
                    14:b3:54:99:48:ae:48:e8:7b:3d:04:18:28:ba:3c:
                    54:96:5a:dc:f7:91:07:a2:96:a5:fc:ff:45:92:d0:
                    b8:bf:f0:ff:cd:be:cb:9d:0a:4c:19:9f:66:92:f6:
                    7c:0c:0c:b6:5c:6d:71:5a:5b:74:66:17:b8:62:98:
                    e7:5f:3e:b0:fc:84:83:0a:3a:68:f1:dd:79:58:30:
                    17:0f:f7:7a:bd:ab:4b:e4:2f:23:fe:70:5d:81:9d:
                    0c:c1:a1:3d:03:4c:03:bf:82:d6:ae:e4:78:54:ca:
                    43:c8:ad:c8:5a:e8:cf:44:e2:7a:2f:9c:19:d8:73:
                    4f:64:75:a7:41:9d:81:38:ae:fa:3b:96:e8:ba:fb:
                    2d:6c:13:90:a8:59:ac:6d:96:37:a0:d7:14:1e:84:
                    a5:ae:8b:88:8d:fa:64:37:1f:19:49:b5:13:58:83:
                    57:e9:90:42:0e:44:02:55:da:34:42:93:b4:61:a3:
                    66:b1:38:3e:59:3a:57:3b:71:84:69:d3:3d:6f:71:
                    ed:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:AD:81:39:49:11:91:9A:4C:BA:9E:99:39:03:0C:FB:3F:3B:9D:90
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.192.0/22
                IPv6:
                  2804:22f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264133

    Signature Algorithm: sha256WithRSAEncryption
         7d:fb:53:48:08:86:d5:74:b1:8e:27:3b:59:d7:6f:00:5a:75:
         94:8c:c9:f5:e7:bc:b3:48:43:95:38:8e:41:21:42:fa:45:a8:
         ee:51:26:25:42:57:b3:77:11:bb:e6:31:d5:05:3b:15:7a:1e:
         d7:f9:b1:1b:53:d8:59:e5:8f:c7:3d:37:52:ac:8b:19:c2:bf:
         4f:60:a5:d4:f2:1e:73:df:27:5c:92:27:af:9d:77:1b:c1:32:
         55:1f:6f:15:11:76:bd:19:7a:0b:e3:73:b5:9e:80:6d:47:e2:
         36:43:aa:38:23:8f:16:b1:6d:fd:3d:08:52:fc:ec:c4:9d:de:
         a7:e5:ff:ca:1b:99:cc:76:e1:20:6c:c6:e6:c4:e3:f2:e1:9e:
         5f:a4:0c:dc:d2:9e:ee:64:2a:43:8f:0e:bf:3b:96:32:bc:3d:
         ec:f2:28:6e:af:b2:33:ea:d4:16:eb:b9:eb:e5:38:28:5c:e7:
         91:f8:b6:bf:c5:53:99:2e:d3:08:56:32:91:30:60:f1:83:ac:
         2f:09:7b:0f:89:33:96:9e:bf:93:3b:cc:8a:77:ff:ca:a7:5c:
         84:95:01:74:91:75:7c:c7:0f:0c:4a:d8:4f:5f:3f:21:83:0f:
         0a:e2:7f:9f:d9:41:ed:19:9e:6d:62:d9:2a:63:bb:4a:18:a3:
         93:73:fb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org