Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7CAF346A28B3D68302ABE31536C68584B5527416.cer
File:                     7CAF346A28B3D68302ABE31536C68584B5527416.cer (raw, json)
Hash identifier:          Q/hNpGa95h2nZy9jES2TTbgRn1xKAuojSv/BRRtg4Rw=
Subject key identifier:   7C:AF:34:6A:28:B3:D6:83:02:AB:E3:15:36:C6:85:84:B5:52:74:16
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51696AFD14CF06738A5F3D39F23303E708350765
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/7CAF346A28B3D68302ABE31536C68584B5527416.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 19:01:45 +0000
Certificate not after:    Tue 21 May 2024 19:06:45 +0000
Subordinate resources:    AS: 262549
                          IP: 177.72.176.0/21
                          IP: 2804:5e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:69:6a:fd:14:cf:06:73:8a:5f:3d:39:f2:33:03:e7:08:35:07:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 19:01:45 2023 GMT
            Not After : May 21 19:06:45 2024 GMT
        Subject: CN=7CAF346A28B3D68302ABE31536C68584B5527416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:f1:76:1d:87:51:9b:69:c3:ff:ee:ca:b4:
                    3e:a6:05:db:f4:73:ff:a9:a9:19:51:9b:6d:d0:8a:
                    78:95:b8:73:37:86:9b:41:e8:67:64:1e:43:80:cb:
                    a6:0b:35:db:eb:de:21:fb:69:d6:73:8c:6a:47:c4:
                    f8:bc:a8:3c:26:c5:c4:92:a5:96:6f:f1:bb:1b:f1:
                    5d:ac:72:e3:c0:a9:a4:dd:8c:e2:42:cc:0f:c1:3d:
                    c1:32:fd:c6:9a:72:0d:ed:b6:56:75:4a:6a:6d:4a:
                    9a:b3:0b:e3:de:3f:36:1c:c5:65:42:8d:cc:92:61:
                    3c:c4:19:5b:ad:0a:ee:45:0a:cf:2f:1a:47:61:20:
                    a8:01:7e:ac:f1:89:a8:f3:63:a2:ad:7e:73:85:c2:
                    d8:37:0d:fd:3b:f1:8b:8a:36:c9:8d:b6:ef:db:fe:
                    3f:57:fb:ae:67:f5:01:15:3a:b4:97:d5:c3:e7:74:
                    0c:a1:52:2a:a1:59:6d:43:7c:e8:71:5e:0f:95:40:
                    a1:05:e1:ce:1d:f8:3a:f4:b4:4b:7e:54:d5:b7:d5:
                    3b:9c:4b:5a:0c:51:e8:b4:4a:37:49:48:67:48:13:
                    07:b5:0c:ce:e8:4f:9f:35:e0:f3:81:4b:60:de:7b:
                    98:e1:33:47:6f:4d:13:83:2c:24:23:6f:c2:13:67:
                    8d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:AF:34:6A:28:B3:D6:83:02:AB:E3:15:36:C6:85:84:B5:52:74:16
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/7CAF346A28B3D68302ABE31536C68584B5527416.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.176.0/21
                IPv6:
                  2804:5e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262549

    Signature Algorithm: sha256WithRSAEncryption
         a8:6a:d9:a0:e7:a4:7a:d1:17:8a:ac:81:4f:d5:6c:58:5e:02:
         a8:92:5d:40:e5:c1:e0:db:f8:62:24:7e:a5:39:8f:58:e3:0a:
         6e:b7:44:9b:21:08:9f:eb:ca:22:0e:d7:19:4b:3e:b9:cd:30:
         6f:84:04:5c:26:f6:1e:29:1b:d3:b2:74:3a:00:a8:b2:11:39:
         8f:03:01:63:fe:55:ff:09:3c:d1:b2:e1:01:5a:31:fa:a6:c3:
         47:fe:e1:71:c0:b3:1e:3d:f6:a9:be:86:b0:10:ac:d8:df:11:
         15:5b:41:7f:23:74:fe:56:fc:c3:a6:85:a9:5f:ce:2f:48:6d:
         a0:ac:d4:de:ff:e3:f0:f0:e4:48:35:88:96:80:92:01:d0:10:
         6e:cd:33:27:b5:c9:03:ac:45:f4:5f:f1:e1:00:da:19:48:ec:
         ab:3a:fe:2d:df:06:1a:8d:e4:fd:2d:51:09:26:73:d4:9f:40:
         3b:8a:77:f0:0b:ca:24:3f:fa:c1:bd:05:98:f1:1b:d7:85:93:
         d0:5f:15:5e:01:ec:4d:9c:6e:6c:4d:e9:48:ae:62:82:79:49:
         39:51:88:92:f3:32:86:c8:96:28:29:56:93:fa:a1:6a:27:86:
         8f:3b:be:dd:6b:e3:29:66:01:7a:6b:22:c9:88:74:35:f3:42:
         2b:d0:20:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org