Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0FAF97CB98B518217832A795A1629133D71473C6.cer
File:                     0FAF97CB98B518217832A795A1629133D71473C6.cer (raw, json)
Hash identifier:          66ntOuAKruMtl9GiyAki5Rl3/T9ScUwrm2QNpVLtzX4=
Subject key identifier:   0F:AF:97:CB:98:B5:18:21:78:32:A7:95:A1:62:91:33:D7:14:73:C6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       64558AE38975FF03F4D2185F6C2B3902D24442C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/0FAF97CB98B518217832A795A1629133D71473C6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Aug 2023 12:38:39 +0000
Certificate not after:    Fri 02 Aug 2024 12:43:39 +0000
Subordinate resources:    AS: 266375
                          IP: 170.80.52.0/22
                          IP: 2804:36d4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:55:8a:e3:89:75:ff:03:f4:d2:18:5f:6c:2b:39:02:d2:44:42:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  4 12:38:39 2023 GMT
            Not After : Aug  2 12:43:39 2024 GMT
        Subject: CN=0FAF97CB98B518217832A795A1629133D71473C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:0b:01:53:50:0b:ff:71:d9:55:f8:7c:ca:
                    4d:82:19:d3:30:aa:dc:37:c5:f4:00:83:88:26:6a:
                    87:1a:3d:87:ab:36:97:e2:20:86:76:08:ff:93:17:
                    81:31:0e:75:5f:78:e8:95:c4:3e:99:1b:9d:1a:86:
                    67:10:54:e6:b8:3d:c4:88:06:68:d2:d1:47:df:bf:
                    64:d8:ab:17:24:f6:53:85:57:a7:12:3e:cb:3c:31:
                    c2:ae:2e:b6:80:05:7e:4e:8c:21:96:ac:74:92:10:
                    2d:32:c8:31:ea:35:8b:9d:4d:9b:a5:7c:c6:43:a5:
                    0c:b0:22:ad:9f:31:3c:7f:63:84:ac:4c:69:74:61:
                    3d:10:6e:d1:cb:6e:b7:a9:22:8e:4e:8f:e2:8b:3f:
                    28:70:d3:b6:80:ce:a0:71:a0:8d:db:97:78:d5:e2:
                    b7:5d:58:f7:fa:ac:fe:d7:3d:79:0a:db:f8:9f:81:
                    8c:4c:aa:a3:e0:22:fa:7c:ae:89:91:ac:38:50:90:
                    bf:99:e4:64:dd:e8:6b:4c:f4:f4:70:0f:08:e6:bc:
                    da:b6:31:98:83:95:d1:4b:8b:c4:a4:bf:f6:c3:7f:
                    05:b5:f5:f8:6f:63:d4:19:14:f4:e1:3d:c6:15:32:
                    02:ed:c7:ac:e1:19:80:23:b7:97:07:00:15:73:9b:
                    79:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:AF:97:CB:98:B5:18:21:78:32:A7:95:A1:62:91:33:D7:14:73:C6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/0FAF97CB98B518217832A795A1629133D71473C6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.52.0/22
                IPv6:
                  2804:36d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266375

    Signature Algorithm: sha256WithRSAEncryption
         37:d6:14:e9:d2:75:c0:4a:b5:0b:42:4e:bf:3d:2f:98:8e:46:
         68:42:b7:24:f5:77:ac:be:08:13:ac:20:6f:6d:a5:1c:b2:05:
         2a:8b:42:fb:a1:40:8f:20:f1:8c:c9:9d:9c:71:7f:77:07:72:
         a3:bd:a9:ef:13:4d:e2:1e:cf:a5:81:47:80:b7:d8:48:82:d7:
         1c:a8:ff:dd:2b:5f:4e:98:40:c2:19:97:d0:64:27:ca:a1:fb:
         b0:86:d7:2d:5d:cd:80:92:8e:7f:62:39:b1:ae:82:c4:3e:9a:
         80:0f:1b:ae:57:f7:83:8e:19:b7:83:0b:c2:57:c9:1b:46:03:
         a6:f7:ea:e5:6c:b6:c6:05:c6:28:b4:eb:94:5c:43:6a:82:2a:
         19:35:25:b6:bf:ee:cb:fe:e5:45:61:18:e2:ba:8c:b1:2e:db:
         28:c0:c1:65:e0:ea:4e:55:00:50:15:af:9d:86:93:6e:ea:f3:
         ef:93:fa:33:7d:55:a7:63:f6:8d:58:af:52:0f:fa:28:2c:b1:
         0c:97:f8:5a:41:b8:6b:49:55:5c:d6:06:1d:fe:a4:17:33:23:
         c8:d1:a8:f7:9a:2e:60:6f:eb:ca:36:0a:20:b0:fa:0a:77:43:
         a8:d6:e4:2b:20:54:4c:21:e2:69:be:bb:51:fa:c1:c6:b5:23:
         fd:e7:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:06:07 2025 by rpki-client