Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A07201EB497ECDF417C2B45551BA90FE23600A9F.cer
File:                     A07201EB497ECDF417C2B45551BA90FE23600A9F.cer (raw, json)
Hash identifier:          cK3P0ACqHi2M3AA9Ai9hmaBW781w7s+Xx+OdS4jcpfQ=
Subject key identifier:   A0:72:01:EB:49:7E:CD:F4:17:C2:B4:55:51:BA:90:FE:23:60:0A:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       50943F0AB3F200A32A30931245C3FDAC6A3C1356
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/A07201EB497ECDF417C2B45551BA90FE23600A9F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Mar 2023 19:45:21 +0000
Certificate not after:    Wed 20 Mar 2024 19:50:21 +0000
Subordinate resources:    AS: 267500
                          IP: 201.182.60.0/22
                          IP: 2804:4270::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:94:3f:0a:b3:f2:00:a3:2a:30:93:12:45:c3:fd:ac:6a:3c:13:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 19:45:21 2023 GMT
            Not After : Mar 20 19:50:21 2024 GMT
        Subject: CN=A07201EB497ECDF417C2B45551BA90FE23600A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:36:ec:da:d1:19:c7:4b:1f:55:a1:1b:a9:15:
                    47:e7:1e:71:f7:d1:c4:f9:5d:ca:2f:24:cd:2f:59:
                    d8:10:38:1b:68:0b:5a:c7:ea:d0:9a:7e:91:8b:b1:
                    d3:5f:59:1b:f5:d4:ce:27:82:4e:95:2e:09:27:e0:
                    73:02:22:bc:21:30:2e:70:80:6a:b0:70:ad:87:0a:
                    7c:0b:49:f3:75:23:4f:72:64:fe:7d:07:dd:7a:98:
                    4b:e9:44:8f:31:6c:e8:15:d3:79:3b:93:b9:74:1c:
                    b1:21:4d:68:cb:58:82:d9:4a:e2:5c:dd:a8:89:a5:
                    52:56:07:bb:cd:22:45:77:70:f7:c0:14:7f:c4:90:
                    e5:0a:97:9d:bf:e8:58:4e:5e:01:1a:ec:79:5e:6a:
                    22:86:66:25:f7:e9:83:b4:86:c8:0e:ab:2a:3f:8d:
                    0c:bf:7d:60:6a:8e:ba:b2:00:46:8c:b5:25:af:20:
                    f9:07:ef:95:24:90:b3:87:e2:c6:62:f3:6f:a7:19:
                    32:ed:97:8a:91:bd:dd:b2:b6:02:68:05:81:ff:7f:
                    bc:a9:5d:fd:19:b6:f3:d4:0a:5b:4e:18:10:da:54:
                    d7:28:1b:f1:3b:d2:73:2a:ca:53:88:db:62:e5:2d:
                    be:66:6f:4d:e1:e9:00:be:76:5f:a4:2e:22:10:f0:
                    de:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:72:01:EB:49:7E:CD:F4:17:C2:B4:55:51:BA:90:FE:23:60:0A:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/A07201EB497ECDF417C2B45551BA90FE23600A9F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.60.0/22
                IPv6:
                  2804:4270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267500

    Signature Algorithm: sha256WithRSAEncryption
         a5:56:ee:a2:7f:26:a7:b7:f4:6d:bb:48:fa:64:5f:04:60:b2:
         01:ca:1f:23:f9:e3:59:44:ba:ec:27:4f:82:c1:fd:92:67:7a:
         1f:54:01:dd:c7:03:2c:8f:94:9a:51:5a:1a:c8:c5:15:4e:d3:
         09:96:9d:07:17:41:1f:9a:af:66:cc:0e:51:b7:93:91:19:6d:
         af:e9:54:bc:d0:b0:79:92:44:09:46:0e:65:bb:f1:d1:ad:2a:
         11:99:48:89:c0:0e:60:c8:58:f2:9f:20:fc:e9:05:c3:df:5c:
         24:92:18:1e:78:b9:aa:9e:db:fb:55:54:74:8f:92:15:80:34:
         79:04:76:22:bc:fa:15:ea:8d:b5:52:6a:1b:f6:3f:64:b4:7f:
         14:d6:16:e1:41:28:93:c4:80:d7:2b:e9:29:14:dc:0e:b6:27:
         ac:cd:43:92:a9:a6:6a:48:8b:1e:85:97:fa:96:d2:65:f9:1d:
         d2:63:66:49:b8:fb:0e:33:7c:ac:02:8b:07:af:7f:60:4b:99:
         88:db:3c:49:21:60:00:e0:81:30:19:92:e6:59:32:52:12:65:
         50:05:35:0a:19:d5:f2:58:19:97:62:4f:e9:ff:5e:00:50:09:
         3a:a3:63:6d:e7:54:91:d0:b7:b4:cc:ba:4e:c0:36:fb:df:2c:
         b9:42:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org