Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.cer
File:                     7CC82F21C44E0FEBEB7E517156B48828DE283378.cer (raw, json)
Hash identifier:          fj4/Czzr/CQ4bq7HBk9gRVXcqVFbCMTz4Rjt5YHkgx0=
Subject key identifier:   7C:C8:2F:21:C4:4E:0F:EB:EB:7E:51:71:56:B4:88:28:DE:28:33:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F632445E8494DB07F3FEB7B6100F2FB2C2511E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jan 2024 21:32:48 +0000
Certificate not after:    Mon 20 Jan 2025 21:37:48 +0000
Subordinate resources:    AS: 268134
                          IP: 45.169.240.0/22
                          IP: 2804:5884::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:63:24:45:e8:49:4d:b0:7f:3f:eb:7b:61:00:f2:fb:2c:25:11:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 22 21:32:48 2024 GMT
            Not After : Jan 20 21:37:48 2025 GMT
        Subject: CN=7CC82F21C44E0FEBEB7E517156B48828DE283378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:cd:ee:4c:ab:0e:0c:9e:7e:41:2d:e4:58:
                    62:ef:21:2c:e5:09:18:79:ab:5e:2a:df:15:ae:2e:
                    90:cd:37:67:bb:01:df:c9:eb:7f:dd:5d:93:ba:48:
                    2e:5b:0f:96:4e:06:e0:cc:c0:30:e4:d7:69:83:87:
                    f3:26:e2:f3:18:bf:08:3c:a0:f1:d0:82:57:03:75:
                    f8:fc:aa:4d:a9:d2:9a:91:2e:a8:f7:5a:28:97:6a:
                    3d:cd:a3:35:3a:82:c5:60:45:4d:5f:ad:c9:e6:5a:
                    c6:32:36:7c:5e:39:ad:2b:2a:b0:df:88:2b:43:16:
                    27:17:40:99:ce:ca:3a:b5:17:f1:71:db:98:9d:e9:
                    78:b9:95:3c:a5:83:88:1a:4e:67:ea:b9:c7:95:96:
                    09:26:54:46:7b:01:35:0e:0c:7e:d2:bb:fc:31:68:
                    9a:a1:78:72:a3:76:01:2a:34:be:ca:d0:1d:b9:2c:
                    56:0a:2a:55:fd:45:9d:bb:89:94:11:2b:ff:d5:07:
                    80:16:cc:73:c9:4d:4c:1c:ad:1d:3e:4a:e7:97:3a:
                    45:f5:46:02:56:8b:20:0e:4c:e6:63:dd:32:07:f5:
                    27:77:ce:af:08:0b:aa:00:9d:28:ac:71:00:32:15:
                    4e:d0:ff:d5:83:1c:0f:77:1a:35:a5:b5:43:03:35:
                    1a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:C8:2F:21:C4:4E:0F:EB:EB:7E:51:71:56:B4:88:28:DE:28:33:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.240.0/22
                IPv6:
                  2804:5884::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268134

    Signature Algorithm: sha256WithRSAEncryption
         7d:2f:38:54:73:0f:60:35:fe:0c:48:45:36:83:20:21:7d:17:
         d1:49:5e:8b:66:03:3a:77:49:a3:63:05:a7:a4:5b:de:56:95:
         7f:13:02:a0:9c:4c:d8:f7:96:06:a8:6f:d0:e9:40:6e:fb:4f:
         44:a9:51:12:40:67:bc:7f:2d:47:74:7e:79:82:a8:83:e1:cc:
         41:51:00:6c:98:52:78:45:24:dd:9e:69:d0:32:3a:da:d9:67:
         bc:0e:d1:44:e2:fa:91:6a:d6:f0:22:22:1b:19:51:52:90:67:
         20:4a:ba:69:56:0c:ce:e0:ab:1c:2d:5f:c8:d7:5e:4f:43:0d:
         47:d9:af:47:8d:8c:a6:30:12:86:98:35:f0:5c:6a:d2:f3:6e:
         70:05:06:a1:b2:7f:29:2b:7d:2f:2b:f1:ca:14:3b:2c:87:60:
         90:27:09:51:ea:2a:e8:71:ab:b1:d3:3c:01:d8:7c:7d:45:72:
         17:57:6f:5f:e8:d5:8b:cc:6e:4b:fe:b0:9a:b0:6a:20:ce:ff:
         1e:f6:b3:b6:f4:e9:f1:79:32:7f:1a:b3:3c:80:8e:31:8f:13:
         07:15:1a:db:fa:bc:14:23:1c:98:ad:3c:ff:b3:cc:94:a5:ef:
         67:e6:a6:c4:9a:2b:e5:60:79:72:e1:38:dd:48:7d:81:85:dd:
         02:5b:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org