Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44.cer
File:                     7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44.cer (raw, json)
Hash identifier:          e6xzHf+6/66kVvo8m7+rYSg+uz/0W6fgESP74d7jqGQ=
Subject key identifier:   7D:82:A4:0C:C4:B5:7B:E0:D3:A4:C9:FB:FC:0A:3E:16:15:1F:DC:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27560F48C6C752F99192F84F94545F50F78EC52B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 16:10:46 +0000
Certificate not after:    Fri 14 Feb 2025 16:15:46 +0000
Subordinate resources:    AS: 269608
                          IP: 45.190.20.0/22
                          IP: 2804:6728::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:56:0f:48:c6:c7:52:f9:91:92:f8:4f:94:54:5f:50:f7:8e:c5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 16:10:46 2024 GMT
            Not After : Feb 14 16:15:46 2025 GMT
        Subject: CN=7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b7:d7:a6:6a:10:46:05:c3:bc:64:af:41:be:
                    84:4f:92:dc:6c:f1:ea:75:ea:3d:6a:fa:a5:97:89:
                    63:0e:11:b1:0d:39:95:ba:4d:dd:17:4f:4f:cd:9f:
                    2f:aa:26:10:4f:60:4c:45:87:39:9a:43:aa:43:b0:
                    3b:ff:26:dd:4d:e2:33:f0:72:09:35:d3:4f:3c:d9:
                    41:06:71:ee:27:c7:0d:2c:a8:8e:62:07:0c:60:d0:
                    70:5f:5a:e6:2a:5a:80:36:70:a3:d4:69:72:7a:70:
                    39:30:77:2a:d3:b5:1a:e2:dd:23:fe:fe:ea:9c:3f:
                    db:24:15:f4:c9:cd:43:67:2b:64:1b:3b:2c:4b:70:
                    7e:70:d9:90:3e:f7:19:76:ce:11:f2:e4:ec:57:a6:
                    fd:99:fe:f0:e8:6d:e9:34:08:5d:f9:cb:4b:91:3b:
                    e1:5e:ba:19:dc:ed:1d:d0:0d:df:ab:8f:0a:be:a5:
                    06:79:a7:4e:a0:c3:f2:90:e1:f8:f3:46:43:20:14:
                    e9:41:0e:dc:22:9a:d5:7b:6d:39:40:51:7c:35:4b:
                    91:b1:e5:dd:59:16:77:90:5f:a5:f1:93:df:1c:42:
                    bd:ef:c2:78:fe:7a:bc:bc:a8:36:81:c2:17:d1:8e:
                    96:e9:d3:63:13:ac:cf:b8:3b:37:a0:06:31:5b:64:
                    1c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:82:A4:0C:C4:B5:7B:E0:D3:A4:C9:FB:FC:0A:3E:16:15:1F:DC:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.20.0/22
                IPv6:
                  2804:6728::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269608

    Signature Algorithm: sha256WithRSAEncryption
         b3:a6:67:8c:da:00:b0:73:41:e0:5d:03:0b:10:31:57:2f:ab:
         16:2a:ef:6e:0c:a0:aa:2f:7f:6e:2a:3d:47:1a:e7:e6:70:10:
         1a:a4:8b:4e:96:ed:11:8f:cd:a8:ea:3a:ec:c6:0e:b3:d4:ab:
         24:d5:96:78:1d:b9:43:b1:77:c3:db:37:e6:54:30:69:4b:a7:
         d8:6a:4c:f8:6e:97:6d:a9:6d:50:fe:a0:c9:78:c0:de:15:53:
         33:e2:cf:d1:88:92:ca:6d:79:84:8f:61:df:d7:b6:a0:cf:d3:
         f0:e3:81:32:7f:c3:b1:bc:15:a2:49:f5:43:8e:9d:65:52:54:
         98:2b:53:3a:77:48:75:5c:01:e9:fa:3f:13:94:0e:b3:7c:df:
         fa:d0:91:78:fa:bd:ee:e9:0c:19:ed:b9:0e:a1:06:0e:e6:97:
         1a:3d:3b:50:eb:fa:fc:0d:a4:37:e2:55:28:d0:cf:80:34:36:
         6f:88:cd:ed:99:29:5b:39:f4:5d:35:06:19:75:8f:4c:77:4c:
         8c:fc:61:2d:b2:16:b2:f3:71:b9:61:b0:4b:58:06:b1:64:6a:
         fd:d0:f5:7c:2c:9d:6e:0e:e7:a1:96:a1:f1:10:7f:6f:dc:09:
         7c:d9:ab:14:26:20:1d:f2:b8:1b:15:cc:d8:df:74:1c:b0:6e:
         3b:63:fa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org