Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2EA807FBB8DE95A179905D7B7A457FFACFCAFB46.cer
File:                     2EA807FBB8DE95A179905D7B7A457FFACFCAFB46.cer (raw, json)
Hash identifier:          g2aJqLV+mAv/MDTwFEGq6lTjndgwSa4GyVMiozdiI4E=
Subject key identifier:   2E:A8:07:FB:B8:DE:95:A1:79:90:5D:7B:7A:45:7F:FA:CF:CA:FB:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32CD1470F122E8D2591C11434FF1BF516373BC09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ed4zsYouLN1ahnLxA1mVkMNMKZPVHNT4M3jLjmN2K5GH/0/2EA807FBB8DE95A179905D7B7A457FFACFCAFB46.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ed4zsYouLN1ahnLxA1mVkMNMKZPVHNT4M3jLjmN2K5GH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Jul 2022 13:15:46 +0000
Certificate not after:    Tue 11 Jul 2023 13:20:46 +0000
Subordinate resources:    AS: 268451
                          IP: 45.161.104.0/22
                          IP: 2804:516c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cd:14:70:f1:22:e8:d2:59:1c:11:43:4f:f1:bf:51:63:73:bc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 13:15:46 2022 GMT
            Not After : Jul 11 13:20:46 2023 GMT
        Subject: CN=2EA807FBB8DE95A179905D7B7A457FFACFCAFB46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8f:8c:ba:7e:b8:bf:85:12:0f:ab:5e:13:5e:
                    0f:6d:89:a9:ab:33:31:e5:46:a3:8c:9f:9c:e1:e8:
                    a3:b0:f4:20:de:e0:82:d6:b8:d5:c3:f7:bf:21:d8:
                    3f:f4:30:4b:e5:75:c6:7a:68:e7:95:bf:6d:e3:ec:
                    f6:91:ba:2a:21:bb:af:ef:03:d4:86:6e:76:7e:f8:
                    df:e4:d3:01:ec:ad:3b:a0:ec:45:9f:22:7b:bc:b2:
                    2b:5d:bd:b5:dc:98:a5:b3:87:29:32:c9:f1:a7:18:
                    92:cd:7a:f1:ff:34:f8:bc:e9:ea:6d:5c:7d:8a:ac:
                    fe:ec:52:03:97:c8:8d:5e:85:ca:3a:54:1b:c0:d5:
                    63:5a:44:9c:fa:5a:e8:d8:c5:9a:7c:f2:63:ce:5f:
                    cf:6c:eb:d1:dc:8a:ed:60:9a:97:a6:db:b7:70:58:
                    25:17:9c:63:00:75:08:7a:c3:e6:10:79:86:79:87:
                    fd:5c:d1:f1:65:4b:d7:28:4e:11:13:7f:e4:ed:db:
                    a7:b7:ad:be:b8:b0:8b:e3:4c:fb:b8:21:05:87:40:
                    b5:e1:68:de:79:08:78:88:ed:55:66:c5:eb:08:a0:
                    7c:7d:1f:1d:a7:4c:c3:7c:a2:0d:92:5f:9b:d0:8c:
                    e5:f6:64:e0:44:eb:01:e4:94:7e:19:35:62:79:b8:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:A8:07:FB:B8:DE:95:A1:79:90:5D:7B:7A:45:7F:FA:CF:CA:FB:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ed4zsYouLN1ahnLxA1mVkMNMKZPVHNT4M3jLjmN2K5GH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ed4zsYouLN1ahnLxA1mVkMNMKZPVHNT4M3jLjmN2K5GH/0/2EA807FBB8DE95A179905D7B7A457FFACFCAFB46.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.104.0/22
                IPv6:
                  2804:516c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268451

    Signature Algorithm: sha256WithRSAEncryption
         95:fe:9b:3f:01:55:16:d9:f7:e4:a1:3a:0e:69:5f:0a:03:74:
         38:71:0d:38:c8:ef:41:6e:fc:ce:38:57:d8:be:4f:1f:d7:33:
         f6:1b:b7:63:ba:ad:f2:8d:fe:02:d0:d3:2b:ad:6b:de:d0:95:
         fe:85:79:78:34:80:b8:5e:01:91:df:5a:78:a0:85:76:57:92:
         fd:70:e4:da:c3:22:f1:25:2e:dd:99:c7:42:e3:7d:c2:18:b6:
         ba:4a:24:ed:11:40:a8:4f:71:55:b3:a2:b1:22:b9:20:75:b1:
         ba:fb:66:72:ef:e7:7d:8a:a3:b8:9a:c0:3d:2e:25:b3:3b:e3:
         c9:d5:0a:b5:5f:bc:07:c1:3a:2a:85:8c:1b:aa:99:95:d7:38:
         23:b9:e1:c1:00:03:54:89:d1:fa:55:42:9f:fa:b9:fd:37:0c:
         f6:7c:0e:c5:24:1d:54:f5:c0:88:2b:86:cc:7e:5e:08:2e:23:
         c3:a9:2d:1e:6e:9f:a4:24:e8:65:3d:41:b6:c8:21:12:7c:43:
         b5:cb:15:52:5f:1f:62:07:8d:f4:f2:a7:d5:c3:e8:f9:5a:f3:
         05:89:ee:1a:f2:57:2a:b0:91:4e:cb:d6:f4:1b:46:2c:4c:ad:
         7b:2c:32:32:77:f0:56:47:84:5f:25:29:ca:86:b0:37:6a:b4:
         15:c0:65:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:40:09 2025 by rpki-client