Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5.cer
File:                     D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5.cer (raw, json)
Hash identifier:          y2YowCb0utT7S2DWaUWq+PGpB0oFh1QfDjnqzofY0os=
Subject key identifier:   D7:00:4F:6E:F2:1A:9E:FA:15:D2:CE:42:DB:7E:67:96:BF:D9:67:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4CA6A098BE7C5EC3FBF657230A3DEC6C8D30695B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/0/D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 13:26:42 +0000
Certificate not after:    Fri 12 Jul 2024 13:31:42 +0000
Subordinate resources:    AS: 271060
                          IP: 179.48.240.0/22
                          IP: 2804:75a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a6:a0:98:be:7c:5e:c3:fb:f6:57:23:0a:3d:ec:6c:8d:30:69:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 13:26:42 2023 GMT
            Not After : Jul 12 13:31:42 2024 GMT
        Subject: CN=D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:fd:eb:7b:88:e7:07:9d:eb:f7:e1:87:5b:
                    30:4e:04:39:4b:0f:75:a6:f5:e1:19:ee:1c:35:d4:
                    30:bb:fc:4e:dc:94:37:24:00:b6:f9:9c:06:2c:50:
                    54:23:75:44:a7:a8:12:3c:a8:1a:18:48:ff:de:2f:
                    59:49:26:a4:32:5d:49:0f:9b:a6:b7:fb:45:11:7d:
                    a1:62:7f:11:f8:de:61:66:14:11:1f:e0:26:f9:ac:
                    40:08:e3:12:b5:09:c2:67:5c:28:34:c6:49:fd:50:
                    78:42:d9:af:e0:dc:34:80:ae:d6:63:a5:33:fa:02:
                    26:c6:09:37:ba:dc:7e:85:f8:57:66:57:23:43:ee:
                    2e:7d:e9:78:35:79:06:4f:7b:aa:18:d6:11:83:06:
                    fb:41:36:4c:8b:85:87:28:5c:c9:7a:1b:a9:8f:a9:
                    d9:01:ec:1b:af:8a:07:57:24:96:7c:92:c3:1b:46:
                    80:e4:70:a2:d9:7d:35:1e:b9:77:00:76:08:db:2f:
                    bd:72:bf:d5:f6:f7:6a:59:66:7a:f0:d5:0a:1d:96:
                    20:a2:c7:e9:5c:95:a4:13:d0:74:52:46:5b:79:dc:
                    6c:48:1d:fd:fb:db:36:f2:1b:a7:56:04:21:12:55:
                    3c:1a:ac:4f:19:f7:57:cd:a0:5f:41:5a:9c:40:74:
                    86:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:00:4F:6E:F2:1A:9E:FA:15:D2:CE:42:DB:7E:67:96:BF:D9:67:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/0/D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.240.0/22
                IPv6:
                  2804:75a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271060

    Signature Algorithm: sha256WithRSAEncryption
         32:2b:bf:bb:c2:99:1b:59:6a:9c:65:ae:8c:64:a2:cc:59:42:
         4a:0b:94:3e:21:71:30:35:e5:4f:a8:0e:40:27:ec:2f:d6:7c:
         ac:36:bb:57:fe:d4:5e:69:a5:a6:cc:5c:e4:66:41:f4:6a:e2:
         9b:7e:6c:28:0a:3e:2b:3e:bd:07:8a:76:58:6f:12:0f:73:5c:
         17:e1:c0:ab:3c:e7:30:78:51:8d:2c:8a:e7:af:c9:07:49:9f:
         5d:72:fc:1f:46:02:21:0b:76:57:51:bb:96:d2:a6:a2:03:45:
         5a:48:bf:b7:d9:07:7a:33:c5:0d:db:45:d3:cf:99:ad:8d:e6:
         83:e3:4c:26:74:cd:0b:7f:53:b1:b8:54:50:9d:dd:3a:7e:40:
         e1:1f:1e:2e:e9:9d:e2:96:19:40:28:e3:86:83:ea:8e:4a:c9:
         33:ef:fe:78:fe:78:d5:c8:50:c7:60:0c:e5:ea:52:cf:55:dc:
         03:f4:4e:6f:bc:66:d2:36:e8:65:8f:cb:ba:5f:09:90:a2:71:
         21:7c:9f:4c:4f:0f:00:92:cd:3e:1d:15:30:99:b5:84:66:cd:
         3a:c8:ab:f2:cc:3f:9f:dd:07:dc:b9:e5:80:e1:2c:06:96:b4:
         0f:ff:3c:2b:ad:c2:46:f4:62:63:75:60:d2:a1:ac:7d:b3:17:
         e2:42:d3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org