Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA.cer
File:                     A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA.cer (raw, json)
Hash identifier:          qi9C9Ydk5Qz/jXbIMg+8H6ZLcExL4rEU1UU15RCRurc=
Subject key identifier:   A7:EB:36:70:BE:4A:7F:26:75:EC:AD:16:8E:7B:03:5D:F5:44:B5:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       70CEFDC618470BB94515E9B2AD3F6CBF16B05C0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 10:43:12 +0000
Certificate not after:    Thu 12 Sep 2024 10:48:12 +0000
Subordinate resources:    AS: 266176
                          IP: 190.196.244.0/22
                          IP: 2804:3bdc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ce:fd:c6:18:47:0b:b9:45:15:e9:b2:ad:3f:6c:bf:16:b0:5c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 10:43:12 2023 GMT
            Not After : Sep 12 10:48:12 2024 GMT
        Subject: CN=A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d1:50:e4:7f:11:c6:fe:91:75:52:a3:72:a4:
                    f4:89:13:ea:42:f1:13:78:97:27:ab:ec:36:6d:b3:
                    29:74:1c:71:17:1b:7d:0f:93:59:4e:cc:15:5f:ec:
                    ee:31:bc:e9:0b:e5:bb:a9:25:38:38:7e:a0:73:ef:
                    36:72:42:28:96:36:32:55:1b:a6:71:98:1e:1f:12:
                    a7:17:9c:20:5a:79:64:98:e5:32:82:d6:18:c2:5e:
                    66:df:94:4c:61:2e:d0:24:70:ea:ab:10:96:52:c0:
                    f8:78:c0:bb:05:90:06:19:ff:5d:49:a5:69:06:1d:
                    b9:45:4d:b3:8b:e4:dd:d9:09:f2:dc:74:80:24:79:
                    df:28:88:7b:f5:b1:d4:54:f1:23:14:de:39:b6:45:
                    7e:f5:88:97:c5:86:02:44:3c:c2:82:38:41:79:3a:
                    ea:c7:df:c9:47:56:db:9f:2a:4b:72:8a:88:2f:f9:
                    0f:b1:93:1b:4f:4c:69:76:4e:8f:0e:11:10:6b:28:
                    c9:d6:8a:92:fc:3d:dc:9b:8b:01:cf:22:00:8f:20:
                    3c:3f:94:26:11:36:a6:3c:4d:47:7b:2f:a8:8d:54:
                    25:d2:63:c9:64:fc:46:57:a0:8e:2e:1f:31:80:f1:
                    b6:f5:63:a0:9d:89:ce:76:62:e2:62:29:d2:ab:76:
                    b8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:EB:36:70:BE:4A:7F:26:75:EC:AD:16:8E:7B:03:5D:F5:44:B5:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.244.0/22
                IPv6:
                  2804:3bdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266176

    Signature Algorithm: sha256WithRSAEncryption
         48:21:f4:83:1c:9f:10:98:d9:c9:38:a4:23:e6:94:2d:de:8b:
         c0:9d:5d:4e:75:1e:49:10:9e:30:05:80:36:6b:99:08:cc:25:
         f0:68:02:fb:17:71:49:8f:05:64:4d:ef:ac:53:1c:ae:6a:b4:
         50:f5:ee:38:5e:aa:05:c9:b5:9a:8b:de:7e:f0:9b:84:17:76:
         44:81:5d:b9:c0:0d:30:f6:3c:c7:79:05:c4:8e:48:59:40:4c:
         4d:14:6d:a8:ac:d6:8e:75:51:2e:69:b9:fc:fc:30:aa:15:b2:
         69:ae:42:ac:69:10:c0:05:36:72:8e:89:c2:9e:05:3f:ff:72:
         98:b1:d7:b9:d0:34:51:2a:ed:15:ab:96:2c:c0:93:4b:f0:63:
         0e:ae:5f:6d:d2:8a:8d:67:4c:38:48:c5:19:b6:b3:c3:03:d1:
         a1:28:b6:b2:94:cc:d1:af:1a:c8:a1:e9:0f:1e:d1:37:b2:16:
         40:dd:e2:6d:ff:b7:38:0d:a6:9d:75:e4:fd:70:2d:d3:10:e8:
         41:d8:4e:b4:4a:0f:8a:27:0a:93:04:a1:9f:9e:1b:76:31:97:
         8a:01:cf:2b:82:1f:af:4e:e8:c4:16:7e:0b:6a:d2:a3:01:7d:
         c7:2b:9e:eb:da:c5:f2:ea:ed:d3:e9:38:41:e4:a6:f1:3b:f6:
         97:e9:eb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org