Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A7C8C92A7D756E9905BAD7B1463F19DEF553BAB9.cer
File:                     A7C8C92A7D756E9905BAD7B1463F19DEF553BAB9.cer (raw, json)
Hash identifier:          DWgKWA13Znus/IQyo+7wZsxOuyLoJdLA3PzEnAGUf9Q=
Subject key identifier:   A7:C8:C9:2A:7D:75:6E:99:05:BA:D7:B1:46:3F:19:DE:F5:53:BA:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       72204A6E63781ADEABC24724F1A5C15F4C805384
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/56wuQLSFhXjCZTJcwGZeGqM5rCd1PoxrLT9ruzVdJcZC/0/A7C8C92A7D756E9905BAD7B1463F19DEF553BAB9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/56wuQLSFhXjCZTJcwGZeGqM5rCd1PoxrLT9ruzVdJcZC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 21:29:49 +0000
Certificate not after:    Wed 23 Oct 2024 21:34:49 +0000
Subordinate resources:    AS: 273787
                          IP: 2804:8c34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:20:4a:6e:63:78:1a:de:ab:c2:47:24:f1:a5:c1:5f:4c:80:53:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 21:29:49 2023 GMT
            Not After : Oct 23 21:34:49 2024 GMT
        Subject: CN=A7C8C92A7D756E9905BAD7B1463F19DEF553BAB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:59:e9:fb:ca:fc:0b:cc:62:94:1d:7e:35:
                    f3:42:10:c4:9f:f5:6a:65:69:7b:5c:69:45:9b:9e:
                    85:f2:9d:0a:ae:e6:23:18:e1:14:5f:ba:f9:58:ad:
                    6d:08:3d:21:2e:67:00:44:7a:60:74:53:76:86:fe:
                    ab:d7:88:fe:a5:b2:77:47:ab:b0:99:4a:fd:d6:6d:
                    de:45:1c:2f:1c:3d:f6:5f:96:cc:85:65:05:11:14:
                    0d:47:01:0a:6a:5a:76:42:dd:47:fb:c9:1b:f7:7b:
                    52:df:15:5b:59:b1:8a:de:f2:12:6b:c0:d2:d8:2f:
                    4b:2d:4a:38:d1:f4:65:7c:7b:22:48:6d:81:d8:f7:
                    e5:5a:b7:81:02:b7:02:2a:92:60:8e:34:69:eb:f2:
                    81:30:40:94:6a:7d:0e:cc:93:4d:be:14:d9:be:d8:
                    78:87:45:c2:25:c6:61:d3:a6:c5:c7:20:4f:3a:b3:
                    13:3f:f9:2d:bd:9f:a0:52:77:60:24:cf:db:d4:83:
                    fd:79:49:1e:24:2a:e8:fb:e2:be:35:92:d9:a9:be:
                    46:5e:f5:ed:47:aa:e7:c4:8e:1c:af:f3:a4:b2:0c:
                    f7:97:1f:4f:ca:20:37:7a:b9:56:0b:27:b6:04:65:
                    b6:12:cc:0b:aa:f5:6e:22:35:9b:05:ba:87:3a:1e:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:C8:C9:2A:7D:75:6E:99:05:BA:D7:B1:46:3F:19:DE:F5:53:BA:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/56wuQLSFhXjCZTJcwGZeGqM5rCd1PoxrLT9ruzVdJcZC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/56wuQLSFhXjCZTJcwGZeGqM5rCd1PoxrLT9ruzVdJcZC/0/A7C8C92A7D756E9905BAD7B1463F19DEF553BAB9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273787

    Signature Algorithm: sha256WithRSAEncryption
         04:3c:8a:68:a9:86:9f:b4:62:66:fe:96:f6:3c:f3:62:cb:c0:
         54:df:87:ae:db:31:22:25:b8:c4:25:58:7b:38:f7:04:a1:da:
         36:73:85:b4:52:e1:af:d3:ed:4e:15:8d:ae:2b:2e:3c:03:f8:
         cf:47:9d:a5:a4:19:e6:7c:f5:24:66:8a:0f:4d:cb:74:14:9b:
         9a:a7:1a:02:82:d1:11:3b:4f:e0:6e:6e:16:3c:36:02:02:ea:
         73:d6:1d:a8:db:03:72:7c:df:26:09:72:32:ac:d1:91:bc:15:
         64:ee:1a:4e:70:86:bd:43:3a:19:75:f6:80:4d:cd:3b:8e:b7:
         55:d0:68:9e:24:05:60:df:68:61:7e:9c:ac:e4:7b:d0:9c:68:
         28:56:e3:73:48:2b:6b:9a:4a:4b:8e:44:59:62:af:a2:2a:40:
         72:68:3d:38:53:cc:22:f4:95:8c:12:85:79:55:62:77:ba:f6:
         c6:31:c6:ed:8e:a2:42:90:10:ac:a4:fe:fc:3d:0e:62:d5:5f:
         c4:f3:27:47:ba:3c:f0:fd:f5:6b:a4:f4:03:e2:5d:77:44:82:
         3f:e7:9d:f0:73:47:06:c5:3b:8e:89:ce:ed:92:bf:28:29:95:
         13:9c:27:7a:9a:6b:e0:f0:ef:a1:38:32:b1:bb:3d:b3:c4:df:
         8f:da:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org