Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0CC07DB35E383CF173A772290686C3CFD3D894C0.cer
File:                     0CC07DB35E383CF173A772290686C3CFD3D894C0.cer (raw, json)
Hash identifier:          aoKT2vk1Ln8sVv7GTyTQWG4MhAP7mXkVgHY23ambTPc=
Subject key identifier:   0C:C0:7D:B3:5E:38:3C:F1:73:A7:72:29:06:86:C3:CF:D3:D8:94:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3373C9D37EBBA22A9EB5784CBFB21702163523C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/0CC07DB35E383CF173A772290686C3CFD3D894C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Feb 2023 12:18:58 +0000
Certificate not after:    Mon 05 Feb 2024 12:23:58 +0000
Subordinate resources:    AS: 262411
                          IP: 177.38.208.0/21
                          IP: 2804:778::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:73:c9:d3:7e:bb:a2:2a:9e:b5:78:4c:bf:b2:17:02:16:35:23:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 12:18:58 2023 GMT
            Not After : Feb  5 12:23:58 2024 GMT
        Subject: CN=0CC07DB35E383CF173A772290686C3CFD3D894C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:23:db:71:bb:28:dc:e2:4e:dc:1b:4a:a9:7a:
                    b7:e1:d3:89:45:e6:90:f2:4e:8e:32:d6:5f:57:7b:
                    e6:74:ad:27:38:0e:e1:55:a1:f9:0b:8c:52:2d:89:
                    cb:9d:29:e0:16:00:68:61:52:04:90:1e:dd:a3:01:
                    01:06:4e:a3:26:74:ff:19:81:0c:94:9d:fe:3e:59:
                    4d:fe:1e:e0:b3:9b:88:4a:62:55:5f:c8:b3:e0:29:
                    00:95:d7:f9:2a:3d:c8:ca:38:d4:0a:a9:a2:7d:91:
                    73:82:e8:bb:43:7c:0e:cf:c5:b2:26:32:7f:5a:d3:
                    31:e0:1d:00:fe:9d:aa:b8:d2:54:df:45:1b:53:9f:
                    09:39:5a:2a:55:ed:ac:28:e8:51:49:af:d2:30:4a:
                    d3:ae:81:65:db:67:e5:90:ca:b8:89:c9:f0:bb:c5:
                    ca:ce:81:9f:39:8c:3a:a3:b4:51:78:43:25:cb:84:
                    8f:5d:5e:18:d7:74:a7:2f:65:0f:39:3e:ff:7f:39:
                    a6:c1:12:d7:eb:92:bd:28:6d:bc:a0:8d:de:ad:e1:
                    66:08:32:43:e5:14:92:4a:1a:9e:da:eb:c1:4b:1b:
                    63:ce:82:f4:82:50:62:75:8b:34:9f:76:0b:93:36:
                    77:83:2f:c9:5f:52:d1:92:6a:7f:6e:e6:a3:a2:0a:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:C0:7D:B3:5E:38:3C:F1:73:A7:72:29:06:86:C3:CF:D3:D8:94:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/0CC07DB35E383CF173A772290686C3CFD3D894C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.208.0/21
                IPv6:
                  2804:778::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262411

    Signature Algorithm: sha256WithRSAEncryption
         4f:5c:e2:7d:fd:ad:f3:49:ff:ea:f8:4f:b4:04:18:30:49:7a:
         c6:34:33:2c:75:b2:24:55:a8:b5:21:21:26:d2:10:d6:4f:98:
         46:32:f5:3a:e8:a0:82:83:ae:83:d8:ec:6e:6a:be:4b:bc:dd:
         9d:5d:e2:84:04:89:11:c8:e4:d0:7f:2a:08:51:49:ae:66:8a:
         3e:d5:b8:08:7e:6e:b1:de:73:42:06:4d:5a:26:53:58:e0:c8:
         19:be:5b:6a:41:5f:86:35:8a:fc:2d:c9:df:b1:17:d7:95:7d:
         ad:0a:80:19:0a:24:f1:25:12:e5:77:5e:af:8b:61:62:16:25:
         29:47:ad:3a:b5:cb:98:5b:cc:67:ef:b3:b8:78:30:03:e7:ad:
         3d:91:4d:1b:9c:cb:27:d3:17:eb:c7:04:91:b9:e8:75:30:24:
         31:b2:6d:fe:c0:ab:a6:cf:43:bd:e4:87:59:8b:86:fc:56:b5:
         fb:f2:84:74:fe:ab:f1:6d:5e:e5:d6:20:35:d7:a8:6b:e9:3e:
         fb:52:90:d6:12:5e:3d:7a:e5:2e:a9:12:76:16:d6:e6:92:d5:
         0a:22:76:9f:ea:fd:ce:34:bd:6b:73:e8:67:c0:3e:b2:a3:42:
         f2:7b:bf:e4:f4:45:46:ae:9e:27:f9:6f:42:95:53:ea:e5:e0:
         8b:38:9c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 01:30:13 2025 by rpki-client