Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer
File:                     A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer (raw, json)
Hash identifier:          +xIFqRTwH12tcFDCBC3G6GAF6aD7Ab2NaCyZsfvc2ps=
Subject key identifier:   A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2D583F854B6383C344E5E24A332C06135D7A8AA8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 21:55:10 +0000
Certificate not after:    Mon 23 Sep 2024 22:00:10 +0000
Subordinate resources:    AS: 267424
                          IP: 181.191.132.0/22
                          IP: 2804:4144::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:58:3f:85:4b:63:83:c3:44:e5:e2:4a:33:2c:06:13:5d:7a:8a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 21:55:10 2023 GMT
            Not After : Sep 23 22:00:10 2024 GMT
        Subject: CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f4:9d:1a:54:8e:2e:8a:64:72:2f:10:df:26:
                    55:56:e3:9e:2b:d7:fc:2c:e5:3f:8f:28:98:48:eb:
                    d3:f6:68:db:36:c1:45:09:0b:2f:b8:fe:1b:5f:7c:
                    e2:57:8d:b1:3d:2d:96:2c:e9:2b:46:81:f9:d8:d4:
                    1d:0c:4a:af:98:16:87:a4:0f:22:0d:1a:45:85:0f:
                    8a:38:55:9f:47:ad:58:10:d7:0d:fd:cc:82:b7:9b:
                    85:4d:e8:5c:25:56:c8:dd:90:da:7d:76:bb:b1:2b:
                    7f:a1:7f:0b:a9:40:88:78:62:db:95:38:66:99:a4:
                    2e:48:84:f4:84:0f:1c:b3:4b:73:3e:74:de:c1:b2:
                    27:ed:23:91:eb:b2:85:6b:9a:a0:28:d1:4e:d6:64:
                    20:ee:a3:b4:36:a5:f2:37:2a:71:81:4f:97:83:a4:
                    ce:83:f1:89:54:93:ce:57:37:b5:39:31:1a:cc:bf:
                    58:27:b3:23:34:9d:7e:9e:b4:77:83:3e:95:1a:11:
                    11:5a:80:1e:7e:90:60:a9:06:b8:dd:df:31:ff:84:
                    9e:6c:9b:e8:76:2b:11:a6:fd:ef:d6:95:65:e0:6d:
                    46:e2:b0:c9:a1:e2:1a:85:ee:e1:0b:6d:f9:b2:0c:
                    a9:e1:be:7f:df:7d:f4:93:0e:b5:ea:10:d4:64:7b:
                    29:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.132.0/22
                IPv6:
                  2804:4144::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267424

    Signature Algorithm: sha256WithRSAEncryption
         4a:c7:e9:6c:f6:47:32:5a:f1:e1:d8:ac:6a:83:4c:cf:8b:23:
         a1:42:b2:c6:66:e2:d8:b5:54:45:17:84:04:c1:ec:e3:7d:99:
         fe:f6:63:79:62:e8:1c:d9:87:c7:40:f4:f2:7a:88:26:f9:44:
         33:d8:b5:97:99:71:2f:0b:71:ba:c6:0b:ef:5d:4c:de:36:b5:
         cf:25:03:bd:69:c7:a6:74:b8:48:ee:21:c8:42:48:99:05:f6:
         62:3e:26:a9:75:cf:de:04:4d:86:2b:ec:f7:63:88:d5:38:96:
         e7:42:37:ed:c8:5b:38:e7:9a:3b:2b:33:6c:fd:ec:e2:e4:85:
         57:bc:54:b9:73:f1:b1:54:fb:4e:3c:e8:08:8e:e8:ea:2a:3b:
         90:5c:d1:4e:9a:65:ed:48:1f:bf:2c:eb:70:7c:73:b5:6a:c8:
         71:10:a3:0d:2f:46:02:33:37:f0:82:1d:e7:4c:07:f1:d4:7d:
         e6:25:50:10:d6:96:00:12:7a:b4:2f:17:a4:f4:c0:11:dc:58:
         b0:c1:4b:31:bd:81:bd:ad:b3:ce:70:ba:4d:8e:95:92:2f:eb:
         22:31:d8:6c:ef:0c:03:f9:ca:e9:69:86:1a:d1:73:46:98:86:
         c0:1b:9e:54:5c:e3:6a:3e:b7:16:51:54:e1:9b:88:76:e9:65:
         83:96:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org