Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7C8EF4BEFBAD3375EB56D8633A6F247CD77E2769.cer
File:                     7C8EF4BEFBAD3375EB56D8633A6F247CD77E2769.cer (raw, json)
Hash identifier:          /Sh/9inT6oQWI20KuvSWZT9XO/jlhB9ek0dDZVDnzSk=
Subject key identifier:   7C:8E:F4:BE:FB:AD:33:75:EB:56:D8:63:3A:6F:24:7C:D7:7E:27:69
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       70F767DFEB960B10EEE3CC38613B2F2D65948CDF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/7C8EF4BEFBAD3375EB56D8633A6F247CD77E2769.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Apr 2021 20:29:17 +0000
Certificate not after:    Tue 12 Apr 2022 20:34:17 +0000
Subordinate resources:    AS: 263324
                          IP: 170.247.20.0/22
                          IP: 177.86.156.0/22
                          IP: 2804:1448::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f7:67:df:eb:96:0b:10:ee:e3:cc:38:61:3b:2f:2d:65:94:8c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 13 20:29:17 2021 GMT
            Not After : Apr 12 20:34:17 2022 GMT
        Subject: CN=7C8EF4BEFBAD3375EB56D8633A6F247CD77E2769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:49:6a:2f:97:ee:52:ef:61:f6:f9:8a:fc:
                    26:44:f2:8f:83:ef:e5:fc:66:91:ae:2f:67:b3:9a:
                    00:5f:37:f9:50:79:f7:89:bf:ae:f2:89:b1:25:a4:
                    af:ab:7f:4d:09:34:b9:91:f8:29:1d:8a:8c:85:0c:
                    d6:d3:6d:41:46:64:2b:d8:81:79:4e:15:d3:86:04:
                    23:ac:69:d5:37:0c:27:28:09:70:7f:fe:22:ff:2a:
                    0f:cf:80:f9:7a:09:14:0c:ae:61:39:60:75:3d:c3:
                    05:e9:3d:33:cb:67:fe:97:1d:c9:26:fd:af:b5:f8:
                    78:c1:1b:71:c9:55:33:cc:17:73:68:53:49:74:85:
                    d3:82:23:d1:9a:5f:fb:e3:24:a4:ae:28:96:03:90:
                    65:06:a7:49:b5:5a:9e:59:8b:af:7d:b8:ad:8f:c7:
                    ec:1f:9a:4e:60:1d:de:68:46:bb:d1:2a:89:eb:ad:
                    ee:e8:af:b9:98:f6:e5:cd:9f:59:a3:bf:8d:a8:58:
                    0d:53:b3:9e:17:7b:20:c0:60:64:dc:94:9a:af:49:
                    fc:62:27:a0:ce:b7:7a:e5:eb:3b:68:90:af:f8:74:
                    aa:90:6e:38:fa:93:68:93:62:29:55:d6:3c:c2:37:
                    2a:79:f3:6a:7d:b3:19:5c:f5:42:9b:5c:ec:2e:ad:
                    f6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:8E:F4:BE:FB:AD:33:75:EB:56:D8:63:3A:6F:24:7C:D7:7E:27:69
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/7C8EF4BEFBAD3375EB56D8633A6F247CD77E2769.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.20.0/22
                  177.86.156.0/22
                IPv6:
                  2804:1448::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263324

    Signature Algorithm: sha256WithRSAEncryption
         70:0d:70:42:45:64:62:26:65:38:49:2d:c4:60:20:5f:53:10:
         b0:55:d3:a1:a0:c8:fa:df:15:3b:c4:99:c1:d1:01:39:05:ef:
         5b:31:0d:a9:a6:22:af:fd:a4:a2:3f:66:e7:67:55:85:67:cf:
         95:0b:5b:5a:5d:ef:4c:5f:86:4f:66:0e:39:36:23:62:01:60:
         be:cf:f7:dd:06:bb:9c:ac:35:63:53:02:39:87:51:4d:5d:ed:
         87:ed:4b:8a:18:c8:fa:b9:77:72:bf:4b:1e:e6:76:d5:11:f8:
         0a:8c:d6:19:de:3f:46:7a:f0:4c:08:d7:fb:5e:36:36:c5:49:
         5a:18:6c:ba:bc:aa:a8:bb:0f:48:92:78:2a:b0:49:ef:9a:da:
         e7:c8:8a:26:2f:38:a5:ef:96:a7:bd:6e:66:32:99:04:92:e5:
         93:f9:87:40:44:93:a3:09:46:bc:5c:f8:90:e3:c9:68:a5:41:
         84:58:19:11:5a:7e:38:c3:cb:eb:eb:e9:66:29:ad:31:3a:fc:
         98:04:55:9b:40:20:dd:0f:74:a9:9c:a8:4f:db:ef:75:46:38:
         2e:59:8e:3f:d8:38:71:5d:e2:e5:83:a6:e3:9a:8f:e3:cb:d9:
         12:d8:93:6c:7b:59:74:dc:6f:61:a3:8e:81:7e:32:53:6c:f3:
         a1:f7:9b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:43:49 2025 by rpki-client