Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7D81629076CE6FDBD4FCBCFD1F384CCC736BF6CE.cer
File:                     7D81629076CE6FDBD4FCBCFD1F384CCC736BF6CE.cer (raw, json)
Hash identifier:          o2CRiEYnQEDEdPOi27hCC4Pgl6FWM9CpXukMggYTMTc=
Subject key identifier:   7D:81:62:90:76:CE:6F:DB:D4:FC:BC:FD:1F:38:4C:CC:73:6B:F6:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5575B1A1689980E9025E2855D2BFFE3DBD98F05D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BFectnkRkJtNz5NR4JmwyECBnfGURK4LU1dHfx66ntMS/0/7D81629076CE6FDBD4FCBCFD1F384CCC736BF6CE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BFectnkRkJtNz5NR4JmwyECBnfGURK4LU1dHfx66ntMS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Apr 2023 06:12:00 +0000
Certificate not after:    Fri 26 Apr 2024 06:17:00 +0000
Subordinate resources:    AS: 269194
                          IP: 45.179.236.0/22
                          IP: 45.180.216.0/22
                          IP: 45.238.236.0/22
                          IP: 2804:60d4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:75:b1:a1:68:99:80:e9:02:5e:28:55:d2:bf:fe:3d:bd:98:f0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 28 06:12:00 2023 GMT
            Not After : Apr 26 06:17:00 2024 GMT
        Subject: CN=7D81629076CE6FDBD4FCBCFD1F384CCC736BF6CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:31:05:7f:43:6b:06:18:df:81:8e:8f:42:
                    c6:70:c2:73:63:87:fc:a6:ba:4d:a7:52:43:fb:e5:
                    4f:2a:f6:53:67:63:bc:e9:56:c2:9d:b9:fc:4e:70:
                    2c:1b:94:aa:08:f9:6e:ea:8e:b5:ad:77:38:f5:03:
                    bb:1f:40:bd:9c:22:a2:06:38:63:9c:03:9a:2a:a3:
                    bb:6e:2d:85:f7:a5:5b:2b:e5:97:47:54:d8:42:93:
                    e8:b7:da:40:1f:96:00:8e:fb:b9:1f:13:0a:bc:2d:
                    27:9c:e4:74:45:22:5b:d8:61:31:ae:a1:ae:2c:ef:
                    a4:ec:37:58:45:2f:29:11:24:7e:91:3d:37:4f:63:
                    2b:c0:c5:ac:3a:af:16:12:95:4a:58:eb:2c:9f:e1:
                    2a:43:2b:c0:5e:ca:ec:9f:d1:73:81:cd:47:90:cc:
                    8a:fb:71:8b:47:78:93:18:8b:5f:3e:09:85:ba:b9:
                    f2:6b:84:f7:bc:99:01:75:dd:8f:2a:ba:5c:eb:64:
                    cb:c3:c7:03:b6:fb:f5:71:66:6c:63:06:e0:65:99:
                    43:dd:24:dc:3b:88:ee:e6:d7:ff:bc:01:09:18:31:
                    1b:d0:7b:7e:39:91:aa:30:9a:ea:86:3b:dd:e2:d6:
                    54:7f:a2:e4:31:81:f8:13:06:08:7d:85:2d:3d:c6:
                    2a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:81:62:90:76:CE:6F:DB:D4:FC:BC:FD:1F:38:4C:CC:73:6B:F6:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BFectnkRkJtNz5NR4JmwyECBnfGURK4LU1dHfx66ntMS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BFectnkRkJtNz5NR4JmwyECBnfGURK4LU1dHfx66ntMS/0/7D81629076CE6FDBD4FCBCFD1F384CCC736BF6CE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.236.0/22
                  45.180.216.0/22
                  45.238.236.0/22
                IPv6:
                  2804:60d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269194

    Signature Algorithm: sha256WithRSAEncryption
         2a:a9:26:52:4d:8e:50:fc:87:26:1b:bb:bf:5e:11:9a:05:01:
         79:ac:22:8d:c3:8e:ec:91:f8:79:f2:55:98:48:2c:93:6c:5b:
         4a:7c:d0:f1:68:79:61:ec:60:9c:47:6c:04:66:1d:a2:fa:49:
         da:12:8f:de:68:fb:e3:14:9b:12:d4:c8:b0:ea:a5:ec:67:94:
         61:0c:bc:ab:ac:94:1e:20:f5:a8:ba:62:5c:0d:ce:05:99:41:
         b0:39:87:d7:86:f5:d7:49:fa:7c:1a:84:04:68:22:8b:0d:16:
         3c:98:e4:5a:37:55:27:25:77:b7:5e:2d:6a:ed:c3:16:90:fd:
         1b:fa:70:92:9d:71:a2:80:ce:05:6e:09:03:d4:64:a0:80:87:
         e7:6e:b1:55:42:d1:3e:8e:0c:e9:22:3a:7d:f1:bc:b9:05:67:
         c6:fc:8e:36:6f:8f:fd:25:c0:aa:94:6c:0d:6a:59:a6:34:f0:
         41:19:53:cf:e2:37:3a:4d:dc:22:4e:f8:83:e1:6e:6b:07:8e:
         82:68:60:4f:71:d5:50:d4:bf:2d:e0:16:9a:7e:83:a3:67:5e:
         dd:9b:b3:46:81:0e:5e:2b:32:2a:a5:f1:c0:42:95:b3:fc:ae:
         b0:e0:ed:1a:78:3c:58:0a:1b:42:7a:05:a7:5f:0c:00:4e:ef:
         bc:c1:e3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:55:46 2025 by rpki-client