Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B7308D854D4BE5121F93D850679F0E7402EB7388.cer
File:                     B7308D854D4BE5121F93D850679F0E7402EB7388.cer (raw, json)
Hash identifier:          P/8yvv8/1FJt4XQQd7MxDgGrBLtHiKbUt/Wb06TZp5k=
Subject key identifier:   B7:30:8D:85:4D:4B:E5:12:1F:93:D8:50:67:9F:0E:74:02:EB:73:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0ED5D78DDCDDFFD04EC01B001704CE4ABD9A88F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/B7308D854D4BE5121F93D850679F0E7402EB7388.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 31 Jul 2023 18:25:39 +0000
Certificate not after:    Mon 29 Jul 2024 18:30:39 +0000
Subordinate resources:    AS: 271063
                          IP: 179.48.20.0/22
                          IP: 2804:75b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d5:d7:8d:dc:dd:ff:d0:4e:c0:1b:00:17:04:ce:4a:bd:9a:88:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 31 18:25:39 2023 GMT
            Not After : Jul 29 18:30:39 2024 GMT
        Subject: CN=B7308D854D4BE5121F93D850679F0E7402EB7388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:c1:1c:d4:92:12:1a:04:d8:7f:e4:59:0e:
                    85:43:f0:33:55:81:e3:71:dc:b1:6d:dc:5f:45:e9:
                    81:44:78:dc:30:7b:06:46:7c:86:30:ed:ce:46:e9:
                    f2:3b:4d:10:3c:b0:1f:f2:8c:a5:56:57:bb:31:d3:
                    57:6f:ab:cd:a6:cb:d8:c9:56:0f:74:33:79:59:ee:
                    94:23:ab:36:fb:4a:9c:a4:7d:90:12:98:14:e4:eb:
                    d4:0f:f1:0a:1e:e3:e2:0e:f3:08:8c:ea:fc:81:4d:
                    10:8f:bd:3e:04:5e:62:9c:81:90:0f:fe:fc:e0:80:
                    be:27:eb:aa:7f:03:18:d4:48:a2:9b:6f:4a:ae:69:
                    77:92:f5:9a:96:e2:10:61:b1:6a:8a:83:95:9f:ab:
                    c3:26:ce:a8:64:d9:2d:a6:b4:43:e5:55:37:bb:1d:
                    92:75:4f:a4:32:15:be:0a:22:dd:5c:c0:2d:dd:11:
                    fb:df:59:2e:82:b2:ea:d0:cd:99:57:18:34:f2:10:
                    77:e7:9f:a0:e0:47:19:67:98:15:3d:97:27:95:fb:
                    44:84:41:5c:ca:ae:24:9c:a1:ce:3c:f0:79:cc:43:
                    47:09:87:b3:49:44:93:a3:db:ab:1a:0d:70:1b:12:
                    1e:5d:d1:75:fc:bc:75:2a:82:f0:53:a0:60:66:f3:
                    90:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:30:8D:85:4D:4B:E5:12:1F:93:D8:50:67:9F:0E:74:02:EB:73:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/B7308D854D4BE5121F93D850679F0E7402EB7388.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.20.0/22
                IPv6:
                  2804:75b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271063

    Signature Algorithm: sha256WithRSAEncryption
         57:77:a7:fb:91:0a:ec:a2:3a:1f:30:e6:b5:76:03:e6:0c:fd:
         0b:94:15:ec:c0:ee:e8:98:73:37:77:ef:74:65:3e:6a:ac:1e:
         34:78:e1:cd:6d:d4:11:47:47:9a:e1:55:e4:fe:a2:68:6b:58:
         cd:7c:36:bc:48:2d:1a:d6:4e:54:84:8d:c3:b7:bf:f1:d2:f3:
         37:db:a0:b9:9d:d3:7f:b9:a0:7c:96:d4:aa:26:2e:07:6b:c4:
         36:83:fd:99:b8:31:af:78:f4:60:a0:6f:1b:91:da:f4:5b:8d:
         d0:74:0f:59:bc:b1:4c:e3:b0:2e:71:f1:c9:1e:37:c8:91:97:
         1c:1a:0d:c6:2e:dc:ca:ef:2f:80:6b:cc:59:85:bb:36:5c:c3:
         7b:ba:04:46:5f:70:6b:41:8d:01:78:85:34:fc:59:e7:da:92:
         02:a1:9d:2f:44:97:95:24:80:49:b1:1a:ea:73:88:f4:ae:9a:
         ff:0a:c2:1d:5a:a7:5d:43:2b:7a:da:03:5a:ff:5f:5e:13:af:
         f0:3b:a7:06:44:b8:1b:02:c6:09:6e:3e:f9:ef:9e:3f:bd:c0:
         28:d1:bc:47:a3:f1:9a:20:2e:b8:aa:65:e0:61:7c:a9:27:96:
         49:b5:55:1b:43:bf:2d:96:1a:e4:34:ee:10:4f:7c:a6:f4:f8:
         0e:91:b5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org