Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8.cer
File:                     ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8.cer (raw, json)
Hash identifier:          bkhpRGB0K/+62s+V/As1H3GkwDgstBuHgjQ3vOH8FOM=
Subject key identifier:   ED:7A:0E:B2:24:47:D8:F1:BE:FF:36:A9:85:EF:7C:59:91:74:CE:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       41FAE9588EA53C2D4F35B0881DFDDB7997E21685
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Aug 2023 20:59:17 +0000
Certificate not after:    Thu 08 Aug 2024 21:04:17 +0000
Subordinate resources:    AS: 266071
                          IP: 45.4.120.0/22
                          IP: 2804:3a1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fa:e9:58:8e:a5:3c:2d:4f:35:b0:88:1d:fd:db:79:97:e2:16:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 10 20:59:17 2023 GMT
            Not After : Aug  8 21:04:17 2024 GMT
        Subject: CN=ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:4c:6d:a4:1a:ff:78:c5:10:d9:d2:0e:1e:
                    25:11:1c:9e:50:20:e7:15:8d:04:aa:cc:19:7e:86:
                    06:09:ac:26:aa:93:f3:3b:80:24:38:7b:16:16:e2:
                    60:43:9b:21:54:77:4f:2f:02:bc:ac:dd:6f:4a:72:
                    d2:bf:c8:c9:a2:24:f6:75:1b:af:a1:73:87:7d:8e:
                    dd:dd:1c:e5:d7:6c:a9:bc:1e:24:68:6e:18:bd:68:
                    96:07:e4:b1:86:b3:1c:b2:12:a1:58:e1:d4:71:3d:
                    b8:ba:5b:e8:d6:fe:3c:54:b5:c6:c2:5e:12:ff:4b:
                    30:38:4f:e1:91:2a:74:04:11:62:94:56:3f:7b:e3:
                    74:dc:3d:05:fd:ac:04:32:d1:d7:63:4f:91:09:16:
                    44:d1:22:5d:2e:8c:39:ff:cf:bc:1e:b9:4e:eb:d6:
                    54:aa:de:80:83:3c:24:33:86:08:ba:a9:12:08:df:
                    7f:58:54:52:95:ce:56:96:cf:d1:08:ba:1e:e1:43:
                    cd:15:16:cd:26:72:00:52:ac:f8:03:b9:6a:74:d9:
                    0d:df:bb:9a:78:ec:78:80:29:f9:c1:88:82:b6:f9:
                    a0:72:29:26:9f:cd:a4:f3:10:f5:2a:19:45:f6:67:
                    9a:c2:cb:2b:75:ad:9a:61:9c:b3:f3:b0:b0:f5:b5:
                    d7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:7A:0E:B2:24:47:D8:F1:BE:FF:36:A9:85:EF:7C:59:91:74:CE:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.120.0/22
                IPv6:
                  2804:3a1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266071

    Signature Algorithm: sha256WithRSAEncryption
         65:75:66:0f:20:0b:35:73:4f:86:1a:42:2f:a8:47:6d:70:1d:
         85:86:a3:02:e1:63:86:0c:3b:c0:ef:10:8c:46:bd:0b:68:7f:
         c7:74:56:ff:6d:16:03:13:38:1c:a2:0c:77:50:d0:93:4e:61:
         63:1f:c0:da:f8:91:07:74:eb:d2:ef:5e:b7:54:6a:a1:b7:54:
         1e:53:c2:28:c3:ba:86:f9:8e:62:54:58:d8:2a:9f:f7:67:11:
         94:ae:81:4b:ca:3e:e3:03:c2:57:fc:5c:f8:e4:6c:ee:a5:2c:
         2d:fe:e9:7b:19:2f:2d:db:69:d2:e0:52:d9:33:81:bf:00:35:
         b0:56:38:56:5e:f2:79:4d:02:f2:da:8d:2f:c2:6f:e0:a9:5c:
         2e:f5:5a:09:c0:dc:6a:0f:d2:61:da:ba:9b:aa:3e:71:a8:c3:
         7c:0d:5d:bb:f1:51:88:4b:e0:9c:30:a4:fd:64:2f:f3:5f:53:
         15:17:60:94:3a:09:ed:15:09:f0:46:9f:51:19:c1:8b:68:cf:
         e3:e1:ad:b9:df:c1:12:6a:0c:c7:03:82:a1:27:1c:91:07:09:
         ce:6f:2c:80:82:57:9a:4c:55:80:0c:29:d5:b2:9b:96:2c:f0:
         82:5b:12:ee:dd:34:d2:90:0c:48:8b:47:4a:ed:44:09:53:6e:
         5f:aa:63:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org