Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.cer
File:                     CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.cer (raw, json)
Hash identifier:          lU4gyPmYlCRUWhi09/LslptvOvHVH9AyVxEKumXz8EI=
Subject key identifier:   CF:7C:A3:C7:F6:48:4A:8D:C2:68:88:94:F6:D7:40:2E:D5:58:0B:EB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       40278B652A243E268F74CE498C8C3D930A25F5DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Aug 2022 16:35:15 +0000
Certificate not after:    Mon 14 Aug 2023 16:40:15 +0000
Subordinate resources:    AS: 267271
                          IP: 45.232.184.0/22
                          IP: 2804:4ae8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:27:8b:65:2a:24:3e:26:8f:74:ce:49:8c:8c:3d:93:0a:25:f5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 15 16:35:15 2022 GMT
            Not After : Aug 14 16:40:15 2023 GMT
        Subject: CN=CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:9f:8e:7b:a7:76:1e:9f:59:01:4b:03:c5:
                    ee:e7:34:73:e5:0c:b7:82:f5:a8:52:14:93:62:27:
                    e8:f8:f4:d7:f3:0b:c7:b0:cc:0e:0a:cc:8d:09:bf:
                    04:5e:7f:4a:ca:49:69:1c:20:11:e7:40:56:41:43:
                    85:f4:54:a1:c8:de:b9:85:b4:eb:3d:a4:d2:c9:20:
                    24:a5:96:2d:2b:05:be:e1:5b:5d:fc:6a:3b:5d:8f:
                    e8:71:b8:7a:ee:d1:2c:a5:6d:19:7e:4b:f7:db:1d:
                    71:fd:b6:de:4d:9f:fb:b4:87:52:be:0d:44:4c:9e:
                    6d:20:04:a3:0c:06:b7:46:eb:67:eb:bc:4d:56:aa:
                    ee:c4:f6:a8:e9:48:4f:d1:61:75:29:e8:6f:72:1a:
                    dd:f8:f7:61:8a:4e:8f:17:1f:4b:a6:2c:02:ad:35:
                    d5:7c:d6:6a:8d:53:0c:01:65:7f:dc:59:75:13:72:
                    a7:24:df:ff:cc:f7:24:2c:da:14:c2:56:45:06:e6:
                    25:54:e4:2e:61:04:94:4b:f2:ce:00:7b:50:da:fe:
                    f6:49:99:3d:2e:90:30:8f:91:e8:e0:09:29:1c:0c:
                    0b:bd:b3:31:65:8f:11:05:0f:a7:a9:b2:e5:e6:88:
                    0e:49:3a:99:9d:9f:f3:02:6e:57:61:54:48:ac:0d:
                    93:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:7C:A3:C7:F6:48:4A:8D:C2:68:88:94:F6:D7:40:2E:D5:58:0B:EB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.184.0/22
                IPv6:
                  2804:4ae8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267271

    Signature Algorithm: sha256WithRSAEncryption
         b1:3b:9c:b7:4a:01:09:75:a5:76:7f:82:7c:0d:72:cc:12:4b:
         c2:22:ff:e3:a3:d5:44:68:ae:36:77:73:8e:7a:7a:ee:18:46:
         e4:ba:0f:fe:30:81:53:60:70:20:4b:ad:40:fb:ae:94:8d:26:
         36:7a:27:1c:c1:13:ae:05:fa:78:42:45:32:d4:f9:5b:31:e9:
         e0:6f:3d:b3:a2:03:52:2e:5e:18:be:bd:8c:63:bf:54:9c:e5:
         c5:69:cd:9f:81:bb:5e:14:b5:26:b7:d9:57:ff:83:ed:8e:78:
         ce:ff:e7:a9:e7:97:61:c8:d3:03:85:13:5c:c6:59:1b:2e:40:
         74:02:e7:6b:da:20:d0:a7:aa:15:4b:c3:1d:70:db:59:60:31:
         8e:3d:73:8b:55:42:0f:72:5d:79:44:51:63:f8:fa:f5:f5:18:
         49:3e:0b:e6:1a:e4:84:da:ee:6f:ac:70:a6:32:84:56:8c:8d:
         25:74:41:6a:6a:5d:ab:15:1a:e7:fc:7e:ed:f6:9d:80:8a:4b:
         9f:18:ae:1e:76:d7:e0:ec:b1:04:e8:8d:90:5d:a4:4b:e1:f8:
         c1:bc:4e:b1:dc:58:34:51:30:2b:56:7b:8a:38:74:90:dc:5a:
         31:54:3e:dc:70:37:de:53:13:e0:71:f3:3f:37:fc:fb:b6:0d:
         19:43:fb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org