Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4.cer
File:                     7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4.cer (raw, json)
Hash identifier:          vNMENT/hM61M6A5WqzG9FJZai1IGdpPaVORS6vBcraA=
Subject key identifier:   7E:D0:27:3E:AD:90:11:C0:FE:82:E6:D1:AA:57:B0:DD:2D:35:57:E4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       016AEFC0FF4387B21572D41F8B446BAF372F779F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Mar 2023 23:19:25 +0000
Certificate not after:    Fri 08 Mar 2024 23:24:25 +0000
Subordinate resources:    AS: 268876
                          IP: 45.171.122.0/23
                          IP: 2804:5be8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6a:ef:c0:ff:43:87:b2:15:72:d4:1f:8b:44:6b:af:37:2f:77:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 10 23:19:25 2023 GMT
            Not After : Mar  8 23:24:25 2024 GMT
        Subject: CN=7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:ff:d6:87:d3:03:db:fe:50:c5:10:9c:fe:
                    ea:e4:eb:db:72:9a:e3:3e:5b:a1:0e:dd:7f:b7:b5:
                    f5:41:87:3a:00:0e:91:61:57:4e:1d:17:b1:30:ec:
                    6f:c7:08:2c:42:71:a1:6e:17:f6:9e:f5:e7:96:76:
                    99:2e:03:9d:3e:c5:d3:7f:0a:65:ed:99:ca:2d:be:
                    59:37:09:1c:8b:04:3c:80:e1:ea:68:a4:7f:57:d5:
                    a7:92:25:90:01:0a:20:59:fb:b2:46:68:8a:9e:b4:
                    3b:21:f5:ab:e2:ea:57:83:c2:bc:09:8f:47:e0:25:
                    b6:39:c9:d8:70:15:20:5e:1a:0e:ca:68:79:f5:42:
                    94:47:a3:a7:8d:27:2c:3e:2b:49:8e:1b:1f:f8:ea:
                    03:1b:bd:cd:9f:86:ea:d9:32:72:23:ba:9e:bb:b6:
                    aa:83:18:ae:98:48:e3:72:8f:3a:d8:55:bb:48:6e:
                    24:e7:8d:a7:b6:44:fb:d9:32:00:a1:40:06:62:53:
                    d2:bc:85:a7:17:e4:9d:81:45:79:1c:34:13:80:b6:
                    58:cd:e3:d9:bc:8a:bf:2a:0a:49:96:5b:c7:24:cd:
                    2f:01:d4:de:0d:30:f6:fc:e8:23:52:d3:80:30:a7:
                    9c:67:e1:dc:2f:38:47:9b:38:62:61:1b:fe:8d:d1:
                    f1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:D0:27:3E:AD:90:11:C0:FE:82:E6:D1:AA:57:B0:DD:2D:35:57:E4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.122.0/23
                IPv6:
                  2804:5be8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268876

    Signature Algorithm: sha256WithRSAEncryption
         6a:44:ad:d6:5c:c4:d5:5a:c2:23:90:f5:1b:18:de:75:7b:0f:
         0e:3b:ee:07:5a:aa:9f:2f:d4:50:ce:5f:0a:f0:48:74:0d:62:
         dd:9f:37:93:fb:84:53:6b:56:4d:fe:d7:bd:f0:c4:9f:a3:79:
         a8:a6:29:56:32:82:00:53:ae:fd:e7:c6:47:cc:da:78:d9:c2:
         b2:12:5a:98:12:11:8b:b6:f8:3b:be:eb:1b:79:2f:ae:05:07:
         f9:06:29:ad:e2:cd:e6:02:2e:da:7b:3c:f9:99:19:eb:c2:69:
         7a:ca:79:02:02:3a:b0:5d:22:e5:5d:bd:ab:32:8f:ea:6f:f5:
         b1:69:40:a4:0f:26:31:0c:8a:d0:b7:81:a1:fc:23:3e:d5:ab:
         23:59:65:1f:8c:9e:8d:fa:06:56:aa:c7:85:5f:ef:0f:9d:1b:
         7e:bd:72:ed:7c:5d:d0:7f:e8:0f:bb:bd:1f:8e:38:4e:16:09:
         64:55:a4:5a:6d:a0:a9:c9:3c:95:d1:74:13:5d:e1:82:33:77:
         b6:4e:58:54:50:c8:ea:49:af:c0:42:14:ca:26:27:af:ff:f8:
         9f:e6:10:16:e5:60:f8:21:f6:83:ab:51:6a:56:b3:c6:52:32:
         05:3f:3f:f6:5e:6b:0e:c5:af:8c:b2:b2:d3:71:ec:27:7d:98:
         44:11:44:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org