Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0F7B6469DF0F0E7DC20496BC06193D7D331748ED.cer
File:                     0F7B6469DF0F0E7DC20496BC06193D7D331748ED.cer (raw, json)
Hash identifier:          ED/OU0r/iNUY9gJd3kdNsia+108iJCPrX367Hh3Nz3k=
Subject key identifier:   0F:7B:64:69:DF:0F:0E:7D:C2:04:96:BC:06:19:3D:7D:33:17:48:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7052C770E3017B8AA30BAE4D2AE06728D18A49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/0F7B6469DF0F0E7DC20496BC06193D7D331748ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Aug 2021 20:20:04 +0000
Certificate not after:    Wed 10 Aug 2022 20:25:04 +0000
Subordinate resources:    AS: 268312
                          IP: 45.238.44.0/22
                          IP: 2804:4f38::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:52:c7:70:e3:01:7b:8a:a3:0b:ae:4d:2a:e0:67:28:d1:8a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 11 20:20:04 2021 GMT
            Not After : Aug 10 20:25:04 2022 GMT
        Subject: CN=0F7B6469DF0F0E7DC20496BC06193D7D331748ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:26:0f:9f:35:5e:ec:a1:e5:11:1d:d0:6d:
                    1f:e8:7d:b1:b8:db:7a:1a:06:13:17:7d:58:72:b6:
                    45:24:cf:9f:eb:3f:0b:0c:ec:68:9b:ab:b2:01:83:
                    4e:ec:8f:31:47:ff:a3:ef:3e:58:de:58:15:73:66:
                    b5:ce:d6:8c:b1:c5:74:74:76:47:79:9f:92:2a:32:
                    78:b3:da:fc:7c:d9:6c:f2:1c:25:3f:87:2f:f0:8e:
                    69:73:b4:25:c9:24:df:d7:fa:ed:a3:7f:bf:3a:cf:
                    76:a3:e4:03:02:32:09:53:ce:87:82:84:fa:24:38:
                    ae:85:e5:e7:ca:28:a1:3d:a2:fb:b5:1b:b2:6d:85:
                    85:9f:51:77:e4:5b:6e:24:e7:f1:a1:84:82:ef:d3:
                    14:66:01:3c:35:38:b9:f0:26:ab:cb:bd:9b:05:3a:
                    e1:2c:d8:e1:48:a9:ac:20:6d:90:91:f6:b1:03:61:
                    04:2f:8d:4e:d5:78:68:6d:3e:cd:94:9f:a6:26:78:
                    12:61:c5:f3:68:bd:90:de:d0:c2:e9:4f:14:5f:17:
                    41:8d:d9:ba:c3:1c:ea:0f:c3:7f:23:b0:7c:d0:ce:
                    d5:40:f4:ff:29:8f:56:08:4f:c1:65:ea:79:b9:dd:
                    4e:06:60:eb:2c:17:d5:11:b0:c0:3c:0f:5c:79:8c:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:7B:64:69:DF:0F:0E:7D:C2:04:96:BC:06:19:3D:7D:33:17:48:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/0F7B6469DF0F0E7DC20496BC06193D7D331748ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.44.0/22
                IPv6:
                  2804:4f38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268312

    Signature Algorithm: sha256WithRSAEncryption
         4b:b8:e9:3d:26:be:c7:10:75:93:5f:c8:4c:03:38:01:cf:77:
         5f:2e:c3:3f:b7:c6:9f:8c:ff:fe:b2:0f:20:67:a7:c2:67:98:
         3a:03:c5:c8:48:c2:68:1e:24:9d:41:1f:23:0c:fc:4b:01:94:
         e7:4c:3d:8c:1f:2c:2e:00:97:dd:4e:c9:ab:2a:cb:e3:18:e0:
         22:f5:be:99:15:74:9c:e4:2e:5a:a7:6f:a9:a1:73:68:df:88:
         15:63:cb:b1:f9:91:bc:90:ac:b3:c3:54:d5:18:f7:e5:e6:af:
         40:ba:0c:b8:a7:9a:df:b4:48:c7:fa:ea:64:29:ab:45:fd:1b:
         05:c5:f0:39:5b:e9:ad:6f:b5:c2:17:17:cf:00:fa:38:8e:64:
         4a:a2:5b:a3:8b:52:3a:7b:26:0d:30:58:5f:3d:7c:28:7f:33:
         cb:a0:03:cb:52:66:d4:f6:3b:dd:45:fe:91:e8:7a:68:1a:dc:
         93:5b:14:c0:aa:d9:e9:92:25:0e:67:b0:77:84:ad:e0:c4:ec:
         e2:e8:61:c3:62:d8:df:9b:55:1d:29:d8:ab:87:42:3e:d3:3e:
         c1:c8:4f:98:09:9f:9a:ff:5e:2b:23:a4:5c:ca:50:9a:b8:c7:
         ed:55:ea:b4:ed:be:3f:12:8a:af:ee:b5:e3:f1:80:52:af:ab:
         12:eb:af:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:34 2025 by rpki-client