Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/767A470EAB8E305E518DE009FBEFCEAD2BF79458.cer
File:                     767A470EAB8E305E518DE009FBEFCEAD2BF79458.cer (raw, json)
Hash identifier:          TsD50vyZXMKSKXLRUmFV1GnlR9EDr644QQ2aZHbsoSU=
Subject key identifier:   76:7A:47:0E:AB:8E:30:5E:51:8D:E0:09:FB:EF:CE:AD:2B:F7:94:58
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F712A1CE007A579AE75CB230796221047193E6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/767A470EAB8E305E518DE009FBEFCEAD2BF79458.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 18:02:12 +0000
Certificate not after:    Tue 12 Nov 2024 18:07:12 +0000
Subordinate resources:    AS: 266198
                          IP: 160.20.168.0/22
                          IP: 2804:3c3c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:71:2a:1c:e0:07:a5:79:ae:75:cb:23:07:96:22:10:47:19:3e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 14 18:02:12 2023 GMT
            Not After : Nov 12 18:07:12 2024 GMT
        Subject: CN=767A470EAB8E305E518DE009FBEFCEAD2BF79458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:6a:6a:49:ad:0d:de:e1:a8:67:14:f2:9d:
                    57:36:ab:a0:60:f4:ff:b1:10:f3:d5:ff:5c:7d:29:
                    03:df:98:40:af:20:85:ac:64:97:a6:3b:96:d5:ee:
                    0a:bf:f5:7e:ba:d4:5b:23:39:9b:96:bf:f3:5e:51:
                    b0:8a:ae:db:2e:fa:75:db:58:d2:96:67:0b:86:ab:
                    08:eb:3e:5f:10:85:e7:03:08:b0:76:c8:98:6d:c5:
                    21:7a:14:fd:db:14:b2:64:09:68:f8:a6:af:ca:e6:
                    ca:dd:bf:34:41:44:70:0a:ac:92:6d:f0:e8:00:e0:
                    54:69:a3:3c:9b:2f:3c:6b:a5:6a:1b:e8:dd:6a:c4:
                    5d:97:0f:cc:5b:67:6c:a1:34:52:57:9c:74:31:ff:
                    dc:3b:57:b7:63:60:a1:6f:ac:54:6d:42:ad:43:ea:
                    50:90:1a:7a:77:1e:a9:9f:05:b6:21:19:3c:4c:f1:
                    9d:26:c9:b1:d8:d4:c3:1f:d1:48:73:15:82:93:50:
                    20:25:35:7c:72:56:30:c8:1f:aa:c7:b4:58:82:16:
                    4b:6c:e6:ac:15:c0:7a:13:83:63:84:df:3d:f5:39:
                    0c:3d:b0:bf:ac:0e:97:c7:26:47:5d:9c:af:ff:6c:
                    bb:c1:8b:62:8f:cc:13:66:35:bd:80:10:9a:6f:91:
                    6a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:7A:47:0E:AB:8E:30:5E:51:8D:E0:09:FB:EF:CE:AD:2B:F7:94:58
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/767A470EAB8E305E518DE009FBEFCEAD2BF79458.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.168.0/22
                IPv6:
                  2804:3c3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266198

    Signature Algorithm: sha256WithRSAEncryption
         51:b7:6e:5d:2d:9f:9a:ab:8c:c5:77:7b:ba:96:fd:3b:1d:c6:
         52:1b:f8:2b:f6:d8:a2:40:5f:76:1c:29:32:c6:bd:96:a0:9c:
         61:1f:08:85:68:79:9a:6c:24:f1:0e:2c:a6:24:66:7d:1d:00:
         26:08:70:56:83:03:98:68:20:43:df:1e:05:7d:d2:3a:f6:b9:
         33:92:c1:77:e3:0b:ce:04:45:3f:7a:d3:84:8e:01:39:33:b8:
         55:32:48:92:f9:92:ca:4a:36:f3:05:89:ab:1d:83:16:70:e7:
         64:72:9d:14:f3:4c:78:0f:1f:19:e3:4c:1f:df:e9:18:40:a3:
         fb:42:40:e0:ff:f6:fb:6d:10:ee:a3:07:8e:79:1c:75:15:ab:
         b7:b6:76:7f:ca:85:fc:21:db:b0:73:36:92:d2:b9:4a:d6:d5:
         b0:2b:32:7e:67:54:24:0b:32:2e:1f:82:ca:d1:e0:76:17:2f:
         56:8c:0b:b8:bb:f2:e2:5f:09:12:27:11:20:c0:69:31:02:d4:
         4a:52:32:cd:03:74:68:de:73:63:d1:05:9d:37:4b:2a:75:44:
         4e:fe:b0:b4:1d:3d:62:fc:be:f3:3d:4e:86:0f:60:f8:a7:d7:
         3a:6b:5d:e3:ee:f9:e2:13:3c:29:23:37:3f:33:b7:f8:86:16:
         a8:b8:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:33:16 2025 by rpki-client