Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277.cer
File:                     C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277.cer (raw, json)
Hash identifier:          RFY428ZQlrK6lUKu50zSejrASzhwrCG9bSORFr4mdw8=
Subject key identifier:   C7:A1:F2:F4:04:4B:C3:97:33:2A:A8:FD:BE:7B:5E:47:FC:C6:B2:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       074D4BCD1C5736AD2A6E5B1FF621F6CBD71B0A8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277.mft
caRepository:             rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 15:49:35 +0000
Certificate not after:    Thu 06 Mar 2025 15:54:35 +0000
Subordinate resources:    AS: 268842
                          IP: 45.174.40.0/22
                          IP: 2804:5b6c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4d:4b:cd:1c:57:36:ad:2a:6e:5b:1f:f6:21:f6:cb:d7:1b:0a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 15:49:35 2024 GMT
            Not After : Mar  6 15:54:35 2025 GMT
        Subject: CN=C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f7:1f:04:e2:67:cf:6b:a7:7f:1f:52:da:60:
                    dd:56:ec:48:21:fe:c6:c2:fe:2a:36:ac:0d:98:ca:
                    b6:b0:26:31:1e:ad:d0:89:8f:e7:cd:08:1f:b6:ac:
                    5e:d5:a1:5e:94:40:27:bf:c6:ad:5d:66:2a:67:0f:
                    1a:fe:d6:00:b1:da:3b:d3:67:ef:62:e2:31:49:88:
                    12:27:bd:5d:56:16:4e:32:dc:ac:6c:3e:4f:31:70:
                    f9:a6:ba:ec:95:51:bc:a6:0c:39:81:f3:37:45:f8:
                    1e:ec:2c:ff:24:81:e0:e6:fc:1d:70:cb:46:95:fb:
                    37:e5:1b:96:66:7f:09:0f:2f:c9:d0:c3:f2:c6:2a:
                    60:88:7a:6c:0c:74:d1:bb:ee:d4:21:50:57:36:7d:
                    99:67:0f:14:f5:26:db:33:d5:66:a6:e6:d1:8b:3e:
                    cc:08:0f:2b:96:df:f5:57:d3:23:b6:2a:75:ad:ab:
                    f9:93:9f:5c:e5:c0:22:be:df:06:2f:77:2a:85:21:
                    ef:ac:fd:33:ec:8f:9a:30:8d:9b:24:26:0b:47:ee:
                    15:ce:bb:12:c7:e9:2c:93:b5:a0:99:70:9d:b7:af:
                    8d:69:c1:a4:c8:75:bd:65:71:ff:68:3a:27:cf:10:
                    ff:dc:ec:bf:14:f7:58:51:59:09:42:96:ae:2d:ad:
                    48:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:A1:F2:F4:04:4B:C3:97:33:2A:A8:FD:BE:7B:5E:47:FC:C6:B2:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.40.0/22
                IPv6:
                  2804:5b6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268842

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:b6:df:7a:db:11:7c:3e:de:ed:13:ec:4b:e0:21:b8:a9:
         26:3e:7a:c3:83:2b:9f:82:c9:4a:98:4f:9a:93:ad:47:95:69:
         5b:21:b6:00:01:bd:fb:ab:c0:b7:55:be:3b:21:3d:cf:31:7c:
         57:6e:65:5a:b7:bd:94:82:ba:2e:b7:26:1b:ba:10:d3:ee:47:
         bb:01:53:c1:50:5e:15:27:d7:c6:69:ac:dd:67:8a:ef:15:c6:
         dc:66:1e:2d:d3:87:67:16:36:5f:3f:91:a1:4e:34:a3:67:9b:
         8c:dc:dc:be:0a:2e:1b:e6:d4:b8:ad:53:87:28:8a:d6:b2:3f:
         f9:d9:f0:bf:1e:1f:7d:d5:1f:1c:b9:25:9f:57:6b:b3:1c:d7:
         b9:f9:28:bc:a8:cc:11:03:74:93:ac:fb:1f:00:7a:b0:97:2e:
         67:d1:16:30:a3:ad:a1:2e:19:61:7e:b4:a9:2f:b1:58:db:cd:
         d6:d8:24:89:c6:1b:67:a6:a1:74:b6:cd:72:72:7e:50:f3:7e:
         de:61:7f:16:b2:cb:91:3a:22:50:fd:8f:ad:c3:24:81:20:00:
         4a:02:98:de:34:29:f7:2a:19:24:4d:32:c6:5b:b4:ca:76:5a:
         be:1f:2d:65:cb:9a:b0:75:34:fa:2a:db:21:e3:24:e3:0b:bb:
         fd:5e:b0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org