Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A74780F81B7728CA8AF087579AE827C07238EA86.cer
File:                     A74780F81B7728CA8AF087579AE827C07238EA86.cer (raw, json)
Hash identifier:          9E3mAF62V/mjcy7BFTKjiGfneW7EBEFqhcLHE82Ybwk=
Subject key identifier:   A7:47:80:F8:1B:77:28:CA:8A:F0:87:57:9A:E8:27:C0:72:38:EA:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       33430FDF5B19759152C3DCFAF79E8146F0C67163
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/0/A74780F81B7728CA8AF087579AE827C07238EA86.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 20 May 2023 16:10:29 +0000
Certificate not after:    Sat 18 May 2024 16:15:29 +0000
Subordinate resources:    AS: 267640
                          IP: 45.71.248.0/22
                          IP: 2804:4494::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:43:0f:df:5b:19:75:91:52:c3:dc:fa:f7:9e:81:46:f0:c6:71:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 20 16:10:29 2023 GMT
            Not After : May 18 16:15:29 2024 GMT
        Subject: CN=A74780F81B7728CA8AF087579AE827C07238EA86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:47:7b:fd:8e:4e:89:d6:99:bd:dc:a0:36:
                    8a:8b:70:2e:38:34:26:de:b8:25:55:f2:99:c4:90:
                    76:68:26:30:41:64:0c:6e:4b:3d:0f:fb:5a:e1:2d:
                    7c:6b:55:3c:74:1f:b4:d0:89:f4:8a:71:a5:c2:45:
                    62:23:19:c5:99:a6:b3:75:8a:5c:45:18:22:41:cc:
                    78:a7:d0:7e:13:ef:85:98:6a:67:78:c8:c8:11:a9:
                    51:50:53:56:fa:09:fd:44:6c:78:f2:7f:26:bd:9c:
                    34:47:fa:a3:3c:6e:42:2a:46:c1:79:35:24:ce:98:
                    4b:f4:66:65:b9:2b:50:a0:ea:a4:b8:f4:8a:cc:1d:
                    f6:fe:90:16:be:02:4a:ba:17:47:b0:c7:8e:f5:dc:
                    f1:4a:b7:2c:c8:99:97:a4:be:fd:25:70:d2:99:4b:
                    de:29:90:e5:de:1e:16:85:47:43:02:9e:a3:e6:1d:
                    e5:6c:e0:a1:44:5e:a5:e2:e2:65:20:b6:68:eb:6b:
                    26:9c:71:c1:78:39:9d:22:09:19:d5:95:a8:eb:03:
                    2c:b8:ee:55:15:48:e1:9a:ec:d2:ec:02:0e:9c:49:
                    93:e6:f2:02:ae:76:ce:c5:f3:81:d9:be:75:83:9b:
                    aa:b0:d4:e1:c2:87:9f:cc:37:e3:6a:80:5c:cf:f8:
                    d3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:47:80:F8:1B:77:28:CA:8A:F0:87:57:9A:E8:27:C0:72:38:EA:86
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/0/A74780F81B7728CA8AF087579AE827C07238EA86.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.248.0/22
                IPv6:
                  2804:4494::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267640

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:30:63:e0:6b:eb:41:ec:d6:7c:64:7e:9a:01:ad:e0:e0:
         c4:19:5c:2b:31:e6:50:dd:7b:b8:1b:65:40:40:94:c9:3e:89:
         b4:66:ac:74:c8:45:ea:e5:77:4a:ba:48:7d:21:1e:6f:b1:55:
         06:7e:2d:cc:f8:39:9e:b3:2f:e9:91:00:ca:7b:1a:ff:7f:4c:
         4e:8c:83:45:bf:a1:42:7c:63:10:41:f3:97:48:c7:cc:85:22:
         7a:d5:b2:9f:77:30:63:c5:59:7b:c6:f7:90:a7:9a:de:0b:47:
         f4:5a:c6:27:c4:bb:ff:7b:39:44:19:11:32:42:98:d9:53:36:
         93:7d:b0:93:16:41:2b:16:2e:8c:63:7a:f5:9b:ef:c1:d5:b2:
         4e:e9:40:c9:e0:c3:c6:1b:ca:6f:06:eb:0f:e7:35:ec:32:70:
         f6:aa:f9:fb:d7:4d:78:22:d5:ba:46:33:1e:cd:bf:48:fd:56:
         8a:df:ed:67:21:69:35:5f:df:aa:83:9f:e1:64:ac:e5:1f:7e:
         b4:65:d3:92:62:86:69:1e:eb:3e:dd:ad:70:c3:52:af:2d:6a:
         7a:a8:34:63:2e:fa:78:85:a6:e1:cd:fd:61:c8:b9:3e:11:02:
         36:05:a9:ab:d7:e7:d0:00:cb:f1:58:84:05:ee:3c:f2:cd:23:
         fd:76:7d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:41 2024 by rpki-client on console-ams.rpki-client.org