Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC7BD824430EEEBC225F121F14EAE66689E26B60.cer
File:                     CC7BD824430EEEBC225F121F14EAE66689E26B60.cer (raw, json)
Hash identifier:          9UB2Wv6ES8Xt6Pjgl5JMWPCX99aRpt+/rie/dIeeidw=
Subject key identifier:   CC:7B:D8:24:43:0E:EE:BC:22:5F:12:1F:14:EA:E6:66:89:E2:6B:60
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7754746F555210A679AE80185A76B51370534BEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/CC7BD824430EEEBC225F121F14EAE66689E26B60.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 14:34:19 +0000
Certificate not after:    Tue 09 Jul 2024 14:39:19 +0000
Subordinate resources:    AS: 266571
                          IP: 45.7.108.0/22
                          IP: 2804:3e10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:54:74:6f:55:52:10:a6:79:ae:80:18:5a:76:b5:13:70:53:4b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 11 14:34:19 2023 GMT
            Not After : Jul  9 14:39:19 2024 GMT
        Subject: CN=CC7BD824430EEEBC225F121F14EAE66689E26B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:aa:7c:99:6e:71:0d:0f:ef:10:fb:94:22:
                    65:b9:ab:31:e5:b6:43:b9:a2:28:00:c6:a1:23:7c:
                    96:f4:70:02:4d:32:68:13:10:95:f1:72:7a:1c:5c:
                    39:dd:15:aa:7d:97:f3:96:53:14:fd:c1:dd:1b:32:
                    6e:04:31:c7:6d:07:17:73:90:43:53:a4:9e:ec:74:
                    1c:c9:b7:d4:be:f4:01:20:08:92:05:77:3b:ad:ac:
                    ca:11:19:ad:b5:e3:57:f3:1d:e8:b7:99:da:dc:9a:
                    90:cd:6c:c5:49:28:98:59:b6:2e:fa:57:ad:50:48:
                    e4:d7:b0:65:54:d8:82:eb:06:a8:0f:84:8c:7c:c6:
                    2f:fb:72:30:2d:75:7d:e6:0b:0f:33:fd:72:29:85:
                    73:60:de:8f:1c:f8:a6:5a:cf:d2:91:96:07:b5:f6:
                    7c:e0:fa:f2:35:bd:a6:8d:b3:ce:a0:90:3c:27:7f:
                    c9:14:7c:66:a2:6e:ef:1e:13:3c:9b:07:b9:e9:d1:
                    76:2f:97:41:e8:2f:53:12:61:83:1a:8e:31:8d:6f:
                    2b:4c:90:4a:4e:35:95:f9:92:70:09:32:1d:25:d0:
                    f3:9c:93:df:bc:66:d3:20:a3:d8:f6:f0:bf:fb:ee:
                    ec:ed:b2:64:9c:7d:db:e0:d9:57:06:77:67:a3:b7:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:7B:D8:24:43:0E:EE:BC:22:5F:12:1F:14:EA:E6:66:89:E2:6B:60
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/CC7BD824430EEEBC225F121F14EAE66689E26B60.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.108.0/22
                IPv6:
                  2804:3e10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266571

    Signature Algorithm: sha256WithRSAEncryption
         b6:b2:90:52:c1:1d:11:8b:07:66:04:6e:31:26:82:39:61:1e:
         03:b3:6f:da:45:d1:67:a4:cd:84:8b:e5:13:19:24:e6:af:71:
         35:6c:79:58:c9:61:46:fc:f3:28:7d:ff:18:3b:a1:e2:a1:a4:
         7d:5e:c9:38:b3:87:3d:d5:89:e0:17:53:96:3a:48:96:40:21:
         68:0d:b1:e1:ca:e4:95:41:88:06:32:a7:15:92:e3:d7:53:1b:
         7f:4f:c0:6b:a7:6d:a1:04:7d:64:1e:12:84:bd:bd:fc:7d:34:
         56:5d:af:c9:fa:3f:2d:ca:89:30:38:c3:be:2d:23:31:b3:fe:
         ae:ea:63:9d:00:e2:f6:ce:bd:36:4a:b4:ee:58:a3:31:fe:48:
         e8:51:3b:90:6b:e4:fb:7d:db:f6:3a:69:73:e4:2d:11:9c:29:
         de:d3:80:7d:d5:e9:c2:c5:cc:8a:d0:e4:76:7a:02:59:15:49:
         e5:c3:cd:ea:ea:79:cc:74:f2:1f:38:24:86:a5:aa:12:7e:6e:
         1a:26:d0:82:1b:20:11:c8:d6:46:af:75:39:e9:e2:06:a9:b1:
         38:6a:df:0e:db:54:0f:64:fc:3d:b9:e2:cf:c3:e2:5f:31:11:
         0b:18:07:5f:5a:5d:79:e5:7b:5e:59:74:a6:df:4e:b6:08:0b:
         45:96:21:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org