Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7DFF427372CF9267D0C32ECF96D46120B0C379E1.cer
File:                     7DFF427372CF9267D0C32ECF96D46120B0C379E1.cer (raw, json)
Hash identifier:          jc6hsZmBmfXghfEf8nI6FHnNXTtg3VPJJqwH/f5U5eE=
Subject key identifier:   7D:FF:42:73:72:CF:92:67:D0:C3:2E:CF:96:D4:61:20:B0:C3:79:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E1562B57FDAC02C257F359B7F347E18C6C852B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/7DFF427372CF9267D0C32ECF96D46120B0C379E1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 15:06:48 +0000
Certificate not after:    Tue 12 Nov 2024 15:11:48 +0000
Subordinate resources:    AS: 268402
                          IP: 45.160.16.0/22
                          IP: 2804:50a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:15:62:b5:7f:da:c0:2c:25:7f:35:9b:7f:34:7e:18:c6:c8:52:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 14 15:06:48 2023 GMT
            Not After : Nov 12 15:11:48 2024 GMT
        Subject: CN=7DFF427372CF9267D0C32ECF96D46120B0C379E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:b8:1a:93:2d:16:b3:67:c3:77:08:3b:a7:
                    5d:e6:9c:87:d1:a6:97:f6:e0:1a:46:ad:81:4f:f6:
                    55:1a:4b:fe:10:22:14:d8:1a:8f:e5:6d:d8:ac:95:
                    b1:ad:1d:65:e2:6a:76:5a:86:90:37:9b:34:10:62:
                    17:38:73:55:70:b3:1c:dd:f7:b1:e0:12:a5:31:e9:
                    1d:02:86:19:ee:7d:8a:cd:09:a6:20:42:00:6c:0e:
                    11:9a:15:0d:52:c0:97:c9:6f:72:18:d5:86:f9:f3:
                    a4:d1:6b:64:de:a5:3f:22:1c:74:db:62:c2:10:58:
                    68:d5:2b:ee:28:b9:ce:db:12:c3:5e:ca:a5:08:83:
                    18:44:d1:b6:d2:1b:ee:30:ed:15:d6:10:7d:39:e7:
                    ec:fe:44:8a:a9:4b:39:c7:a2:1e:5d:90:7f:39:c3:
                    e6:9f:a4:3d:51:06:ec:a0:bc:f7:18:8b:8c:85:b6:
                    ac:8b:40:db:af:bc:29:9e:f9:82:c0:01:92:76:d9:
                    04:29:5d:66:e0:b8:3e:b0:9d:72:78:3f:fe:0c:85:
                    34:30:87:49:de:da:57:ce:bd:86:08:fe:b8:26:ec:
                    1b:1b:c3:62:79:d2:fe:d6:02:be:e4:6c:fc:92:e7:
                    3b:af:9b:23:4b:75:db:9f:33:d7:94:64:57:fe:4d:
                    2f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:FF:42:73:72:CF:92:67:D0:C3:2E:CF:96:D4:61:20:B0:C3:79:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/7DFF427372CF9267D0C32ECF96D46120B0C379E1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.16.0/22
                IPv6:
                  2804:50a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268402

    Signature Algorithm: sha256WithRSAEncryption
         8b:25:f2:9c:71:cd:52:30:f7:65:59:c2:c8:a8:26:8b:20:11:
         19:af:93:5a:5c:5e:20:f1:17:4c:30:71:78:a7:15:25:f5:8b:
         62:44:84:9c:87:89:f0:c4:de:a6:38:f0:e1:aa:58:6e:a9:e7:
         46:5e:97:3c:03:40:be:63:6b:cf:a5:56:ce:8f:78:c1:c7:7c:
         45:ff:83:97:7e:77:80:72:76:49:dd:80:81:87:5d:98:64:ed:
         73:b7:94:20:a5:30:af:2c:e8:eb:f8:16:f6:b9:7e:fa:9b:cf:
         74:c8:15:6c:5e:77:bf:19:fe:7e:65:43:87:c5:e3:b9:89:8d:
         11:fe:c6:39:08:52:31:5d:72:c9:6c:83:40:ba:b8:1c:ac:e5:
         11:62:c0:66:b3:5c:30:b5:16:17:39:09:1a:33:3d:4d:32:b3:
         e2:1e:d7:59:dc:6d:50:9d:34:25:8e:c4:ea:a2:4e:65:4b:cb:
         74:91:64:86:c9:bb:0b:84:c7:f7:78:22:28:0f:46:2b:d0:ce:
         94:89:18:0b:5d:7b:46:ff:bf:4f:0d:fd:7a:86:70:cb:50:03:
         9d:3a:3b:43:1d:50:0c:02:9a:4d:60:93:33:73:f8:26:5b:25:
         64:11:24:56:40:49:81:cc:bf:41:16:9e:2b:bc:8b:b2:c3:72:
         dd:55:aa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org