Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7B5A9B78F9281D3F9993C169CA1D6CE1C36965A1.cer
File:                     7B5A9B78F9281D3F9993C169CA1D6CE1C36965A1.cer (raw, json)
Hash identifier:          vU6ZDYkYiOH3Qj/KmOdOzznJ/xvEk23/P2C+Lsocwyk=
Subject key identifier:   7B:5A:9B:78:F9:28:1D:3F:99:93:C1:69:CA:1D:6C:E1:C3:69:65:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B9A68A83FD8FAC65DC34414789FC848CD843249
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/7B5A9B78F9281D3F9993C169CA1D6CE1C36965A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Jun 2022 22:40:33 +0000
Certificate not after:    Mon 12 Jun 2023 22:45:33 +0000
Subordinate resources:    AS: 264464
                          IP: 132.255.80.0/22
                          IP: 2804:2018::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9a:68:a8:3f:d8:fa:c6:5d:c3:44:14:78:9f:c8:48:cd:84:32:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 13 22:40:33 2022 GMT
            Not After : Jun 12 22:45:33 2023 GMT
        Subject: CN=7B5A9B78F9281D3F9993C169CA1D6CE1C36965A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2a:8f:da:5e:ed:30:19:85:61:d7:43:86:d3:
                    c5:44:a9:fe:68:98:25:fa:1d:ed:ec:60:9e:8b:a8:
                    c5:27:53:f9:9c:39:ec:1c:18:61:65:ba:1d:f2:e6:
                    d4:ad:3e:35:69:47:06:98:a4:2d:7b:ac:9a:63:cd:
                    21:0d:af:67:44:47:b7:9e:83:b5:8a:be:a6:e4:e2:
                    8d:0f:8b:19:4c:7f:f2:84:ad:86:43:41:90:f1:1b:
                    73:89:4e:2f:1e:88:79:1e:94:06:41:bf:9d:c5:7e:
                    cb:40:83:93:67:fc:01:0b:9e:ba:c0:57:26:33:44:
                    56:2c:e4:79:85:1a:1f:35:4b:ee:af:04:d0:82:c0:
                    ef:a3:82:9e:c1:4a:8a:73:97:27:0e:b9:b6:4a:a3:
                    dd:0c:31:58:77:c2:de:48:98:70:39:a2:78:30:5c:
                    33:7f:35:09:74:12:b0:29:14:78:10:b3:2d:f6:7e:
                    15:32:5d:75:dc:ef:20:f0:50:3d:38:b6:ba:03:3c:
                    be:8b:42:ec:8b:d6:55:d2:d5:98:5e:f5:2f:f6:90:
                    f5:21:3e:ec:3f:45:8d:ee:d7:1a:40:f3:ee:b7:cf:
                    77:e0:d3:3a:7b:59:9f:84:8c:06:46:9d:4b:c0:19:
                    76:ae:b9:ba:df:26:24:96:64:91:0f:65:ec:d8:47:
                    0d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:5A:9B:78:F9:28:1D:3F:99:93:C1:69:CA:1D:6C:E1:C3:69:65:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/7B5A9B78F9281D3F9993C169CA1D6CE1C36965A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.80.0/22
                IPv6:
                  2804:2018::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264464

    Signature Algorithm: sha256WithRSAEncryption
         15:bd:ab:a6:c4:0f:c7:3c:3a:dd:7a:89:79:f2:99:d6:ce:da:
         9f:21:17:2a:45:5b:ef:63:51:94:41:e5:8e:24:63:1d:a3:85:
         a9:7b:4c:8b:43:92:17:ef:e2:4f:aa:23:86:1f:73:eb:57:ff:
         4b:5c:9a:d3:fc:9f:48:19:f0:e5:32:e8:68:32:7e:89:e6:65:
         cb:8d:79:cb:91:01:e0:86:c7:e8:78:7d:dd:c5:57:43:ff:19:
         30:ae:5e:99:e8:29:1d:5e:f3:e8:b5:60:cc:73:8c:1e:aa:50:
         cd:5a:9b:56:9b:e5:bd:5d:1f:1c:8b:ce:26:b6:03:79:1a:53:
         1e:66:86:ed:4e:22:a7:58:ce:f3:42:d7:9c:f7:94:42:84:e3:
         59:f0:0d:41:cc:d5:8d:2e:ff:63:e3:ec:02:e9:16:eb:37:a5:
         bc:d7:8e:17:7e:ed:0e:b0:ea:fa:42:71:4c:ec:7e:50:05:a4:
         c7:c6:c4:eb:bd:b7:bb:8a:0a:64:04:ca:6b:f8:34:87:99:ce:
         e0:cb:0f:46:20:a6:21:77:b1:be:64:3d:9b:b7:38:fb:bd:05:
         49:2f:d2:75:c9:fc:dd:6f:02:36:e9:2f:04:42:57:05:1f:e8:
         73:89:7b:3c:1d:de:d4:5b:3c:fa:02:b3:d6:7a:0a:df:3a:25:
         46:f4:95:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:41:15 2025 by rpki-client