Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A1307C292FC2DF8AD3BEE5666FD274BB3B811726.cer
File:                     A1307C292FC2DF8AD3BEE5666FD274BB3B811726.cer (raw, json)
Hash identifier:          EyNuU9iLclHHjrZlJW9xvHWQ8pXyuadSRB4I4tieDI0=
Subject key identifier:   A1:30:7C:29:2F:C2:DF:8A:D3:BE:E5:66:6F:D2:74:BB:3B:81:17:26
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       73E754B18FD313DEBE18F950E310822597F9AEC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/A1307C292FC2DF8AD3BEE5666FD274BB3B811726.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Oct 2022 20:38:30 +0000
Certificate not after:    Thu 19 Oct 2023 20:43:30 +0000
Subordinate resources:    AS: 271335
                          IP: 207.248.20.0/22
                          IP: 2804:79e8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e7:54:b1:8f:d3:13:de:be:18:f9:50:e3:10:82:25:97:f9:ae:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 20 20:38:30 2022 GMT
            Not After : Oct 19 20:43:30 2023 GMT
        Subject: CN=A1307C292FC2DF8AD3BEE5666FD274BB3B811726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c5:ac:a1:2d:47:a2:52:b2:a6:9f:3e:7e:95:
                    f3:8e:9f:88:48:09:ca:5d:61:cc:f1:44:de:cb:e1:
                    96:53:96:e4:97:5d:00:c9:73:3e:19:0e:b2:50:ec:
                    c8:aa:ea:00:2c:14:09:9a:78:08:34:83:d8:8a:65:
                    f9:6c:a2:ad:43:d0:da:d4:18:61:4a:13:b6:ab:8f:
                    c9:c6:85:d1:fc:42:31:ff:94:95:72:91:b8:7e:3d:
                    6c:53:9a:4f:7a:72:67:fc:15:ee:9b:c8:58:ac:6b:
                    29:d5:af:51:c0:40:0b:df:35:26:41:d2:c6:9a:35:
                    14:16:21:b0:39:f1:77:3c:01:e0:eb:b9:1f:97:c7:
                    f4:ff:ca:4d:b9:65:9e:00:56:77:eb:09:88:cd:44:
                    cc:79:0e:9c:d9:ed:c1:45:94:20:2f:31:b6:da:97:
                    b2:d7:02:80:af:61:d5:a5:97:c0:c7:6f:f6:b1:44:
                    ec:93:24:1e:12:38:8e:ed:c1:94:da:b6:02:3c:46:
                    4e:c1:71:31:04:5e:0b:11:59:9c:7d:6d:af:ad:e9:
                    90:a0:46:b8:a7:59:cb:02:63:dc:cb:94:3f:66:0c:
                    35:1a:0f:ca:3a:74:93:c7:fc:18:4f:1e:2d:f7:28:
                    40:a2:4e:d9:29:e4:5a:e1:dd:58:69:68:db:ae:e3:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:30:7C:29:2F:C2:DF:8A:D3:BE:E5:66:6F:D2:74:BB:3B:81:17:26
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/A1307C292FC2DF8AD3BEE5666FD274BB3B811726.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.20.0/22
                IPv6:
                  2804:79e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271335

    Signature Algorithm: sha256WithRSAEncryption
         af:e9:6a:a4:ce:01:32:ef:04:8f:d4:a2:9f:dc:40:c3:0d:42:
         fa:3d:8d:08:99:81:08:df:cf:58:6c:ce:8a:66:c2:34:21:92:
         c4:79:24:4b:fd:62:e5:1c:ad:5d:63:8a:f9:cf:b1:02:df:ef:
         49:fa:13:52:47:74:60:d7:c2:dc:d5:68:3f:45:b5:e0:3a:58:
         66:a9:a4:09:49:dd:f2:89:3b:ad:af:7b:82:5e:73:c5:f1:62:
         d6:f6:4c:c1:42:63:6e:ed:f1:e5:92:8d:ec:ff:2c:fc:08:12:
         11:1e:b7:38:49:61:56:f8:b2:68:6b:03:34:80:77:a8:30:e9:
         ae:08:85:5e:54:db:89:5e:8a:2f:9e:50:23:8b:ee:5d:58:90:
         f0:ca:cb:b8:e7:30:83:23:ec:15:f3:61:b4:09:6e:cb:f5:57:
         10:53:c0:81:66:89:3f:83:1f:dd:2d:ec:23:70:c0:3e:66:e7:
         7a:47:17:01:69:7f:c4:10:bd:3d:77:7c:94:e5:fd:fd:2e:5d:
         37:e5:d5:dc:50:94:43:e7:3a:32:a9:8c:2e:43:dd:ae:72:49:
         e8:a9:c5:a1:6e:9c:57:0f:81:fc:42:f8:87:6e:f0:09:dd:c4:
         50:f3:cc:8e:0a:ea:ef:8b:c7:69:54:ea:34:09:7f:59:d9:da:
         17:81:41:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 01:27:34 2025 by rpki-client