Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7028F07FEC9183042AECE47B9D139CF52E10FA08.cer
File:                     7028F07FEC9183042AECE47B9D139CF52E10FA08.cer (raw, json)
Hash identifier:          StMwaUCm3tVFx/N1wpQ3BTZI1w+fOpjTnLZ4CVogJGU=
Subject key identifier:   70:28:F0:7F:EC:91:83:04:2A:EC:E4:7B:9D:13:9C:F5:2E:10:FA:08
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       41BCD47C45842E823A48C0F3EB12359CE5B52C52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/7028F07FEC9183042AECE47B9D139CF52E10FA08.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 May 2022 13:55:42 +0000
Certificate not after:    Mon 08 May 2023 14:00:42 +0000
Subordinate resources:    AS: 268628
                          IP: 45.164.188.0/22
                          IP: 208.52.162.0/23
                          IP: 2804:5418::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bc:d4:7c:45:84:2e:82:3a:48:c0:f3:eb:12:35:9c:e5:b5:2c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  9 13:55:42 2022 GMT
            Not After : May  8 14:00:42 2023 GMT
        Subject: CN=7028F07FEC9183042AECE47B9D139CF52E10FA08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:2e:3b:85:25:ec:c7:08:08:11:15:53:68:
                    73:8e:27:f3:80:cf:f2:af:b9:ec:e2:c2:f1:dc:8b:
                    c9:f3:a5:ab:d6:ce:dd:ac:2c:b0:d5:42:5e:b6:32:
                    86:72:12:d3:f9:4f:a7:cd:e9:97:17:8a:08:86:17:
                    72:d7:2d:27:99:83:3c:14:0c:e4:18:59:18:a8:54:
                    54:1f:28:c0:8b:5c:9b:ad:f8:e8:53:0f:c4:18:d7:
                    d4:cc:9b:96:f3:a4:ee:1e:d3:d9:f9:0c:79:e8:3b:
                    e8:b2:2a:f2:d3:95:45:0c:fe:ba:f8:6d:1a:33:58:
                    be:9b:a9:68:10:fb:1c:02:7b:34:b5:a8:1a:ec:ad:
                    15:a6:26:3c:d6:35:7c:32:b3:ea:d2:cc:4d:28:3b:
                    39:de:22:ba:8b:69:3e:de:7d:cb:04:bd:95:1c:ab:
                    1a:13:e4:8a:70:81:ec:bb:19:72:95:ff:b9:0d:65:
                    4e:82:cc:ed:95:3a:df:e3:66:61:30:6d:e5:6f:0e:
                    86:55:12:4e:c8:b9:1d:a8:a6:46:98:a4:0a:86:38:
                    0e:5a:a2:6b:5d:ba:b9:9e:92:75:64:1c:b4:9d:e5:
                    27:9b:34:4b:f4:85:52:7b:ca:b2:14:f4:0f:38:d1:
                    47:f8:45:1f:71:9b:4a:17:57:01:b6:3f:3b:25:a7:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:28:F0:7F:EC:91:83:04:2A:EC:E4:7B:9D:13:9C:F5:2E:10:FA:08
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/7028F07FEC9183042AECE47B9D139CF52E10FA08.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.188.0/22
                  208.52.162.0/23
                IPv6:
                  2804:5418::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268628

    Signature Algorithm: sha256WithRSAEncryption
         23:29:7c:fc:93:54:7c:03:91:11:aa:3f:e8:c1:84:65:2c:54:
         ec:1e:84:bc:2c:5e:e7:db:53:69:d0:bf:a9:45:f4:cd:6e:57:
         76:c1:43:7b:13:45:0f:f3:22:5c:74:32:e1:46:8f:12:cf:75:
         bf:b6:96:9b:39:1b:23:ea:48:18:de:fa:b0:57:98:9d:6f:f4:
         e0:ba:41:1b:c0:51:dd:68:d4:94:3b:78:37:d5:43:e8:04:44:
         81:d2:ff:93:94:44:4f:0b:bc:77:1d:60:b8:e1:26:29:44:20:
         0f:7c:2b:32:da:a4:f7:71:19:7c:a4:cf:f0:fc:41:83:ec:b9:
         12:c1:ab:57:52:22:da:2a:a8:ea:01:8d:71:2f:f6:39:34:ca:
         0b:97:52:a0:02:23:93:3b:67:d4:77:28:3f:77:57:fb:9f:d6:
         a8:cf:3e:8f:8a:b1:d3:f6:41:98:0d:db:70:41:ee:61:bf:93:
         04:86:a9:a9:84:df:80:be:3c:81:20:70:73:9b:26:df:04:6e:
         fc:70:e6:e6:1d:78:06:a7:2f:2a:28:59:8c:88:aa:6e:dc:f2:
         fe:9a:11:43:52:c0:d6:33:64:ab:f7:7e:d1:7b:fb:01:ff:4f:
         36:93:2d:86:76:22:a9:de:25:00:e8:d0:fd:49:9a:dc:c4:21:
         d9:69:37:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org