Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.cer
File:                     7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.cer (raw, json)
Hash identifier:          4N3OqvrrKAF86JIUkic1Gk/isHszv5mFI/O1VfqABuU=
Subject key identifier:   7C:E5:72:E6:5F:3B:DC:3D:D5:78:6B:C9:63:AA:B2:E2:D1:E3:5C:47
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       203A2FDE808D1C61852153C2969CF84097D1833A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Oct 2023 18:23:30 +0000
Certificate not after:    Mon 28 Oct 2024 18:28:30 +0000
Subordinate resources:    AS: 266619
                          IP: 45.7.216.0/22
                          IP: 2804:3ec4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3a:2f:de:80:8d:1c:61:85:21:53:c2:96:9c:f8:40:97:d1:83:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 30 18:23:30 2023 GMT
            Not After : Oct 28 18:28:30 2024 GMT
        Subject: CN=7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:1b:f5:17:3a:e6:94:2c:79:b7:85:83:e5:
                    e9:47:42:04:40:2c:bd:e5:6d:80:b5:da:f5:66:0b:
                    cd:9c:63:09:4f:56:89:e4:4f:a0:da:a3:87:9e:8c:
                    f5:c8:80:38:d3:06:42:9a:45:9a:0b:84:69:31:3b:
                    26:d4:89:f7:24:34:bb:4d:f6:f4:8c:7a:79:9a:c4:
                    11:20:d7:2e:d7:ea:6b:d9:d2:0c:31:e6:1e:51:c6:
                    31:a0:62:b3:b8:f3:21:43:b4:32:d8:1a:98:4e:32:
                    13:81:b2:86:48:ac:c8:2b:3c:02:de:fc:48:27:51:
                    32:a5:ee:c7:43:21:eb:4e:dd:dc:6c:2e:ed:71:1b:
                    2c:c5:61:b2:0c:95:f9:8f:2e:86:43:ee:60:ce:4e:
                    7e:61:67:a8:28:71:39:a2:34:8b:af:42:2e:c2:50:
                    4b:f4:0e:9b:d5:61:fb:57:4d:f6:59:ae:a8:76:8a:
                    93:57:2b:af:f1:51:7f:39:16:2b:61:f6:fd:e6:2d:
                    63:dd:f5:19:fc:56:9e:7d:b0:dc:c6:d2:48:92:27:
                    33:27:a5:d0:67:a9:1e:cc:c0:ad:65:2d:8f:17:78:
                    43:7a:7f:95:7f:63:35:77:f4:7a:ed:7c:42:08:67:
                    9b:fc:06:14:62:6e:e7:85:c7:75:27:f6:cc:37:cd:
                    e4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:E5:72:E6:5F:3B:DC:3D:D5:78:6B:C9:63:AA:B2:E2:D1:E3:5C:47
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.216.0/22
                IPv6:
                  2804:3ec4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266619

    Signature Algorithm: sha256WithRSAEncryption
         93:39:86:71:8d:96:29:a1:ee:85:a5:89:a2:80:30:5f:d3:c4:
         2f:5e:ce:39:f6:1c:46:55:ce:ec:dc:57:6c:df:91:11:6a:d0:
         24:cd:25:ae:ae:a3:8f:54:cd:bc:42:c0:08:b1:a5:0c:42:61:
         80:3b:09:ff:f2:d9:64:35:a1:b3:4f:a1:e1:66:0d:0a:a5:36:
         ca:6a:57:85:42:7e:77:d7:93:ff:64:d7:3a:45:bf:9d:e1:4a:
         f8:35:1d:d2:6e:d9:fa:4b:39:a3:9f:f5:74:be:60:11:2f:25:
         97:71:1f:5c:08:c1:09:03:1c:ad:e1:61:2d:b5:da:d0:94:fe:
         fa:e4:e9:84:41:cf:ac:4f:1d:04:22:0a:ef:47:34:b4:19:54:
         d7:11:ac:89:ee:8d:3c:92:55:f2:d6:59:8a:50:ed:1a:18:e9:
         30:4e:8d:0b:48:6d:86:2d:7a:87:f2:b1:b9:07:89:e5:bc:9d:
         63:5d:ab:ab:7a:54:f0:a7:77:63:64:81:4f:1a:71:2d:73:9b:
         96:61:61:ba:a0:3f:20:db:d0:7d:01:55:2f:e9:fa:98:9f:05:
         f8:ff:19:f4:37:18:be:c9:12:a5:1b:52:17:67:eb:53:d0:e8:
         ea:d7:58:de:4a:22:1d:4d:0b:9a:c7:ae:28:a2:08:cc:5c:00:
         51:87:83:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org