Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7C914C7BEF0123D16E7083B6F2202BB5D35FBE45.cer
File:                     7C914C7BEF0123D16E7083B6F2202BB5D35FBE45.cer (raw, json)
Hash identifier:          lJoM4ubA4YwCI0Rzz89W/EqnmyA7OQPNDHvRpaXeJSM=
Subject key identifier:   7C:91:4C:7B:EF:01:23:D1:6E:70:83:B6:F2:20:2B:B5:D3:5F:BE:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       711CE3CF561FD513B25484DCA6C82366DA9D4D14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/7C914C7BEF0123D16E7083B6F2202BB5D35FBE45.mft
caRepository:             rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Nov 2021 14:59:49 +0000
Certificate not after:    Wed 02 Nov 2022 15:04:49 +0000
Subordinate resources:    AS: 28191
                          IP: 186.193.176.0/20
                          IP: 189.90.32.0/20
                          IP: 2804:c2c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1c:e3:cf:56:1f:d5:13:b2:54:84:dc:a6:c8:23:66:da:9d:4d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 14:59:49 2021 GMT
            Not After : Nov  2 15:04:49 2022 GMT
        Subject: CN=7C914C7BEF0123D16E7083B6F2202BB5D35FBE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:4d:0f:ba:c1:6e:8d:2a:4a:73:a8:24:84:
                    4b:c4:51:c1:2e:4d:34:85:e8:3b:b0:2b:a1:e5:1f:
                    6d:9f:78:a9:ca:fa:f6:bd:80:35:fe:04:67:b2:0f:
                    ae:8d:ed:2a:49:8b:9f:81:55:c6:c0:d3:e6:94:c2:
                    ef:63:ab:bb:fb:72:4a:21:8f:bf:09:2e:f3:7a:e4:
                    1c:84:e8:1a:ba:49:7c:4d:ca:be:a9:92:4b:33:9d:
                    53:9a:36:50:6f:72:bc:40:7a:ea:20:44:70:2b:33:
                    e8:b0:72:92:18:48:04:91:aa:d9:cd:17:51:64:8f:
                    00:ad:28:26:08:5e:51:2a:ff:40:73:77:9e:2a:ef:
                    07:1f:ef:38:33:09:71:19:7f:24:30:fd:cf:b2:49:
                    b1:1b:5e:90:86:df:37:90:c0:76:34:6f:4c:7a:33:
                    83:a9:c2:b4:74:2b:bd:a1:11:03:88:4f:e4:35:9f:
                    ff:64:64:78:ef:ee:45:59:76:66:25:cf:a6:e4:5c:
                    0e:88:5c:82:47:17:77:3a:7e:dd:5b:7b:b0:fd:51:
                    55:f1:b6:dd:5b:96:90:92:b1:1b:72:fd:16:95:ce:
                    40:4d:63:88:37:de:ac:ef:8b:95:c1:71:29:eb:b9:
                    15:77:48:44:5b:63:a5:11:ac:c3:0a:62:07:bd:47:
                    a2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:91:4C:7B:EF:01:23:D1:6E:70:83:B6:F2:20:2B:B5:D3:5F:BE:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/7C914C7BEF0123D16E7083B6F2202BB5D35FBE45.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.176.0/20
                  189.90.32.0/20
                IPv6:
                  2804:c2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28191

    Signature Algorithm: sha256WithRSAEncryption
         93:df:62:d6:a4:0c:31:d1:2c:90:d9:5b:92:fa:17:a8:4b:b9:
         79:26:d1:a5:ce:04:89:b2:34:60:c6:db:4b:be:79:60:1d:db:
         80:2d:86:ad:aa:4c:d5:18:af:e2:13:e5:73:61:57:22:a2:5d:
         6d:f3:c7:6f:99:d5:2b:90:21:bc:f6:3b:26:54:9c:34:b7:5e:
         ab:15:88:ab:11:eb:2c:8f:35:62:56:90:9d:f8:39:5b:af:55:
         24:a8:8d:28:89:f0:98:f5:51:7c:dd:9c:f3:71:0a:95:c7:31:
         b4:54:cd:96:d8:af:2f:5e:b3:f1:55:2a:6e:2a:d1:b2:13:5b:
         f3:2b:3c:86:ab:06:8d:8a:21:90:54:0b:a1:1e:49:1d:c0:e7:
         98:d6:72:32:76:e2:7d:0a:36:78:25:a3:73:05:29:e9:54:1b:
         7e:01:81:84:09:58:6e:a3:90:6d:0d:7c:45:cc:32:3e:48:c8:
         52:20:c9:30:c3:f6:2f:17:3f:45:57:1c:cf:37:53:59:24:78:
         9e:30:6d:b9:90:97:d7:f5:46:bc:6d:2c:88:86:05:32:d1:58:
         7b:80:5b:59:6c:ac:8f:e3:7d:b2:3f:c5:dc:e9:cf:33:42:ce:
         ce:c4:5a:9c:13:fd:45:d5:47:f2:f5:83:a5:43:8f:04:5f:47:
         27:5e:1e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:09 2025 by rpki-client