Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3.cer
File:                     7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3.cer (raw, json)
Hash identifier:          acOuUGKb8sGL0Bhfgqn8tF0sVldcFjgjV0wgVhs64vU=
Subject key identifier:   7D:3D:6B:C4:E2:E9:A5:32:BA:78:32:AA:B9:65:A7:1F:32:B8:86:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E44611308877207737FD90EC1DAE86DAD2CA891
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 16:22:20 +0000
Certificate not after:    Tue 14 May 2024 16:27:20 +0000
Subordinate resources:    AS: 262493
                          IP: 168.121.148.0/22
                          IP: 170.82.132.0/22
                          IP: 177.8.48.0/21
                          IP: 177.55.48.0/20
                          IP: 2804:fec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:44:61:13:08:87:72:07:73:7f:d9:0e:c1:da:e8:6d:ad:2c:a8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 16 16:22:20 2023 GMT
            Not After : May 14 16:27:20 2024 GMT
        Subject: CN=7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:e8:fc:89:cd:75:b5:9c:70:d8:65:b2:23:
                    a6:62:31:fd:e5:d5:cb:4a:b3:4e:a9:b3:33:e1:cb:
                    2e:dc:4d:c0:90:99:1a:33:b5:41:e6:99:60:33:87:
                    30:f2:c5:dd:09:e6:14:0b:df:bc:70:6a:d9:ba:7f:
                    14:6d:91:0b:9d:fd:d7:52:4a:d2:37:fd:a1:c1:fc:
                    b2:57:b1:f1:aa:49:43:47:03:f6:54:3a:ee:8a:a3:
                    2a:d6:13:28:1f:3e:d0:a4:06:83:22:9d:a8:2a:35:
                    74:eb:80:d7:f4:8b:ae:bb:f5:e0:5b:1e:cb:f1:98:
                    d9:a0:c4:2f:1c:77:9e:3e:34:eb:57:eb:85:06:7e:
                    91:32:d9:43:7d:2b:3d:ae:86:ad:b5:ee:bd:4b:56:
                    90:a5:cc:ac:41:f7:3b:23:44:24:93:8e:f5:dd:b8:
                    35:ec:f9:fa:f7:1e:ec:99:e7:aa:c0:cc:e6:6f:6c:
                    f7:eb:d1:ab:5e:f8:e9:17:7b:37:38:85:26:2b:50:
                    cb:99:69:13:d7:3e:41:bb:14:f7:1c:44:0c:2d:71:
                    4c:b2:61:1d:93:52:fc:58:c6:ff:ce:25:9a:c4:36:
                    ca:90:91:d1:32:ed:f2:83:23:d4:0f:60:44:ca:38:
                    a2:fe:4a:46:fb:6a:2c:bf:3f:05:81:db:59:ad:3a:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:3D:6B:C4:E2:E9:A5:32:BA:78:32:AA:B9:65:A7:1F:32:B8:86:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.148.0/22
                  170.82.132.0/22
                  177.8.48.0/21
                  177.55.48.0/20
                IPv6:
                  2804:fec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262493

    Signature Algorithm: sha256WithRSAEncryption
         6d:56:0d:dc:f2:02:b2:4d:3a:b1:5b:e8:14:22:70:a4:53:c8:
         6d:ff:bf:2d:13:f6:97:30:c8:7b:ec:e1:f2:b4:e5:6e:6a:00:
         d1:f2:fd:1c:dd:38:4a:c4:50:67:ab:d4:b8:a4:20:0b:56:68:
         f7:87:d2:1b:51:2c:26:d6:69:f1:4e:08:ba:66:05:62:64:87:
         21:11:93:b7:0d:78:da:1f:60:01:c6:3c:d5:d3:8a:55:db:b6:
         aa:4d:bc:a5:59:79:48:36:c7:e8:4e:fe:73:61:31:39:da:55:
         28:53:6e:1c:e3:42:30:52:25:87:e9:57:8a:fb:c0:2c:37:c3:
         79:b9:c6:16:06:c1:8a:f5:81:27:28:af:93:2d:6a:ae:a6:fb:
         9e:19:b1:43:91:6a:fb:23:dd:39:7a:56:25:96:28:d1:f2:51:
         e2:6e:cb:04:c0:39:9b:a7:d8:59:3d:41:0d:75:9c:84:ba:60:
         c8:c7:37:e9:09:e1:39:5a:17:ca:e1:ba:59:c3:67:0e:b7:3d:
         2d:e7:12:93:43:ab:8e:63:be:38:25:9c:38:d0:1b:31:67:4c:
         90:5c:66:5d:8c:ce:fe:61:a9:0a:e0:ce:47:37:fd:26:94:6e:
         13:d8:bb:d3:26:e5:a4:3b:b2:2e:6b:fd:dc:7a:67:b8:67:a3:
         ab:b8:64:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org