Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/224F617A8C99E9C0B41AB0A2513575EED38D03E8.cer
File:                     224F617A8C99E9C0B41AB0A2513575EED38D03E8.cer (raw, json)
Hash identifier:          mzjcFOJLJ+k2A9ibwY7JoXWGi95hNfFjyEbDGPWftQ8=
Subject key identifier:   22:4F:61:7A:8C:99:E9:C0:B4:1A:B0:A2:51:35:75:EE:D3:8D:03:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30AB5124DAC46199E18C51EE26D1AACE932234C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/224F617A8C99E9C0B41AB0A2513575EED38D03E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Oct 2022 20:31:58 +0000
Certificate not after:    Wed 04 Oct 2023 20:36:58 +0000
Subordinate resources:    AS: 61604
                          IP: 201.131.98.0/23
                          IP: 2804:7754::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ab:51:24:da:c4:61:99:e1:8c:51:ee:26:d1:aa:ce:93:22:34:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  5 20:31:58 2022 GMT
            Not After : Oct  4 20:36:58 2023 GMT
        Subject: CN=224F617A8C99E9C0B41AB0A2513575EED38D03E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:9d:a6:43:90:7a:59:e8:04:33:6b:a2:0f:
                    ad:37:a9:10:24:aa:74:1b:ea:da:9d:1b:bc:6f:44:
                    72:f3:48:31:8b:5c:52:e1:5d:bd:bc:eb:82:97:2a:
                    3d:00:25:91:4a:b1:8b:bc:49:da:65:ec:ef:63:d2:
                    53:1d:2f:06:1f:fd:11:09:ab:f3:e4:74:44:af:4d:
                    e4:91:6c:09:eb:29:9b:e5:a7:49:10:30:71:62:48:
                    2a:ab:dd:35:3f:ee:df:33:8d:c7:6e:d2:7b:2e:dc:
                    14:52:62:8e:b8:af:59:5b:59:fa:17:09:c3:40:ba:
                    2b:f7:0b:fc:f7:c2:b2:a0:69:a8:c8:8b:d7:5e:19:
                    3a:ca:e5:7f:8f:5a:4b:70:15:72:8f:dc:ce:85:38:
                    7e:0e:8e:81:47:07:75:48:1f:be:49:98:96:c8:63:
                    be:09:b9:db:e7:f4:62:78:ae:52:20:66:95:f8:46:
                    f1:a3:2a:f1:da:3b:47:3f:fd:53:a9:5f:05:5b:ee:
                    9b:d6:a0:8c:4c:51:c8:a5:d4:c3:82:0e:8c:c6:ae:
                    c0:70:71:aa:87:f3:fd:96:00:b3:0b:01:e9:90:ef:
                    b8:ec:72:7e:36:a0:25:05:71:56:2c:b1:eb:0b:fc:
                    b1:f4:aa:b1:5e:5d:15:1f:ee:7f:74:cb:a3:77:14:
                    85:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:4F:61:7A:8C:99:E9:C0:B4:1A:B0:A2:51:35:75:EE:D3:8D:03:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/224F617A8C99E9C0B41AB0A2513575EED38D03E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.98.0/23
                IPv6:
                  2804:7754::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61604

    Signature Algorithm: sha256WithRSAEncryption
         b7:a1:b0:06:d2:64:d2:b1:50:41:5a:03:77:19:47:77:da:79:
         cf:65:2d:f3:a3:d1:cd:dc:31:e3:1d:2f:49:70:75:f8:c1:92:
         19:a0:60:28:7a:d5:b5:77:c8:c4:49:24:1b:d1:c2:94:bf:f9:
         37:0a:58:1a:06:34:4f:25:cc:60:22:9b:65:87:b4:80:eb:59:
         99:7d:67:13:e4:e6:e8:a7:09:4b:65:0c:cb:9d:76:46:3f:8d:
         4e:0e:5f:c7:4d:2e:24:02:b5:b1:9a:12:b4:51:93:21:77:fd:
         bb:da:46:8d:c3:5c:cf:47:96:f9:8a:a2:f8:cb:b1:1e:bf:e8:
         64:5a:96:12:32:32:60:77:5b:01:bc:a7:aa:de:81:4c:b0:73:
         9d:81:2d:ad:78:f1:45:91:36:47:ca:d4:97:d8:29:a4:f5:b3:
         26:05:b4:2b:60:11:94:37:a7:07:e5:6e:d7:d3:05:f8:3e:8a:
         5d:2e:30:4b:19:ae:d0:4f:c9:59:55:23:c7:35:b4:7c:75:26:
         c3:cb:d4:05:5c:15:23:cc:bb:3b:3d:8c:86:33:dc:b3:f2:fb:
         7a:6a:5b:49:39:31:5d:fc:5b:4f:03:60:75:f2:87:d4:8f:2a:
         36:ab:15:8f:29:c3:99:d2:32:c7:32:ab:04:e3:40:74:c8:68:
         13:5d:f8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:24 2025 by rpki-client