Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7F5170CE8EA1B88B0BE10BE5E85190F0DC320885.cer
File:                     7F5170CE8EA1B88B0BE10BE5E85190F0DC320885.cer (raw, json)
Hash identifier:          ZbJOQYajtURp/lNqqzS8IGb6d/qByD7Xevnz+MHfdkA=
Subject key identifier:   7F:51:70:CE:8E:A1:B8:8B:0B:E1:0B:E5:E8:51:90:F0:DC:32:08:85
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7667DF9CD0B5AFE0604235A4C44D0C8249C1973B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/7F5170CE8EA1B88B0BE10BE5E85190F0DC320885.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 17:06:18 +0000
Certificate not after:    Sat 06 Apr 2024 17:11:18 +0000
Subordinate resources:    AS: 268088
                          IP: 45.168.100.0/22
                          IP: 2804:57d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:67:df:9c:d0:b5:af:e0:60:42:35:a4:c4:4d:0c:82:49:c1:97:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  8 17:06:18 2023 GMT
            Not After : Apr  6 17:11:18 2024 GMT
        Subject: CN=7F5170CE8EA1B88B0BE10BE5E85190F0DC320885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b9:06:a6:e2:c4:d1:32:be:9c:97:d2:e0:c1:
                    8e:75:fa:dc:5f:61:f7:64:26:bc:e0:8c:4f:88:e3:
                    72:4c:40:12:35:db:c8:a9:9a:83:ee:05:d8:d1:69:
                    c7:40:b4:08:ae:d3:77:9b:e4:3c:c7:b1:4e:0d:ba:
                    de:ed:3e:29:08:d9:d9:22:44:34:ff:46:b8:1c:c8:
                    cd:fe:c9:4d:87:80:33:c3:ba:12:e3:eb:f6:b9:59:
                    c2:cc:23:24:61:0d:f2:df:75:c1:3c:7a:0a:cc:ad:
                    0f:e4:42:3d:d1:17:7e:07:3d:a9:9b:ec:1e:a3:1d:
                    83:3f:56:c8:81:7a:87:27:c8:5d:f3:4e:a1:69:74:
                    ce:71:64:09:68:3b:9f:08:26:ed:6d:26:e4:c8:b3:
                    ea:8b:b5:d4:a8:5b:09:ed:21:ea:06:e2:a2:53:9f:
                    0e:b3:44:81:45:91:ca:83:5d:44:71:1f:f3:0d:50:
                    03:85:81:3a:b4:12:da:25:d5:2a:a7:74:7a:56:c7:
                    55:4c:7f:91:86:fc:38:cb:25:a5:88:c9:87:4c:36:
                    78:1e:47:9b:00:c3:ec:e7:63:7a:84:9b:6e:a6:7a:
                    3e:db:ff:f6:16:05:d6:38:6a:6b:7c:08:33:b0:dc:
                    d8:83:0b:dc:39:4f:eb:fb:cf:b1:71:8b:51:d7:8c:
                    ff:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:51:70:CE:8E:A1:B8:8B:0B:E1:0B:E5:E8:51:90:F0:DC:32:08:85
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/7F5170CE8EA1B88B0BE10BE5E85190F0DC320885.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.100.0/22
                IPv6:
                  2804:57d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268088

    Signature Algorithm: sha256WithRSAEncryption
         5d:c1:fd:f4:ec:4a:99:81:68:3c:15:c1:b7:5d:2a:00:a1:41:
         7a:1f:00:75:7a:92:8d:0e:56:43:85:bc:5d:94:01:ec:f3:5c:
         61:ff:a6:0c:53:4f:f4:d5:b2:77:4a:b9:09:07:6a:9f:06:fb:
         18:dc:73:97:6a:07:36:41:9c:4f:64:9f:8f:80:16:c1:0f:c7:
         6f:3e:ed:81:06:0d:48:b0:50:74:68:e3:31:1f:66:eb:a5:00:
         a0:04:c8:7b:03:1f:70:cd:08:25:50:3c:5e:88:4f:a5:81:44:
         40:b3:64:93:38:c9:f3:9c:36:84:e0:30:ab:8a:99:c1:5d:6e:
         3d:57:5c:10:96:48:62:fa:f2:ae:de:73:2b:0d:43:c0:3b:c4:
         48:25:a0:dd:7d:a4:48:0d:55:7c:5d:a2:5d:2b:55:8a:d7:92:
         d1:05:dd:eb:a8:20:eb:b1:21:ee:09:48:75:be:49:d2:b9:a7:
         ec:e3:ab:ce:29:5e:25:72:a5:dc:7e:87:95:59:31:3a:0c:82:
         bc:7d:56:38:49:42:23:d1:b0:d7:47:ad:8d:13:2a:06:91:54:
         7f:c5:59:22:3f:37:c6:52:7e:a6:ba:88:92:7c:c3:af:0a:70:
         5c:b5:fe:21:25:d8:33:14:b0:77:a7:38:dc:a0:74:8a:28:69:
         0a:f2:b9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org