Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0.cer
File:                     0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0.cer (raw, json)
Hash identifier:          xB/WpqkShbnH1kaZKnBiWmV6DxwafA/WBbVp7qUvyto=
Subject key identifier:   0F:F8:D1:D6:9C:94:FA:2F:A7:03:EB:A2:E4:78:9E:7B:04:46:C7:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B769212DFAAC995EDC15FD4999FFA5FB4455E01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Nov 2022 14:39:27 +0000
Certificate not after:    Tue 31 Oct 2023 14:44:27 +0000
Subordinate resources:    AS: 272533
                          IP: 2804:82ac::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:76:92:12:df:aa:c9:95:ed:c1:5f:d4:99:9f:fa:5f:b4:45:5e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  1 14:39:27 2022 GMT
            Not After : Oct 31 14:44:27 2023 GMT
        Subject: CN=0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f3:c5:34:a8:0f:2d:40:15:67:32:74:a6:f8:
                    93:64:0c:5e:27:cc:e4:b7:7b:80:25:b5:a2:b5:db:
                    ad:5c:7a:04:88:2d:dd:43:0b:35:8f:df:40:e3:2f:
                    76:b9:dd:3a:34:26:2a:d9:fb:4f:b2:73:58:d9:f4:
                    3a:52:4b:ce:b6:97:2e:49:cc:80:70:52:b4:e6:cd:
                    d5:1a:80:e5:03:22:36:f0:b7:78:66:72:1e:41:64:
                    b9:0b:3f:5f:70:d8:e7:bf:8f:55:1b:96:59:7a:78:
                    3b:c4:d0:4a:4f:91:34:69:87:d8:94:73:38:42:c5:
                    37:4c:01:4b:08:ce:60:5c:d3:34:f6:64:74:e2:9b:
                    d9:1e:09:2b:3b:fc:39:40:3f:f4:8b:7e:05:b8:04:
                    ba:40:52:9b:94:14:0f:4e:aa:79:df:14:2a:0d:23:
                    4f:5c:58:9b:c4:24:f0:4b:db:3a:dd:d5:29:ca:97:
                    71:91:d6:f0:08:41:b1:86:4d:ce:6e:24:97:6c:57:
                    ce:51:d8:2a:cc:1c:72:22:e4:83:70:51:4a:eb:b8:
                    03:d3:d8:29:e6:60:37:4d:39:41:f4:8b:90:06:37:
                    ec:a4:f7:86:4a:7f:32:92:ee:2e:f1:49:2a:77:10:
                    b9:ec:de:df:3c:b6:e7:bc:a9:fb:80:18:63:df:6c:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:F8:D1:D6:9C:94:FA:2F:A7:03:EB:A2:E4:78:9E:7B:04:46:C7:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272533

    Signature Algorithm: sha256WithRSAEncryption
         a7:bd:95:e9:89:3c:73:37:c8:cc:1e:d4:65:33:0d:7c:62:b7:
         41:84:f7:86:27:ea:e0:b5:65:65:dc:0e:9c:ff:25:77:2d:95:
         de:7c:2e:f6:3d:8e:8b:85:93:5a:f5:93:37:34:74:a4:44:9f:
         b1:16:52:78:3d:61:7d:86:2e:5d:85:f7:f5:2b:2e:d6:fc:f6:
         35:21:46:dd:ae:6a:b8:1b:80:9d:7a:9a:1a:eb:d4:8f:40:b1:
         01:d0:52:ec:b6:e3:ff:e5:01:b2:7d:d6:db:97:85:38:65:50:
         cc:ef:7e:9c:d6:b8:e2:6d:7b:6b:3c:eb:c4:f4:38:96:52:3b:
         29:a9:ac:96:94:c0:3f:92:1d:c5:04:2b:c4:2b:e3:82:cc:cb:
         80:13:fc:61:96:e1:3a:89:ec:e7:a9:82:18:dc:d2:85:4a:bf:
         08:72:dd:89:0d:56:16:3a:3f:be:d9:d9:20:3f:09:fd:f9:38:
         45:62:b9:60:80:93:85:3d:bd:c3:83:6e:26:e4:ed:24:39:0d:
         75:f5:4e:ec:8f:41:0a:6e:74:d4:53:91:a0:1c:94:da:3a:c4:
         16:83:2e:cd:2f:a1:75:c4:88:59:db:49:68:08:cf:95:4c:3e:
         90:8c:37:85:d8:09:62:8a:f4:ca:74:35:ff:e1:1e:32:12:9d:
         62:29:c5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:16 2025 by rpki-client