Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/603F297D908D4E2DAE2898321C9C7C9C469C609A.cer
File:                     603F297D908D4E2DAE2898321C9C7C9C469C609A.cer (raw, json)
Hash identifier:          bnx/AmDRPfo+WkEvVKKkP7r+jqUJ2NYCJaAqJHaMV3w=
Subject key identifier:   60:3F:29:7D:90:8D:4E:2D:AE:28:98:32:1C:9C:7C:9C:46:9C:60:9A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       71CB12497D45C8D9958A4740BBFF023FC11225AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/603F297D908D4E2DAE2898321C9C7C9C469C609A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 19 Nov 2022 23:25:13 +0000
Certificate not after:    Sat 18 Nov 2023 23:30:13 +0000
Subordinate resources:    AS: 267556
                          IP: 45.70.0.0/22
                          IP: 2804:4338::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:cb:12:49:7d:45:c8:d9:95:8a:47:40:bb:ff:02:3f:c1:12:25:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 19 23:25:13 2022 GMT
            Not After : Nov 18 23:30:13 2023 GMT
        Subject: CN=603F297D908D4E2DAE2898321C9C7C9C469C609A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:c6:68:65:bf:df:0b:5d:06:98:cc:23:35:
                    5a:f8:a0:19:b5:65:51:4a:2d:5b:85:3a:24:63:78:
                    21:d1:8a:df:f7:1e:72:6d:3e:36:5d:aa:56:ad:6e:
                    ae:df:10:00:6d:9e:bd:5e:8b:7c:0e:d9:cb:a6:d4:
                    64:0e:f1:e9:86:5e:46:82:10:a8:e7:73:b3:02:d5:
                    c6:72:0d:15:ab:3a:85:fa:27:1f:b1:47:0b:9b:1f:
                    33:df:98:5d:c7:20:9f:cf:e6:0c:ee:07:fd:0a:11:
                    d6:d3:a7:23:ce:37:f9:33:5f:d5:08:08:6d:6e:bb:
                    09:91:b8:c7:b5:47:99:51:d2:6f:ed:71:04:e2:0c:
                    b6:94:6d:54:ce:c5:7f:b3:d5:bf:54:19:ed:76:ad:
                    b5:78:b3:4d:0c:45:06:e8:a7:22:bc:ad:db:ed:e7:
                    c9:51:40:fe:b5:eb:a0:e6:4d:04:a6:da:56:65:2c:
                    bd:b9:3e:e8:6f:55:d2:8a:bf:a6:31:98:f5:aa:5e:
                    c9:48:0d:ae:f7:e2:dc:e8:3f:e8:b1:fa:cc:f0:08:
                    17:3a:5f:55:83:8e:61:88:0d:86:81:ac:a4:cb:3d:
                    da:72:7b:84:49:da:74:4b:ff:f0:60:ab:35:ad:0a:
                    1b:bb:69:fa:d7:cb:fb:00:5e:0d:df:b2:3c:ad:a9:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:3F:29:7D:90:8D:4E:2D:AE:28:98:32:1C:9C:7C:9C:46:9C:60:9A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/603F297D908D4E2DAE2898321C9C7C9C469C609A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.0.0/22
                IPv6:
                  2804:4338::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267556

    Signature Algorithm: sha256WithRSAEncryption
         ad:bd:e5:40:e5:53:a0:4b:0d:5c:c8:a9:42:ef:69:a7:8b:7f:
         8b:84:36:b3:15:b5:ee:e4:00:a0:47:2b:c5:f0:db:e1:bf:19:
         6d:0e:0d:23:1a:67:42:1e:06:06:29:86:31:db:a6:df:5f:79:
         7f:3b:de:c4:a5:1f:3c:6d:5a:e9:11:69:f9:b0:e9:c2:6e:3a:
         ac:73:0f:24:8e:dc:59:1b:e0:b7:2e:a6:46:ff:89:bf:bf:e6:
         81:1c:82:e3:ff:13:f2:27:9d:8a:a2:78:fe:45:0b:99:38:6b:
         dd:f9:04:bf:2f:c1:5b:69:72:ec:87:4e:8f:56:29:55:57:e2:
         2b:4c:28:df:65:21:70:e5:c4:d9:b8:0b:8d:21:db:ae:7f:27:
         25:8c:2f:76:08:a6:d0:b4:f7:95:09:64:85:7d:16:d4:e5:8a:
         85:36:55:31:cb:0a:50:0f:f7:d5:b6:61:36:06:50:7b:1a:bb:
         86:50:14:b8:34:f3:66:9f:90:46:c5:ea:f2:e2:97:cf:04:aa:
         85:50:53:ff:b7:33:25:b9:c6:79:8a:e7:b6:18:ee:68:20:ff:
         5b:16:61:62:4e:d4:09:92:cd:5f:4c:a9:6e:17:e6:1e:3e:34:
         88:cf:cc:c1:ae:c8:c8:33:00:82:43:b0:0f:55:9e:c6:a3:e7:
         ea:10:00:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:37:12 2025 by rpki-client