Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7E0C8604EC56197DC9559BE9DE615B843999CDBE.cer
File:                     7E0C8604EC56197DC9559BE9DE615B843999CDBE.cer (raw, json)
Hash identifier:          O6ocV3IEz9xQ2pA1v1lPGvUO3AvE6fhr2a+cSOQaRJU=
Subject key identifier:   7E:0C:86:04:EC:56:19:7D:C9:55:9B:E9:DE:61:5B:84:39:99:CD:BE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7BD7F8FA4C587AF1D8E1D8DA710FA262818BBEDB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5AxgcTP5u5KZ7VUs7E8r7npo1CUXXj7C8Y59JEKBuMKV/0/7E0C8604EC56197DC9559BE9DE615B843999CDBE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5AxgcTP5u5KZ7VUs7E8r7npo1CUXXj7C8Y59JEKBuMKV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Mar 2021 22:15:33 +0000
Certificate not after:    Thu 03 Mar 2022 22:20:33 +0000
Subordinate resources:    AS: 262526
                          IP: 177.67.192.0/21
                          IP: 177.200.176.0/20
                          IP: 2804:598::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d7:f8:fa:4c:58:7a:f1:d8:e1:d8:da:71:0f:a2:62:81:8b:be:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 22:15:33 2021 GMT
            Not After : Mar  3 22:20:33 2022 GMT
        Subject: CN=7E0C8604EC56197DC9559BE9DE615B843999CDBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:9b:70:84:34:f8:a2:48:1b:6c:37:53:f3:
                    d0:de:0b:c8:fd:b4:e0:ef:cc:70:56:7d:61:41:90:
                    d7:de:17:8c:0e:89:99:42:e9:63:e6:ee:ac:9b:98:
                    4d:48:d7:29:9b:5c:7f:6f:cd:f7:dd:46:54:68:aa:
                    3b:b3:67:f1:64:3a:6f:4f:dd:34:df:b5:d9:c2:8f:
                    ad:74:8a:23:8b:7a:8e:f8:0e:d1:ad:78:a3:92:8a:
                    54:7f:17:06:89:7e:20:f0:87:5a:84:7f:be:f2:36:
                    67:50:3e:a0:ab:02:f6:67:85:4e:b8:f0:ca:38:0c:
                    d6:a7:2d:f9:4c:1c:5b:8b:d6:af:7c:c0:a4:29:49:
                    2f:9a:19:9e:33:28:60:1c:d6:ef:55:69:b6:f9:df:
                    ef:d6:03:ea:6b:57:06:42:cf:e8:5d:c4:cc:ea:e8:
                    7e:64:25:99:22:a5:5e:34:5f:67:ce:02:d2:48:0b:
                    5f:16:e0:35:d6:54:d4:bd:0a:9b:1f:c6:3e:91:8f:
                    33:db:26:b7:73:a5:61:f9:78:be:11:7a:d5:18:70:
                    fb:5b:51:6c:00:80:d9:a8:83:1d:a7:f7:e5:b6:4a:
                    85:ed:00:71:7c:7e:fe:69:5c:25:a7:7e:a1:26:9d:
                    a9:cb:da:60:32:df:7a:d2:8c:64:fe:f2:b2:0d:51:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:0C:86:04:EC:56:19:7D:C9:55:9B:E9:DE:61:5B:84:39:99:CD:BE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5AxgcTP5u5KZ7VUs7E8r7npo1CUXXj7C8Y59JEKBuMKV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5AxgcTP5u5KZ7VUs7E8r7npo1CUXXj7C8Y59JEKBuMKV/0/7E0C8604EC56197DC9559BE9DE615B843999CDBE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.192.0/21
                  177.200.176.0/20
                IPv6:
                  2804:598::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262526

    Signature Algorithm: sha256WithRSAEncryption
         a4:80:23:8d:17:17:62:95:a9:cd:bc:e9:b9:59:62:af:d6:4f:
         56:20:f1:13:6f:d8:40:cb:53:99:39:ed:a3:9c:32:ba:59:ca:
         c3:1a:22:cd:45:9e:a0:7d:74:c0:44:ac:81:3d:bf:76:e5:85:
         22:65:5e:ca:1c:b0:66:cd:18:cf:0d:c5:6c:af:91:08:26:45:
         76:e9:44:11:91:8f:ca:fe:51:be:49:f1:4c:a5:3b:b9:c4:e3:
         b4:01:06:db:cc:90:16:20:12:47:dd:cb:33:31:c7:14:73:0a:
         c0:3f:ce:15:29:00:02:c5:82:c7:0c:2c:3b:5c:73:ac:e5:39:
         73:b6:aa:2c:33:77:3a:e1:1f:49:2d:89:e2:47:c1:5e:ed:8f:
         19:72:a6:9f:17:7f:fb:b4:58:9d:2f:27:ef:80:02:6d:2d:59:
         31:c8:cd:2f:64:e3:95:fc:80:6e:b9:01:c5:c2:5b:9a:af:fd:
         ac:4f:e1:eb:a3:01:47:4b:25:ba:92:d9:60:63:20:85:0b:78:
         ea:35:58:30:3c:32:37:40:07:4d:8d:df:91:05:01:77:af:20:
         a1:68:60:ea:15:3f:b8:c9:16:05:0a:cb:6f:2b:e5:08:93:92:
         4f:bb:84:33:c1:e2:5d:fd:92:e3:b0:95:55:3e:c1:ca:eb:06:
         74:1d:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:36:21 2025 by rpki-client