Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A07228844CBD41A718AC926925D4CB15330FABAF.cer
File:                     A07228844CBD41A718AC926925D4CB15330FABAF.cer (raw, json)
Hash identifier:          wVU397saPH/qYrdJtv+3T7kqoNuLHNJCg7QqaC/Qzek=
Subject key identifier:   A0:72:28:84:4C:BD:41:A7:18:AC:92:69:25:D4:CB:15:33:0F:AB:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4FAEFFA99F63CA4D2273763B1A9427C2DE2C474D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/A07228844CBD41A718AC926925D4CB15330FABAF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Mar 2023 18:50:45 +0000
Certificate not after:    Mon 11 Mar 2024 18:55:45 +0000
Subordinate resources:    AS: 61782
                          IP: 200.77.176.0/22
                          IP: 2804:1940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ae:ff:a9:9f:63:ca:4d:22:73:76:3b:1a:94:27:c2:de:2c:47:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 13 18:50:45 2023 GMT
            Not After : Mar 11 18:55:45 2024 GMT
        Subject: CN=A07228844CBD41A718AC926925D4CB15330FABAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c8:52:db:f2:7c:76:5d:40:41:9c:6e:a2:b1:
                    6f:06:f4:f1:44:b1:73:7f:38:50:9e:b6:af:d7:a9:
                    8f:4a:24:96:68:b8:93:71:c6:80:0b:51:c1:6c:64:
                    dd:76:fb:73:a4:1f:2e:7c:84:44:4d:e5:24:45:da:
                    f2:f9:c7:a3:ab:28:8c:f5:a8:e3:b3:62:0c:1f:4f:
                    a0:0c:04:78:9d:56:54:4c:e4:43:17:d8:a7:f4:4b:
                    d4:12:5f:5a:be:a1:82:16:f1:30:17:8c:f4:f3:e8:
                    d7:a8:77:af:47:ad:55:65:69:dd:7b:e7:94:77:0e:
                    76:82:86:fd:3c:a1:51:05:f9:ac:53:e4:9f:a1:3b:
                    e5:2d:97:61:dd:09:fc:52:14:06:67:6a:72:b6:4a:
                    a6:60:e9:bf:da:82:99:7e:db:90:8d:81:92:66:ed:
                    c2:60:a8:f0:b8:81:6f:ac:bf:e8:85:80:74:0e:a4:
                    82:63:7b:bb:79:ae:3d:89:ec:da:ae:84:53:a8:c2:
                    cb:e9:76:72:19:bb:f7:90:16:84:d1:de:52:e9:8d:
                    d7:4c:60:64:35:31:b4:cc:ef:e2:ba:f4:64:77:6e:
                    c7:58:20:8d:30:5a:d0:fd:bb:78:cc:27:55:65:4c:
                    07:36:1b:36:f2:de:4c:d3:7e:83:f0:2c:de:2b:0b:
                    d3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:72:28:84:4C:BD:41:A7:18:AC:92:69:25:D4:CB:15:33:0F:AB:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/A07228844CBD41A718AC926925D4CB15330FABAF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.176.0/22
                IPv6:
                  2804:1940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61782

    Signature Algorithm: sha256WithRSAEncryption
         54:1c:a0:67:16:97:20:aa:13:4c:33:97:01:5a:e7:8a:1b:19:
         ed:11:71:0a:4f:89:04:10:d0:97:92:33:dc:a4:4a:8c:ec:dc:
         09:5d:3e:f9:6a:16:82:b8:59:08:e1:9e:24:ae:61:e3:af:a4:
         e0:5b:db:53:d8:58:48:bb:3b:a2:6f:dd:b0:75:85:d3:04:53:
         ff:a8:77:e4:4b:8d:7d:be:b7:98:58:03:af:57:7d:b5:04:9e:
         bc:4f:e6:87:b4:59:ea:f3:b5:2a:d2:b0:7f:e8:fb:64:23:b5:
         6f:8b:d3:92:b7:f2:bd:d0:84:6d:ea:a7:06:e8:db:48:07:86:
         ab:b7:60:67:da:cc:8c:8e:3d:e6:d3:f5:2f:53:89:40:d0:db:
         04:91:14:cc:a4:b1:28:13:26:3c:83:3a:d1:1f:44:29:71:9e:
         dd:d2:a2:51:bf:f1:d3:bf:0f:6b:f3:23:22:df:67:95:77:c9:
         a3:39:43:e6:06:9f:48:e9:50:36:e1:3b:f8:49:81:e2:78:99:
         bd:2f:b8:b1:5e:bd:5b:33:49:90:54:ac:ba:b6:17:08:71:1b:
         b6:ac:3d:21:73:fc:b9:7f:fa:56:3b:17:7f:b7:ac:de:40:77:
         91:3f:0f:4f:ee:18:07:cf:26:81:8f:4e:a3:f3:72:9f:1d:06:
         cf:25:51:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org