Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C7F9D8A926471FF68968F390EC284A7314FF9B9A.cer
File:                     C7F9D8A926471FF68968F390EC284A7314FF9B9A.cer (raw, json)
Hash identifier:          dFVpFKurojN8nBcIPqQH+sSTMDv+d/S6ADAy/CwBhoI=
Subject key identifier:   C7:F9:D8:A9:26:47:1F:F6:89:68:F3:90:EC:28:4A:73:14:FF:9B:9A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A89F72450C0C06B082B2A70E215A04B0C75E847
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0/C7F9D8A926471FF68968F390EC284A7314FF9B9A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Apr 2022 19:39:24 +0000
Certificate not after:    Sat 22 Apr 2023 19:44:24 +0000
Subordinate resources:    AS: 264173
                          IP: 45.166.56.0/22
                          IP: 2804:5564::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:89:f7:24:50:c0:c0:6b:08:2b:2a:70:e2:15:a0:4b:0c:75:e8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 23 19:39:24 2022 GMT
            Not After : Apr 22 19:44:24 2023 GMT
        Subject: CN=C7F9D8A926471FF68968F390EC284A7314FF9B9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:45:a6:5e:c9:f7:36:3c:60:0e:d0:eb:e6:
                    ba:58:02:32:9d:55:a3:66:60:fb:f6:fa:81:f7:c6:
                    c5:b7:cf:e5:da:c5:61:9d:9d:8e:a4:8b:40:9a:23:
                    e6:77:b8:67:08:9c:95:78:be:0c:22:dd:d1:03:7b:
                    37:85:4b:94:a3:5a:de:8d:e9:39:ad:12:0c:a2:22:
                    6d:d5:37:20:e2:52:00:93:6c:3f:54:a6:61:95:7b:
                    0a:df:3b:86:02:71:f4:a8:3c:7d:76:79:39:69:f3:
                    41:5d:53:b7:b8:db:19:48:7b:7f:b6:1e:59:1b:df:
                    3f:56:d4:55:03:d1:73:93:f3:33:f4:11:92:ed:55:
                    4a:9f:88:01:f1:e8:12:c2:9e:53:a3:71:e3:2b:9e:
                    a5:87:fd:8a:e0:ec:9e:d1:7c:32:00:db:28:18:a6:
                    44:a4:56:c0:ad:02:16:fc:7d:de:fd:bf:ff:02:a0:
                    b3:be:ca:e1:e4:ae:0b:46:fb:14:9f:88:ce:91:21:
                    01:58:c8:36:e6:99:3e:b4:7e:60:d6:15:2b:62:0f:
                    88:45:a3:65:99:e4:da:7b:2a:44:f1:fb:67:c5:a6:
                    be:8f:84:1e:6d:61:bf:c0:8f:5f:87:52:ef:63:21:
                    1e:7b:36:49:32:93:71:de:71:88:53:78:0e:a7:e8:
                    77:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:F9:D8:A9:26:47:1F:F6:89:68:F3:90:EC:28:4A:73:14:FF:9B:9A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0/C7F9D8A926471FF68968F390EC284A7314FF9B9A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.56.0/22
                IPv6:
                  2804:5564::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264173

    Signature Algorithm: sha256WithRSAEncryption
         44:c7:49:4a:9a:13:57:02:30:e8:71:0e:3c:f1:5d:cf:e4:31:
         02:a8:45:15:3e:df:e7:25:43:4f:33:64:4d:97:29:04:a3:ef:
         3f:a2:d9:63:50:03:a4:a7:2c:e1:66:17:2e:0f:55:6d:2b:da:
         42:b7:6d:51:91:ce:de:f6:eb:3f:45:a0:bc:23:21:0d:2c:97:
         ee:2a:e6:fb:0b:68:1f:f8:4c:56:ec:6f:ae:53:52:65:0d:3d:
         81:f7:36:99:80:cd:d1:2c:ba:eb:fd:88:e4:fc:6b:d6:21:d6:
         39:4f:04:64:7a:cb:17:84:59:ca:79:b7:ef:a3:27:14:0a:03:
         ef:78:c2:a8:b1:33:aa:a9:70:58:23:4a:65:9d:0f:d8:4c:bc:
         88:c7:a4:b7:c4:d5:6c:e5:64:59:03:5b:fc:b7:e7:ca:60:89:
         bf:5a:c5:4c:e7:fa:cb:c5:59:f0:3d:b5:a9:41:48:5e:e5:39:
         74:a0:40:ab:ff:63:c8:c8:35:53:b1:ff:31:f9:aa:56:a1:b2:
         fe:4b:b1:b0:d5:4f:1c:ac:65:9f:0f:b7:14:ed:07:51:86:c9:
         8c:6f:10:34:b8:0d:55:62:b3:7d:f9:86:e0:29:d5:79:02:01:
         03:48:6c:1a:25:88:00:15:c9:e9:08:10:92:32:cf:9a:1e:e4:
         25:c9:c1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org