Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C7B574A35AB3D1FB4A632D2276C3775C2BFDD246.cer
File:                     C7B574A35AB3D1FB4A632D2276C3775C2BFDD246.cer (raw, json)
Hash identifier:          gz2i+3S8YeQZxzHCVGhq4rZ6+K0mMpBAlm4rSfP3bNw=
Subject key identifier:   C7:B5:74:A3:5A:B3:D1:FB:4A:63:2D:22:76:C3:77:5C:2B:FD:D2:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E00195825A0C308F300CA48550C971423C92BBC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/C7B574A35AB3D1FB4A632D2276C3775C2BFDD246.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Dec 2022 02:00:45 +0000
Certificate not after:    Sat 09 Dec 2023 02:05:45 +0000
Subordinate resources:    AS: 10715
                          AS: 11242
                          AS: 263300
                          IP: 150.162.0.0/16
                          IP: 200.18.0.0/20
                          IP: 200.19.96.0/20
                          IP: 200.135.0.0/16
                          IP: 200.237.192.0/18
                          IP: 2801:80:a80::/44
                          IP: 2801:84::/32
                          IP: 2804:1f2e::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:00:19:58:25:a0:c3:08:f3:00:ca:48:55:0c:97:14:23:c9:2b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 10 02:00:45 2022 GMT
            Not After : Dec  9 02:05:45 2023 GMT
        Subject: CN=C7B574A35AB3D1FB4A632D2276C3775C2BFDD246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:22:a8:13:90:49:ac:b3:49:81:97:3a:d9:58:
                    7d:46:89:cb:b6:4a:07:67:f4:5a:62:28:2c:b3:86:
                    73:80:04:19:4d:11:a6:a2:b4:a2:76:6d:26:98:36:
                    59:d7:7a:ba:7b:62:4f:c1:4d:a2:b8:04:7c:b8:73:
                    6a:33:85:b4:3b:9f:4d:bb:8e:e2:3d:bc:5f:9e:1a:
                    bf:f9:8a:f9:42:7e:1e:d1:fc:b3:95:3a:82:8b:81:
                    3b:1f:50:da:a3:6a:47:41:f9:75:07:a6:0d:8f:ba:
                    e9:91:cc:ef:94:ab:b2:8c:15:32:94:46:23:fa:2b:
                    c6:59:b8:0f:64:6d:7f:95:ae:fd:74:15:1e:cb:9a:
                    ba:bb:4a:de:e1:6a:15:67:c2:77:31:b1:c0:b5:5a:
                    2c:82:04:2c:d8:7c:46:55:24:3f:e3:64:ed:1f:14:
                    38:fc:ae:d9:fc:d5:ee:6d:d3:30:87:bd:54:48:50:
                    8e:76:be:4a:ec:87:91:20:a8:11:ab:0e:9f:e4:a1:
                    c2:ca:c6:a9:79:24:60:f3:31:ef:dd:6f:a4:a2:fd:
                    cc:d3:bf:3e:c2:bb:63:89:ba:84:cb:a2:b2:95:b9:
                    17:10:7e:21:bf:e1:dc:d0:67:2e:a2:03:fc:f9:f5:
                    3c:2a:02:49:6a:50:2b:38:65:f9:a5:e0:f6:6e:58:
                    93:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:B5:74:A3:5A:B3:D1:FB:4A:63:2D:22:76:C3:77:5C:2B:FD:D2:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/C7B574A35AB3D1FB4A632D2276C3775C2BFDD246.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.162.0.0/16
                  200.18.0.0/20
                  200.19.96.0/20
                  200.135.0.0/16
                  200.237.192.0/18
                IPv6:
                  2801:80:a80::/44
                  2801:84::/32
                  2804:1f2e::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10715
                  11242
                  263300

    Signature Algorithm: sha256WithRSAEncryption
         b8:39:7f:40:49:7e:c4:f4:fb:84:96:4b:c5:01:4f:65:bd:67:
         8e:fa:2e:33:36:ab:8b:9c:f3:b1:2d:e1:8d:44:3b:6e:a2:66:
         53:5c:de:6a:4e:61:27:46:4f:23:95:1a:84:46:01:41:e0:6f:
         f9:a3:89:bb:86:f6:9b:16:b1:5c:b0:45:be:b0:13:8b:47:9e:
         54:cf:c6:97:e4:80:b4:f9:21:43:a5:6c:36:56:55:0f:fb:43:
         37:59:db:36:9e:1c:9f:9f:45:df:dc:23:3b:18:f1:4e:ad:1a:
         92:94:5d:6f:70:20:1a:67:95:ac:33:7f:a6:3b:cb:dc:da:11:
         f6:47:af:06:ba:6e:da:ae:1d:1c:51:2d:d8:01:76:5f:e8:5f:
         8a:e8:bc:58:1e:b7:c2:27:8b:f3:8d:93:11:23:fc:54:33:5c:
         1b:1a:92:33:52:b4:0d:59:14:c3:81:b4:4c:fd:22:21:ac:87:
         80:12:ef:07:5c:6d:a7:d4:e6:9b:ad:e7:35:14:81:30:3a:ec:
         e5:04:f1:8b:56:de:82:1f:be:de:70:ab:f7:ec:72:79:1d:03:
         59:5b:dd:ec:83:75:2e:4e:75:a7:a8:66:41:b3:98:57:29:02:
         9b:56:a7:66:14:34:9b:b1:e5:4a:d0:65:30:d6:68:6c:fd:e3:
         29:a3:9c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org