Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43.cer
File:                     2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43.cer (raw, json)
Hash identifier:          DITVetrM4JTR6XH1qIZnQYHOQ5njUAYtjWA80EzgpSk=
Subject key identifier:   2A:2D:0C:C1:DC:98:8F:00:02:5A:E7:9F:7F:F7:A0:33:42:EB:0E:43
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       037AC36C98AA95F75B128CEB601ABDA420624893
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43.mft
caRepository:             rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 07 Jan 2023 03:40:10 +0000
Certificate not after:    Sat 06 Jan 2024 03:45:10 +0000
Subordinate resources:    AS: 267946
                          IP: 45.166.64.0/22
                          IP: 2804:55a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7a:c3:6c:98:aa:95:f7:5b:12:8c:eb:60:1a:bd:a4:20:62:48:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  7 03:40:10 2023 GMT
            Not After : Jan  6 03:45:10 2024 GMT
        Subject: CN=2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:3d:4e:1e:47:0b:4f:24:42:25:54:8c:60:
                    7d:9a:06:48:54:be:9d:35:c0:b6:ee:bf:67:2f:93:
                    31:8a:ec:6b:3c:b5:0d:27:68:12:67:7b:dc:75:51:
                    e7:e3:07:03:11:cc:b5:c7:41:b8:8d:ca:97:2a:65:
                    44:40:37:37:c6:13:b5:59:56:ff:d3:39:ec:db:f4:
                    57:c5:f7:ad:1c:d3:19:58:d4:49:93:41:74:6c:44:
                    a1:ab:3d:17:d4:f9:5c:07:17:49:bb:57:f8:5b:c8:
                    c7:2c:dc:e8:c9:9b:cd:c0:b1:08:2b:b2:0a:c7:c7:
                    4c:e6:ee:36:8f:cc:fc:dd:e8:cd:25:cc:84:38:25:
                    ae:df:a6:e1:fa:60:e4:c8:28:13:f7:24:aa:65:d2:
                    ce:9d:92:05:14:09:33:64:8a:b7:9c:92:88:2a:71:
                    74:b9:31:73:a0:8d:5c:ad:f7:0f:80:e7:a7:51:48:
                    6a:08:a5:b6:51:c0:60:65:81:ca:55:99:6c:a2:35:
                    09:a0:c9:15:4e:4f:17:ec:c4:64:27:f9:3c:22:9e:
                    68:be:06:6e:a1:7e:64:36:e8:69:fb:49:88:65:21:
                    d4:79:fe:25:ae:8d:f2:19:8c:6e:38:1a:d4:f8:bc:
                    a0:7b:6c:28:30:06:01:23:ac:27:bf:67:b7:2d:0e:
                    85:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:2D:0C:C1:DC:98:8F:00:02:5A:E7:9F:7F:F7:A0:33:42:EB:0E:43
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.64.0/22
                IPv6:
                  2804:55a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267946

    Signature Algorithm: sha256WithRSAEncryption
         89:66:d8:e7:60:50:b6:9a:b6:e4:63:27:01:ad:f3:a0:7c:bc:
         11:b0:c8:67:f9:1c:4e:be:10:a8:34:86:d8:dc:94:17:be:57:
         b2:10:70:05:38:ba:4b:a5:83:69:6b:af:d1:9d:a1:f1:42:be:
         08:df:f0:32:e6:1e:fc:ea:d7:97:50:d9:75:35:f1:03:62:a7:
         66:73:3f:1f:36:88:72:f3:3c:fd:15:f3:8e:88:2b:4b:00:5e:
         5b:3b:c1:37:04:38:35:27:04:23:d9:18:09:9b:75:d2:4e:d1:
         42:3b:02:3f:c8:0d:e6:a1:c7:8a:89:f4:24:cf:5d:8f:c0:91:
         8b:95:8a:e3:16:67:b9:3c:73:07:0f:07:83:a0:4d:b7:f0:40:
         b1:6a:01:9d:2f:ce:a7:0b:d2:52:47:87:ef:95:02:eb:db:f2:
         a8:39:95:80:07:05:a0:14:24:af:5e:1d:d2:0e:1b:0f:66:42:
         06:17:81:fb:b3:49:f6:d6:12:19:cd:de:ae:be:b3:8b:88:94:
         e0:22:90:7d:a3:74:3f:bc:86:c4:65:e6:c8:2f:d0:eb:7e:53:
         08:32:e1:54:b3:99:fa:c9:ef:54:83:0c:f6:2e:df:22:01:68:
         56:a1:1c:92:2b:e5:b1:b7:cd:48:29:d7:3c:dc:3d:0a:22:e0:
         ae:db:7b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:36:39 2025 by rpki-client