Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/767DF5A0C0DD11CADF31D8401E0463F52AF072B8.cer
File:                     767DF5A0C0DD11CADF31D8401E0463F52AF072B8.cer (raw, json)
Hash identifier:          nJ1rDJUfFlXl3VJMWkU0bx1eOuxKFI188y6bjulpm5Y=
Subject key identifier:   76:7D:F5:A0:C0:DD:11:CA:DF:31:D8:40:1E:04:63:F5:2A:F0:72:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       328EA0059FCBF18ED37EA1F6E5FDA253F0E78D65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/767DF5A0C0DD11CADF31D8401E0463F52AF072B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Jan 2023 11:25:33 +0000
Certificate not after:    Wed 24 Jan 2024 11:30:33 +0000
Subordinate resources:    AS: 269499
                          IP: 45.186.156.0/22
                          IP: 2804:658c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8e:a0:05:9f:cb:f1:8e:d3:7e:a1:f6:e5:fd:a2:53:f0:e7:8d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 25 11:25:33 2023 GMT
            Not After : Jan 24 11:30:33 2024 GMT
        Subject: CN=767DF5A0C0DD11CADF31D8401E0463F52AF072B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:41:37:e1:c7:d9:07:0d:70:44:e4:9c:c0:
                    a6:5e:43:5a:fa:41:f1:f4:11:0f:d1:fc:80:ce:76:
                    13:1c:95:05:4b:f0:f3:67:6e:23:ba:24:cf:4b:b5:
                    40:0b:9f:c8:00:39:8b:b3:8f:39:32:30:e4:80:a1:
                    f1:2c:a9:9f:76:b9:36:7f:5c:9c:4d:9b:b1:b9:39:
                    83:82:19:87:15:93:98:99:c8:ac:70:39:68:d4:ae:
                    d5:9b:45:22:f1:e7:87:58:47:67:ff:cb:28:e8:76:
                    59:75:fb:06:21:2f:9f:32:bf:13:06:99:49:78:64:
                    30:ef:35:54:8c:dd:5b:e1:7e:cc:c7:1e:d0:18:fc:
                    8a:9c:f3:64:e7:23:4d:d7:ce:0c:11:91:82:9c:83:
                    ac:27:7b:71:d0:60:2c:94:b3:1f:25:20:8f:c2:bf:
                    a5:a3:6d:43:3b:bf:aa:4c:42:96:18:0e:53:7e:0b:
                    82:76:6d:52:79:2f:bb:31:db:bc:a4:52:05:4e:5e:
                    02:9a:aa:d0:bc:57:e2:8b:c9:c8:ec:a5:d2:f8:81:
                    e4:e3:56:ef:79:97:6c:0d:55:65:29:a6:fb:50:cc:
                    b0:ad:ac:07:31:da:ed:af:1e:11:ba:25:2b:d3:8d:
                    55:fe:61:48:a0:bb:e8:98:54:63:95:b5:cd:07:27:
                    6d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:7D:F5:A0:C0:DD:11:CA:DF:31:D8:40:1E:04:63:F5:2A:F0:72:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/767DF5A0C0DD11CADF31D8401E0463F52AF072B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.156.0/22
                IPv6:
                  2804:658c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269499

    Signature Algorithm: sha256WithRSAEncryption
         72:e0:7b:89:1e:c5:10:10:db:3f:70:22:68:d7:cb:72:7a:2f:
         19:6e:60:84:ce:26:ed:f6:83:2a:a6:7e:b7:53:ce:c1:9d:15:
         53:a7:a4:ed:a2:f8:4f:ed:a5:92:b9:48:48:22:17:56:d5:96:
         2a:cf:a0:f5:15:02:f5:fe:0c:36:ae:c1:e6:85:44:3a:e7:cf:
         22:ad:58:d6:04:8a:a7:66:c4:76:2a:8e:bb:8b:6b:e9:2b:c8:
         4b:00:a0:b4:0f:fa:e8:b4:cb:13:8a:55:53:2b:fd:4f:36:a1:
         41:49:45:ad:92:c8:6f:ab:8b:d9:c0:40:93:64:07:b9:43:ff:
         41:f7:39:25:cd:1a:ef:5a:b9:ef:50:3d:45:8a:a5:18:ae:52:
         92:0f:13:2b:06:50:f0:e6:7e:0a:42:96:bf:db:50:83:46:a7:
         64:07:c3:95:2c:a7:80:db:9d:c1:d8:7e:86:30:68:5e:07:3d:
         c3:d3:4d:38:9f:1e:ce:ba:8e:d2:87:a3:f9:30:ac:00:bc:c2:
         e0:22:21:5e:50:59:85:f8:47:5a:39:47:52:99:6a:b6:67:48:
         24:98:0d:a4:b2:49:84:99:c4:cf:22:43:a4:54:80:2f:14:54:
         88:6e:7c:1b:e0:5b:e0:98:36:bc:76:cf:f5:cc:d1:76:02:3b:
         a6:7f:3a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:11:35 2025 by rpki-client