Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.cer
File:                     7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.cer (raw, json)
Hash identifier:          Qe9qJLaHAV6xLzPIWf6y9VLQ/PCU4P2FuqFo95q6Cwo=
Subject key identifier:   7D:45:E1:D0:EB:BF:C0:C5:8C:5B:59:B5:14:11:98:B5:B3:2C:99:B6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       47822893515EDB738D7AAAE6F61F0DAE24A0D143
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 Jan 2024 00:12:40 +0000
Certificate not after:    Sun 26 Jan 2025 00:17:40 +0000
Subordinate resources:    AS: 262801
                          IP: 186.250.0.0/21
                          IP: 187.17.48.0/20
                          IP: 2804:244::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:82:28:93:51:5e:db:73:8d:7a:aa:e6:f6:1f:0d:ae:24:a0:d1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 28 00:12:40 2024 GMT
            Not After : Jan 26 00:17:40 2025 GMT
        Subject: CN=7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:9b:22:18:65:c1:34:d1:fa:3b:98:2e:2d:
                    5b:c5:2d:17:ce:2d:97:aa:d4:50:f3:9d:00:45:c6:
                    74:f8:d0:38:ba:15:f8:fb:9a:da:0a:f1:56:4e:dd:
                    96:bf:cc:21:10:b0:dc:9c:cd:de:67:34:41:15:33:
                    bc:a4:08:89:f9:cb:2f:d1:04:3d:bf:a1:0a:e4:7e:
                    53:e5:23:61:21:a4:aa:44:db:d0:3e:d3:5d:50:f5:
                    7f:01:ce:44:0e:65:ae:b5:30:2d:be:ac:6d:78:96:
                    a8:41:56:e3:49:43:4a:bf:66:32:7c:a3:c5:5f:03:
                    a1:41:01:9b:4d:6b:db:fb:50:a1:4f:e1:1d:f8:ed:
                    0e:74:e2:c4:bd:60:f8:27:9a:8b:78:6d:1e:a0:72:
                    90:a6:8f:8d:88:96:aa:f5:69:fd:3e:55:32:69:07:
                    4b:43:48:ab:44:3a:b2:f5:c7:88:8b:1b:9f:4c:2d:
                    f2:4b:a7:c3:12:05:78:95:3d:18:46:b5:6f:2c:fa:
                    bd:ac:da:da:a8:18:27:a5:f7:f8:fb:09:13:3f:1c:
                    09:52:7d:f3:3e:d6:a4:7e:44:58:15:6d:d8:14:1d:
                    28:cb:ce:25:95:6d:b6:86:a7:f6:80:4c:0f:44:8b:
                    67:16:cf:42:59:6f:ce:ab:20:56:72:c5:82:70:eb:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:45:E1:D0:EB:BF:C0:C5:8C:5B:59:B5:14:11:98:B5:B3:2C:99:B6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.0.0/21
                  187.17.48.0/20
                IPv6:
                  2804:244::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262801

    Signature Algorithm: sha256WithRSAEncryption
         12:ed:1d:6e:6e:26:2a:8f:d3:af:ec:62:2a:e5:a5:06:7f:60:
         a7:d4:82:e2:cc:60:0b:9f:b8:11:80:7b:1d:6a:66:4b:07:44:
         04:15:35:72:22:d8:24:90:36:2e:32:99:d4:41:2b:13:79:50:
         c7:88:84:c3:da:1d:2d:f7:25:8b:c3:52:db:6b:ab:8c:bf:b7:
         76:1c:32:ab:42:48:a3:3b:8f:f8:c8:86:35:a6:34:fb:71:a1:
         7e:e3:aa:2f:b4:a1:1f:d6:cb:48:21:b9:78:95:07:f5:91:37:
         40:49:ae:4b:67:73:97:0a:1b:88:61:27:73:7d:21:bb:72:de:
         f2:8e:41:6a:74:ce:d5:ae:ab:a6:41:55:12:0f:0d:90:2a:b1:
         b2:89:1a:48:1c:d8:09:18:8e:91:46:c9:a2:f6:0e:05:66:8d:
         8d:38:e0:71:b3:16:74:c8:fa:56:49:1d:6e:9a:83:28:4b:17:
         8c:ae:91:95:9a:2c:90:c7:2d:ed:ee:7b:6c:a5:30:c2:5b:85:
         88:f7:bc:cf:23:a8:0e:ec:d8:93:53:38:b7:ec:af:f5:f9:43:
         0d:b0:67:61:c9:2e:ab:41:e3:53:28:17:1c:5b:23:9e:c5:85:
         44:93:d6:02:61:5d:ac:65:f5:62:9d:8f:cb:86:46:21:ad:66:
         5b:c8:54:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:40 2024 by rpki-client on console-ams.rpki-client.org