Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer
File:                     7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer (raw, json)
Hash identifier:          23fRr0KjlcuCoroWPCggAbOSqYHC0iuQ56aSx4YsZZg=
Subject key identifier:   7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C0F3B41BCE5E71F2F1327F11F352CC1F1671515
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 17:58:19 +0000
Certificate not after:    Wed 18 Sep 2024 18:03:19 +0000
Subordinate resources:    AS: 267603
                          IP: 45.71.96.0/22
                          IP: 2804:441c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0f:3b:41:bc:e5:e7:1f:2f:13:27:f1:1f:35:2c:c1:f1:67:15:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 17:58:19 2023 GMT
            Not After : Sep 18 18:03:19 2024 GMT
        Subject: CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:11:06:a5:1e:f2:97:a5:c4:65:1e:59:3d:
                    42:1c:2f:2b:b9:cd:5e:20:75:ff:89:b4:54:7b:0b:
                    7a:91:21:4a:7a:a7:70:dc:3d:9b:26:d9:84:bc:2e:
                    eb:b6:de:ff:9e:cb:c6:36:33:1b:a4:5e:9b:80:76:
                    78:0a:1f:6d:fe:9d:ec:5f:8c:dc:17:76:73:03:f3:
                    7d:64:05:a4:cf:63:69:bf:9b:fc:94:98:20:0f:db:
                    1f:7c:33:3d:43:49:cf:fa:b5:46:e0:1b:2a:81:17:
                    ab:74:a4:f7:12:7a:08:8c:42:ee:ff:f5:25:e8:19:
                    b9:50:5f:12:f9:84:5e:7f:e2:95:77:04:61:ee:e8:
                    30:a8:f6:3f:0b:3f:b9:5a:1a:5a:a5:24:d0:55:ab:
                    bb:b8:5c:ae:4b:75:b4:bb:2c:e8:cc:73:db:b0:24:
                    c6:53:96:49:1f:9b:56:7f:bd:f6:f1:ff:69:93:e9:
                    f6:ad:0a:fb:df:73:c1:d4:79:9b:5d:4a:93:49:4b:
                    c6:cd:c2:f5:95:f5:ec:9a:ad:ca:50:57:01:67:40:
                    ac:f6:6c:c4:f4:a6:9a:c2:76:06:4a:15:26:7b:c4:
                    05:f7:74:ce:fb:ca:51:63:77:a1:87:e0:a2:1b:b9:
                    94:b6:dd:c3:45:b2:40:4a:3a:45:25:5f:14:2b:6b:
                    57:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.96.0/22
                IPv6:
                  2804:441c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267603

    Signature Algorithm: sha256WithRSAEncryption
         49:22:0f:9a:42:5f:01:89:86:bd:db:0d:c8:c1:9a:ab:84:96:
         c8:c0:76:3f:e8:01:6f:3b:8b:04:10:2a:5a:6b:40:72:51:31:
         57:c5:b2:01:eb:f8:57:0c:6a:1b:a0:af:4a:2f:0d:eb:a6:e0:
         75:49:4d:7d:85:9a:fb:95:b1:7c:8e:6e:6b:a8:6c:fe:d3:4d:
         f0:b4:0e:2d:54:78:d7:f2:d6:71:88:88:f7:5a:61:06:a2:36:
         e5:a6:4c:0f:b7:a1:dc:7c:c1:29:09:ec:c9:76:c3:6f:2b:0d:
         8e:24:15:20:01:92:ab:fc:9b:1e:e2:e5:6a:c9:07:e1:49:96:
         6f:4c:7b:22:02:c0:53:05:3c:78:c0:56:36:a3:d5:fe:e3:9e:
         41:d3:d0:5b:9d:2a:de:0a:90:32:ac:48:ce:21:b2:5c:5c:ad:
         48:02:e9:e7:c8:b4:8c:6a:e5:5b:bf:3c:f7:3e:ef:79:13:a6:
         b8:a6:bd:2b:b6:db:86:7f:26:83:52:ec:74:85:a3:5b:71:1c:
         3c:8b:a1:29:89:d1:21:31:d1:af:17:53:1a:f2:be:49:2a:04:
         9f:03:c3:dc:0f:bf:e3:d1:44:0c:8f:8c:79:dc:7b:15:4a:fe:
         1c:24:80:77:4d:5c:cb:aa:a2:15:d8:87:9a:5f:25:fd:9c:80:
         9c:2e:c4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org