Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.cer
File:                     7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.cer (raw, json)
Hash identifier:          Gu8AEsTmaT3UQQaiVGP6NN8gzvwSytIqBGTLrj8WcKc=
Subject key identifier:   7D:24:FD:2D:59:F7:DC:84:36:8B:4E:D4:F1:53:DC:37:47:A7:6D:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       126094FCBAC338C3C27E10460E848224641DFBCC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 18:57:25 +0000
Certificate not after:    Tue 07 Jan 2025 19:02:25 +0000
Subordinate resources:    AS: 269527
                          IP: 45.188.88.0/22
                          IP: 2804:6600::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:60:94:fc:ba:c3:38:c3:c2:7e:10:46:0e:84:82:24:64:1d:fb:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 18:57:25 2024 GMT
            Not After : Jan  7 19:02:25 2025 GMT
        Subject: CN=7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:87:99:05:cb:92:6e:05:2e:b6:0d:c8:43:
                    8b:43:a5:7e:16:00:81:87:d8:85:68:e5:da:28:0a:
                    14:62:e9:d3:b9:e3:1f:08:23:18:1d:29:89:79:b0:
                    80:d9:01:d7:67:49:31:ea:4d:2b:de:5a:fa:3f:70:
                    cd:21:aa:c2:37:1b:26:37:11:f1:5c:39:42:1e:74:
                    e4:7c:04:31:ec:85:58:d9:6e:29:27:34:24:84:bd:
                    09:20:60:ce:90:0a:a3:64:dc:14:b8:6b:79:d9:1d:
                    74:f7:9c:c5:9c:b1:d1:96:a1:e9:c1:1c:b8:49:6a:
                    d1:3a:18:b7:f3:90:8f:ea:65:ba:df:15:7b:72:9e:
                    17:0d:ae:87:ea:9a:f0:45:b0:92:c2:aa:79:65:ca:
                    cf:02:d1:3a:96:40:1e:c1:33:9d:de:8a:c8:3f:a5:
                    b8:27:83:31:20:a6:76:5b:8d:24:ae:36:48:ec:f2:
                    0c:fc:55:7a:02:23:f2:c8:ab:25:69:57:df:5b:44:
                    7e:77:ce:59:3e:7b:4b:8a:a9:ff:f3:1f:0d:42:41:
                    84:60:d4:5a:8f:7b:1e:d8:18:a9:41:b4:e3:4f:65:
                    24:2f:e5:7a:91:eb:6c:df:9a:0a:39:f1:7a:4e:15:
                    55:c7:b7:11:72:fb:d5:1d:86:7c:37:9d:bf:2d:46:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:24:FD:2D:59:F7:DC:84:36:8B:4E:D4:F1:53:DC:37:47:A7:6D:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.88.0/22
                IPv6:
                  2804:6600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269527

    Signature Algorithm: sha256WithRSAEncryption
         1d:95:90:56:91:5e:ab:ab:57:ae:ad:91:df:ed:8e:b5:c2:ae:
         eb:c4:f3:29:51:44:9c:ea:46:a8:ad:26:51:a9:bf:2f:57:d4:
         18:00:04:fe:94:ce:fa:56:a8:0d:49:83:51:a3:78:97:b0:39:
         e5:28:82:02:2a:4f:a3:1e:9d:29:08:09:a0:d1:1e:7c:56:3d:
         3d:53:1b:d0:c2:c9:e3:2d:9d:a7:75:3c:c4:14:33:55:00:32:
         b2:2e:e9:2a:85:a0:f6:0a:23:d0:89:0f:a4:de:34:a6:06:3b:
         72:c1:0b:e7:3a:f1:d4:9c:01:f9:32:69:e7:48:ed:e7:f8:eb:
         96:15:38:45:f5:b2:39:32:28:fd:e9:98:58:cf:fa:a7:b4:be:
         f6:2c:50:6d:26:c2:e7:e4:f7:50:fe:01:5b:73:74:26:ed:93:
         fd:8c:76:47:98:cd:55:45:4c:29:f9:5a:fd:32:f5:a0:b4:5f:
         bf:e2:65:f8:19:40:d8:f9:9f:5f:e6:c1:d0:0a:4f:95:b5:dd:
         12:dd:0b:43:ca:b4:fe:9a:8f:ba:fd:eb:e3:05:15:9e:ad:1f:
         5b:9d:2e:dc:c9:8b:61:08:14:2c:e0:d2:f2:4c:77:69:de:99:
         8b:7b:60:36:a1:60:4d:24:24:3d:6c:3e:2d:17:99:26:f7:d8:
         d7:0b:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org