Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7DDD1BAC7F4B720D346ADC0831C599B7146A832A.cer
File:                     7DDD1BAC7F4B720D346ADC0831C599B7146A832A.cer (raw, json)
Hash identifier:          g7ytfZr3x1fGL57olUgpXdI5F2XlV8uzV5l6f6tn/Ac=
Subject key identifier:   7D:DD:1B:AC:7F:4B:72:0D:34:6A:DC:08:31:C5:99:B7:14:6A:83:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A05B3D2B97BAC19D25A8F03A1627EC8D51FD419
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/7DDD1BAC7F4B720D346ADC0831C599B7146A832A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Jan 2023 17:49:29 +0000
Certificate not after:    Mon 22 Jan 2024 17:54:29 +0000
Subordinate resources:    AS: 268126
                          IP: 45.169.228.0/22
                          IP: 2804:5864::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:05:b3:d2:b9:7b:ac:19:d2:5a:8f:03:a1:62:7e:c8:d5:1f:d4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 17:49:29 2023 GMT
            Not After : Jan 22 17:54:29 2024 GMT
        Subject: CN=7DDD1BAC7F4B720D346ADC0831C599B7146A832A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:30:df:55:98:41:44:01:19:ad:3d:58:b8:
                    9e:f7:94:42:6a:28:f9:24:5d:29:f2:95:13:66:47:
                    25:9d:94:c7:53:e4:b1:e6:e3:b7:5b:c3:cd:6a:4c:
                    d8:30:b2:f3:ce:4e:71:48:c3:e3:50:4e:2b:6c:c2:
                    3f:b7:ff:c0:c9:77:ff:7b:75:28:ef:d3:30:5a:c8:
                    9b:0b:f3:40:48:3a:8e:bb:5b:e9:86:3e:62:ec:f5:
                    32:27:00:a6:27:52:d3:07:5e:33:a3:54:7e:cf:3c:
                    d9:67:13:2a:e7:80:c9:46:10:ed:dc:68:0c:7c:99:
                    d8:41:60:87:8c:5c:c9:47:50:b0:a0:b7:cf:1d:9e:
                    9a:a9:61:de:40:0f:7b:54:b8:b7:42:cc:98:a2:46:
                    70:c5:1e:d4:13:cf:e8:10:42:da:4f:85:7c:b7:b2:
                    35:d3:69:5a:77:cb:0a:8c:e0:67:a6:26:c9:d1:6a:
                    2f:5f:c8:c5:5e:e5:91:8d:40:bf:2f:71:26:0b:19:
                    9a:51:7b:e9:6e:31:84:f4:40:c2:c9:cb:1e:2e:2f:
                    20:5a:38:e7:70:86:f5:a3:39:39:ff:15:21:d8:92:
                    40:dc:ab:55:d2:69:5c:22:81:aa:3e:ea:fe:71:d0:
                    56:6b:e9:d4:54:9f:2f:66:34:26:5f:73:21:e9:91:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:DD:1B:AC:7F:4B:72:0D:34:6A:DC:08:31:C5:99:B7:14:6A:83:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/7DDD1BAC7F4B720D346ADC0831C599B7146A832A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.228.0/22
                IPv6:
                  2804:5864::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268126

    Signature Algorithm: sha256WithRSAEncryption
         67:dd:9d:88:ba:3d:5c:da:87:76:ed:1b:ad:46:aa:f2:c9:04:
         d5:40:df:5a:c5:5a:d4:f1:69:ab:ee:7b:7a:fd:d5:8e:d9:a8:
         69:fe:a0:49:db:c3:3a:43:9b:70:84:2f:b3:f5:29:64:b2:70:
         a5:7b:6a:4c:b8:f8:0b:59:48:31:16:29:4e:ce:19:44:27:ad:
         83:d6:6f:a3:b3:ea:e1:99:24:7f:bf:4a:37:36:c6:bb:eb:ad:
         ff:7c:fe:24:c2:3d:b6:a7:72:49:8e:2f:21:09:4e:05:ed:54:
         a5:86:e8:e6:94:8d:48:f1:79:3e:55:16:0b:da:cf:1f:cc:92:
         07:66:81:6e:89:dc:02:33:65:53:df:21:78:7b:c1:13:e1:e7:
         fa:bc:dd:a6:0a:4f:c9:3d:b1:e0:d7:f6:6a:e7:b5:2a:cc:b5:
         8f:13:b2:48:0b:ae:dd:c7:03:f1:78:65:08:67:4e:80:07:49:
         89:fd:89:d1:20:04:47:98:e1:76:e6:fd:d4:c6:f3:b5:5d:69:
         91:df:68:09:66:a4:a2:fa:d1:e0:b9:b8:f4:b4:bf:67:63:e1:
         7b:f8:c9:42:28:7e:7b:f8:49:a4:cb:4e:33:b3:80:b5:7d:a1:
         72:04:1a:b4:ec:43:00:27:56:78:66:ae:46:e1:b5:3d:9b:5c:
         e9:96:67:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:17:47 2025 by rpki-client