Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.cer
File:                     7E3E133E801DA73CE14E16E83124A29A9EE74F22.cer (raw, json)
Hash identifier:          oWKuJOaod4GCpEcnkxUpqZ8Ljpl4XPGTmZ0PGHtGEMc=
Subject key identifier:   7E:3E:13:3E:80:1D:A7:3C:E1:4E:16:E8:31:24:A2:9A:9E:E7:4F:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2914F9C62F374D4DBBDAFC9FCA2B03E85893BCB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 May 2023 11:41:35 +0000
Certificate not after:    Mon 06 May 2024 11:46:35 +0000
Subordinate resources:    AS: 28656
                          AS: 262514
                          AS: 264228
                          IP: 45.190.116.0/22
                          IP: 168.195.100.0/22
                          IP: 170.80.64.0/22
                          IP: 177.55.176.0/20
                          IP: 177.55.224.0/20
                          IP: 179.0.72.0/22
                          IP: 190.52.72.0/22
                          IP: 190.109.64.0/22
                          IP: 201.77.160.0/20
                          IP: 2804:568::/32
                          IP: 2804:2488::/32
                          IP: 2804:33cc::/32
                          IP: 2804:7944::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:14:f9:c6:2f:37:4d:4d:bb:da:fc:9f:ca:2b:03:e8:58:93:bc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  8 11:41:35 2023 GMT
            Not After : May  6 11:46:35 2024 GMT
        Subject: CN=7E3E133E801DA73CE14E16E83124A29A9EE74F22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:71:a3:40:d5:77:a3:af:ee:13:ed:2e:7f:
                    4e:ca:40:36:0d:a1:39:ab:62:96:4f:b1:18:e6:46:
                    a0:ba:1f:ba:3d:de:b9:30:d7:05:5a:e8:ca:33:a6:
                    df:4e:4a:e2:b5:b1:bf:0c:5f:64:e1:c0:66:8b:64:
                    b0:17:e2:9c:92:71:3d:9e:dc:8d:db:a1:31:46:8b:
                    f5:23:3f:19:1f:8d:c3:65:6d:e5:df:80:25:95:4b:
                    63:48:94:53:dc:bd:e6:5e:c1:ba:62:ec:85:92:2b:
                    12:0a:61:e7:54:64:49:03:0d:f7:ca:63:11:df:2e:
                    c6:d0:b2:a0:dd:d6:ae:70:e5:4a:3b:26:9b:16:f2:
                    55:0a:9a:02:2f:08:51:cd:ed:c3:76:08:78:14:ea:
                    a3:26:9c:9b:2c:0c:b2:ec:cb:59:6f:ef:7e:f3:8f:
                    f7:57:39:3f:a6:db:15:7b:9f:fa:fe:35:bc:04:8f:
                    a8:42:87:fa:98:ba:e5:0f:29:60:27:83:36:c4:25:
                    75:62:c8:7b:fd:11:96:ab:2a:be:5c:93:36:1e:89:
                    1d:3a:21:fe:40:cb:42:fe:f9:a6:2b:cd:b6:67:1e:
                    ab:f0:fe:99:5d:0f:af:35:8f:69:d1:69:d1:2d:cc:
                    a4:c8:92:b0:df:b7:ee:1e:4b:b3:60:e9:35:0f:e7:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:3E:13:3E:80:1D:A7:3C:E1:4E:16:E8:31:24:A2:9A:9E:E7:4F:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.116.0/22
                  168.195.100.0/22
                  170.80.64.0/22
                  177.55.176.0/20
                  177.55.224.0/20
                  179.0.72.0/22
                  190.52.72.0/22
                  190.109.64.0/22
                  201.77.160.0/20
                IPv6:
                  2804:568::/32
                  2804:2488::/32
                  2804:33cc::/32
                  2804:7944::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28656
                  262514
                  264228

    Signature Algorithm: sha256WithRSAEncryption
         70:d1:c0:35:88:25:43:52:54:21:2b:53:b6:e5:38:81:28:9a:
         9f:b1:2c:8c:91:2e:99:58:d2:03:6f:9b:f6:69:46:68:f6:8a:
         6c:80:f2:39:61:46:ee:46:66:d9:c2:96:52:36:62:1c:a5:7c:
         33:26:1e:3b:95:1a:e5:67:47:3c:95:7b:64:d7:1f:30:68:39:
         42:a0:8d:35:2e:03:52:21:79:30:11:42:a4:1e:e0:07:6c:24:
         c9:c2:6a:16:7d:67:32:f7:6b:04:a0:2d:45:6e:a8:1e:b7:45:
         26:92:6a:7d:ae:45:26:71:5f:04:5d:f0:95:50:25:5e:4e:cb:
         dd:23:d9:13:95:2a:da:fc:d8:88:c5:db:00:95:54:89:32:8e:
         48:74:c2:a7:6b:c6:6e:25:76:6f:66:4e:fc:12:c8:5c:a4:9e:
         c0:e9:f2:d2:34:b6:2d:d5:d5:94:72:52:db:03:a2:9f:e7:ea:
         16:a9:cc:4f:f0:11:49:7f:ae:66:82:d2:b1:1b:3d:b7:ce:ec:
         f6:e5:1c:5e:86:58:58:77:35:41:03:7d:29:d6:8c:3a:92:61:
         8c:26:d6:e4:fd:67:47:a4:d4:80:04:df:55:f1:04:98:af:2f:
         51:a8:59:cc:d5:92:2c:56:df:58:fc:cb:5c:e4:48:8c:21:c9:
         77:17:93:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org