Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/79EE4D836D64CF10207EA847C16A1B679B88F130.cer
File:                     79EE4D836D64CF10207EA847C16A1B679B88F130.cer (raw, json)
Hash identifier:          kA0gxMU8FNRlxwn33+MaPOkpcZ0hjQ9L/y3FU/C1i5o=
Subject key identifier:   79:EE:4D:83:6D:64:CF:10:20:7E:A8:47:C1:6A:1B:67:9B:88:F1:30
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27CF2FB3090CC08C7E74C588575D4690E9533320
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/79EE4D836D64CF10207EA847C16A1B679B88F130.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Sep 2023 17:17:05 +0000
Certificate not after:    Thu 26 Sep 2024 17:22:05 +0000
Subordinate resources:    AS: 268633
                          IP: 45.164.184.0/22
                          IP: 2804:542c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cf:2f:b3:09:0c:c0:8c:7e:74:c5:88:57:5d:46:90:e9:53:33:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 28 17:17:05 2023 GMT
            Not After : Sep 26 17:22:05 2024 GMT
        Subject: CN=79EE4D836D64CF10207EA847C16A1B679B88F130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:03:20:4b:fc:ae:8f:cf:56:df:6d:a8:5c:
                    fe:bc:79:2f:b7:e4:5d:fc:19:89:c2:03:73:c0:3a:
                    13:12:b8:0e:41:ef:a8:64:c3:83:88:a6:99:9c:9f:
                    22:1e:c3:7a:90:e6:52:54:18:ab:31:f9:c0:13:af:
                    41:c6:08:31:f3:ae:e5:c8:17:78:3a:98:2e:be:5b:
                    5b:b9:9b:2a:8f:27:82:04:04:74:bf:44:d8:41:b6:
                    51:29:65:be:1a:e2:b0:8f:71:b9:de:16:79:60:73:
                    c9:f8:6d:13:dc:d8:a5:06:96:45:4c:93:10:85:ab:
                    cf:5d:56:dd:6f:ba:5b:b8:51:8d:e4:dd:5d:b2:95:
                    aa:d0:7c:ff:47:51:a2:12:fa:c0:05:ad:00:f5:23:
                    12:da:23:85:3e:3c:ab:24:d3:00:24:50:8c:99:75:
                    ed:a0:d0:20:fe:45:cd:05:21:b9:53:6a:f7:9a:9c:
                    27:93:8a:08:ae:1b:9c:fe:eb:78:ba:bc:24:3d:1e:
                    b2:87:15:8f:52:b1:e1:eb:ff:66:a3:75:8b:9f:24:
                    5c:c8:a4:18:48:6c:44:da:9d:7e:78:d3:95:6f:76:
                    fe:27:57:8d:cc:84:f3:b0:e6:25:c8:77:91:51:6b:
                    9e:9e:c9:e3:5f:9a:1b:20:6e:58:32:19:d2:02:a1:
                    79:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:EE:4D:83:6D:64:CF:10:20:7E:A8:47:C1:6A:1B:67:9B:88:F1:30
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/79EE4D836D64CF10207EA847C16A1B679B88F130.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.184.0/22
                IPv6:
                  2804:542c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268633

    Signature Algorithm: sha256WithRSAEncryption
         29:cb:21:d4:dc:ef:4e:f1:3a:1d:15:12:67:c9:85:33:6e:c3:
         55:1f:35:36:c8:52:30:d5:e4:39:1f:ed:d1:cc:90:5f:5a:a8:
         02:7d:d9:06:f5:71:2d:57:fe:50:df:5b:0b:24:7a:83:86:b0:
         4e:ec:51:21:55:fa:3b:34:8f:1b:51:b2:f6:0b:60:1f:cc:71:
         34:fb:33:b0:42:0c:81:1f:e8:97:b0:ac:89:5f:da:1e:05:5c:
         fb:b0:41:68:d4:0d:c4:d5:94:e0:c2:cd:c3:63:f8:db:63:23:
         4b:62:0c:56:9d:6b:77:47:95:8b:bb:d4:70:c9:cf:24:8b:fb:
         d0:8a:f0:c1:15:e3:eb:ab:47:e7:e8:e6:41:8d:88:6d:4e:a5:
         9c:bc:b7:be:6f:0c:15:a8:e6:fc:e4:8f:67:97:6a:ab:2d:b3:
         ec:43:42:0d:2f:38:fb:e7:96:a2:49:63:80:a6:22:ae:40:8b:
         bc:08:c4:25:4d:cc:2a:06:0f:e9:f0:cb:09:79:6d:6c:ff:6d:
         57:21:ec:71:f4:b2:e3:5d:9c:05:2e:b3:0f:83:a8:d5:34:b7:
         a4:de:1f:dc:7b:f9:3f:4f:da:07:46:2b:34:61:d2:c2:27:fe:
         28:36:85:98:f9:fd:d0:08:87:23:dc:19:2f:45:b8:61:e8:35:
         8a:d7:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 01:26:29 2025 by rpki-client