Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2FEB4998BC86FAC078638F3436F1CCBF50021C7F.cer
File:                     2FEB4998BC86FAC078638F3436F1CCBF50021C7F.cer (raw, json)
Hash identifier:          +nLyAO9YkMUTYEPX2sC44zqCeh+1dPWYkSl7yERmiSo=
Subject key identifier:   2F:EB:49:98:BC:86:FA:C0:78:63:8F:34:36:F1:CC:BF:50:02:1C:7F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B3652ABE9BB2CE60C3EC0F49E68C23FF152D267
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/2FEB4998BC86FAC078638F3436F1CCBF50021C7F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 27 Aug 2022 07:05:32 +0000
Certificate not after:    Sat 26 Aug 2023 07:10:32 +0000
Subordinate resources:    AS: 28198
                          IP: 128.201.176.0/22
                          IP: 131.100.84.0/22
                          IP: 131.221.48.0/22
                          IP: 138.94.148.0/22
                          IP: 138.99.240.0/22
                          IP: 143.137.240.0/22
                          IP: 168.228.116.0/22
                          IP: 170.238.176.0/22
                          IP: 170.239.156.0/22
                          IP: 177.52.48.0/21
                          IP: 177.66.48.0/20
                          IP: 177.67.8.0/21
                          IP: 177.73.192.0/21
                          IP: 177.84.152.0/22
                          IP: 177.93.96.0/21
                          IP: 177.130.64.0/20
                          IP: 177.131.0.0/20
                          IP: 177.137.152.0/21
                          IP: 177.185.16.0/20
                          IP: 177.222.240.0/21
                          IP: 179.106.160.0/21
                          IP: 179.125.96.0/21
                          IP: 186.194.240.0/20
                          IP: 187.84.240.0/20
                          IP: 187.109.0.0/20
                          IP: 189.51.16.0/20
                          IP: 189.90.192.0/20
                          IP: 191.5.32.0/20
                          IP: 192.140.108.0/22
                          IP: 2804:884::/32
                          IP: 2804:c90::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:36:52:ab:e9:bb:2c:e6:0c:3e:c0:f4:9e:68:c2:3f:f1:52:d2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 27 07:05:32 2022 GMT
            Not After : Aug 26 07:10:32 2023 GMT
        Subject: CN=2FEB4998BC86FAC078638F3436F1CCBF50021C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:e2:de:7d:53:93:d8:48:e5:39:27:f3:99:
                    5f:28:81:b4:f8:f4:ac:d7:0b:49:62:bf:78:31:bb:
                    c8:5e:7e:3c:7c:87:22:f0:70:4a:c9:94:f4:33:d2:
                    78:3c:b7:28:25:e3:15:1d:21:8c:41:b6:5d:55:e6:
                    b3:37:6c:96:72:40:82:bb:4e:6f:82:d6:6f:c6:b5:
                    a9:7d:bb:a4:5a:26:5e:f4:45:be:8b:fa:06:21:12:
                    ae:ff:55:cb:67:d3:28:96:8e:d0:1d:1f:d5:cc:7d:
                    02:71:5b:a8:f4:88:5e:99:1b:29:03:72:a3:99:a8:
                    99:28:87:50:da:f2:c1:3e:71:00:36:85:fd:24:48:
                    00:c7:73:72:48:fd:f9:55:b2:51:93:ac:ce:dc:0a:
                    fa:b4:7f:ff:28:2e:b2:1e:89:a3:20:23:44:2c:c3:
                    ed:08:0c:9a:cd:ba:8c:73:16:91:63:01:d7:37:52:
                    16:6b:84:36:4e:51:bd:cd:9b:d1:21:ed:9b:40:69:
                    37:a9:2b:57:51:2e:f9:f0:24:32:49:87:ed:46:87:
                    78:72:51:80:61:65:41:85:66:cc:b0:cc:d5:48:0d:
                    f1:65:b5:c8:99:8e:8c:d3:ee:12:c5:3b:42:38:8e:
                    e6:c6:75:bb:61:53:ad:19:16:24:74:82:49:aa:7f:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:EB:49:98:BC:86:FA:C0:78:63:8F:34:36:F1:CC:BF:50:02:1C:7F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/2FEB4998BC86FAC078638F3436F1CCBF50021C7F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.176.0/22
                  131.100.84.0/22
                  131.221.48.0/22
                  138.94.148.0/22
                  138.99.240.0/22
                  143.137.240.0/22
                  168.228.116.0/22
                  170.238.176.0/22
                  170.239.156.0/22
                  177.52.48.0/21
                  177.66.48.0/20
                  177.67.8.0/21
                  177.73.192.0/21
                  177.84.152.0/22
                  177.93.96.0/21
                  177.130.64.0/20
                  177.131.0.0/20
                  177.137.152.0/21
                  177.185.16.0/20
                  177.222.240.0/21
                  179.106.160.0/21
                  179.125.96.0/21
                  186.194.240.0/20
                  187.84.240.0/20
                  187.109.0.0/20
                  189.51.16.0/20
                  189.90.192.0/20
                  191.5.32.0/20
                  192.140.108.0/22
                IPv6:
                  2804:884::/32
                  2804:c90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28198

    Signature Algorithm: sha256WithRSAEncryption
         07:9f:4e:bb:e9:80:75:1e:46:e1:3e:00:90:99:28:fd:2e:31:
         aa:39:45:c5:be:04:f6:d4:85:35:9a:a5:d3:69:a1:66:64:ae:
         f2:c1:40:2d:43:17:ab:a0:be:a9:84:1d:b5:f9:b8:a5:e0:6b:
         8d:42:80:7e:ec:10:a6:0c:75:87:94:fd:dd:8b:a3:c6:33:5d:
         19:0f:79:61:3a:e9:2b:ac:15:27:52:fa:30:31:06:d2:60:e8:
         8c:d9:05:80:ab:88:e4:3a:f1:ed:08:56:33:c1:20:c4:68:d2:
         2f:b9:c0:4d:e9:fb:ba:aa:f4:d2:02:3c:6c:82:e0:1e:19:ab:
         32:8f:bb:5f:61:34:11:8b:ff:7c:81:4d:dd:12:87:29:db:79:
         a8:6c:d5:6a:2f:b0:03:64:fb:18:15:1e:86:1c:2a:74:fe:d7:
         ce:95:07:10:ae:31:77:d0:06:12:47:66:2a:47:06:ab:46:56:
         87:6c:69:a5:4c:4b:0f:8a:8c:10:47:ae:18:19:e4:a9:af:6c:
         c0:40:66:50:d0:22:eb:f2:45:f5:ed:3e:25:c6:f4:5e:e6:78:
         72:0b:7a:58:72:ed:18:e1:26:44:e7:98:45:98:15:17:3c:ae:
         70:ec:cb:4b:48:10:1c:4c:eb:d5:0d:d7:31:f2:d4:e7:46:75:
         56:09:c6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:48:57 2025 by rpki-client