Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7AFE4BCD689DFF0C180988329AD8922D4AACA40B.cer
File:                     7AFE4BCD689DFF0C180988329AD8922D4AACA40B.cer (raw, json)
Hash identifier:          +FW2KHNty2amlhe2QmGgON8H8DSdhn4I5vTsaj7Xz9M=
Subject key identifier:   7A:FE:4B:CD:68:9D:FF:0C:18:09:88:32:9A:D8:92:2D:4A:AC:A4:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       65448C8534C45FACAC195C8B74F00697C6EACA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/7AFE4BCD689DFF0C180988329AD8922D4AACA40B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 12:36:45 +0000
Certificate not after:    Mon 17 Feb 2025 12:41:45 +0000
Subordinate resources:    AS: 263666
                          IP: 191.241.48.0/22
                          IP: 2804:1140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:44:8c:85:34:c4:5f:ac:ac:19:5c:8b:74:f0:06:97:c6:ea:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 12:36:45 2024 GMT
            Not After : Feb 17 12:41:45 2025 GMT
        Subject: CN=7AFE4BCD689DFF0C180988329AD8922D4AACA40B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c0:bd:6d:16:82:ea:89:23:14:39:cc:7d:0a:
                    be:6e:54:81:b1:2d:37:a6:7e:64:f6:b5:a1:ce:7a:
                    5b:e0:52:15:6c:73:7a:87:5b:d3:b5:3e:15:d5:6b:
                    e6:89:51:25:f6:de:74:f5:cf:6c:96:9a:dd:18:99:
                    af:70:72:99:80:f4:9a:2e:14:b8:5f:da:dc:b1:02:
                    52:80:3d:52:ba:fd:19:53:8e:28:36:76:29:96:11:
                    90:37:fa:5f:64:10:ab:1a:89:a9:43:de:d2:48:ed:
                    2b:69:7e:de:32:73:c9:c3:25:26:d1:08:a4:60:e0:
                    5c:77:53:4a:5c:2a:0a:c7:79:a6:7b:1c:9e:fd:c8:
                    57:ff:a1:a0:fe:fe:a8:56:28:a2:c3:4c:03:b3:e9:
                    59:aa:63:90:ee:81:ef:93:32:a8:4f:26:fc:5b:e5:
                    29:7b:13:f0:1a:14:42:60:5a:19:5e:78:22:49:a3:
                    06:83:09:fc:cb:9a:f6:3c:e0:0e:c9:de:4b:70:cd:
                    4c:3d:64:46:97:32:d7:59:05:d3:27:94:97:f0:5e:
                    40:6b:e8:1a:d6:dc:fe:12:90:88:b9:90:a7:e3:7a:
                    5e:86:c4:82:a5:d2:38:73:b7:a7:48:db:94:04:b4:
                    34:dc:05:41:18:a9:2c:bb:e0:47:c3:8e:6d:b3:77:
                    2b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:FE:4B:CD:68:9D:FF:0C:18:09:88:32:9A:D8:92:2D:4A:AC:A4:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/7AFE4BCD689DFF0C180988329AD8922D4AACA40B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.48.0/22
                IPv6:
                  2804:1140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263666

    Signature Algorithm: sha256WithRSAEncryption
         89:2d:07:8b:2d:c7:6a:23:9e:04:9f:18:92:e4:86:ee:2f:f7:
         87:bb:a1:e6:16:82:80:60:d0:f4:a5:31:62:c5:a2:ea:46:3a:
         26:55:a0:fe:f2:d9:75:4c:9b:32:b4:ab:5e:30:fe:c5:e5:c8:
         98:39:21:9a:79:2c:cb:59:7e:35:10:9d:0f:58:b4:a9:44:05:
         d4:4f:d3:c4:5e:16:d3:59:34:70:e1:67:f7:26:d7:cc:9b:0d:
         0d:8e:e1:8c:c9:ac:a7:71:5b:a8:73:07:f4:ef:37:8f:28:37:
         6d:ad:41:e4:86:37:e5:ed:74:6f:84:47:53:96:7f:e0:41:a7:
         1e:52:44:bf:8c:65:02:d8:c5:86:82:f8:bb:85:0d:54:3f:31:
         d0:96:9c:4f:b1:bc:c8:38:4b:ac:77:b5:8f:16:1e:4d:11:2c:
         d3:e9:e9:52:21:e2:1b:1d:03:21:26:2c:26:80:7c:df:91:67:
         ae:20:ff:f4:85:a8:dd:bb:7c:24:2f:7e:dc:26:fa:4d:52:93:
         6a:d6:dd:c8:87:bd:70:9b:aa:84:c2:86:3b:b4:30:c5:68:46:
         80:ba:32:ca:69:62:75:c7:0a:d8:af:ad:83:78:cb:46:51:41:
         b7:9d:2e:8f:ed:11:07:03:88:d7:66:50:2c:81:ad:17:39:e3:
         09:d3:b8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org