Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29.cer
File:                     7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29.cer (raw, json)
Hash identifier:          t68ZZgs9Mvm/Q3Qvs0k7XdL04oahqpQipMqUbhmRo44=
Subject key identifier:   7E:ED:A2:F6:FE:8D:4F:BB:2F:D1:E1:F0:A8:0A:6C:B5:09:56:AB:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32B2381B9B5003D14CF0A63E576995CB671FBAC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/0/7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2024 21:35:58 +0000
Certificate not after:    Fri 24 Jan 2025 21:40:58 +0000
Subordinate resources:    AS: 267670
                          IP: 45.224.187.0/24
                          IP: 45.224.200.0/23
                          IP: 2804:4510::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b2:38:1b:9b:50:03:d1:4c:f0:a6:3e:57:69:95:cb:67:1f:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 26 21:35:58 2024 GMT
            Not After : Jan 24 21:40:58 2025 GMT
        Subject: CN=7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ab:b4:21:0e:85:9c:e1:11:1c:83:93:20:a8:
                    68:16:21:67:db:35:c8:56:14:c9:4a:c4:74:6e:a1:
                    9f:3b:6b:2d:65:d8:75:2e:bc:a9:ba:49:5a:e0:20:
                    b5:79:9a:a4:ae:ec:5e:d8:a5:cd:7d:fa:4d:e6:9a:
                    9c:11:4b:65:cf:9f:d2:77:58:3c:bc:8c:57:24:cf:
                    a6:44:2c:3c:28:e0:85:06:5d:e3:63:75:6b:6a:b8:
                    04:c2:fa:4a:6c:81:19:e6:47:a5:14:12:22:2d:4f:
                    0f:ce:15:62:b4:eb:88:32:5f:10:99:be:ce:e2:27:
                    e0:79:2a:73:d0:a6:ce:c5:0f:4a:57:07:08:04:66:
                    4b:82:7a:6b:9f:3d:56:fd:85:b7:95:b8:1f:8f:19:
                    b9:dd:fb:18:e3:bd:70:12:59:aa:32:af:8f:a1:30:
                    32:12:f8:b7:d9:61:0d:0c:54:a4:da:e2:3d:b9:3b:
                    f4:05:1e:96:ee:b7:dc:a6:a4:e9:66:d9:81:89:52:
                    88:9e:1a:0b:77:12:9c:c0:3f:f0:fb:7c:c7:61:4a:
                    b9:4d:a6:95:2a:f8:fd:9e:b3:e0:21:1d:7a:db:83:
                    e0:6c:7f:b2:07:81:0e:74:4d:8c:42:f8:7f:63:1e:
                    29:c4:28:8e:3f:05:74:7a:dc:70:1c:df:0f:78:ec:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:ED:A2:F6:FE:8D:4F:BB:2F:D1:E1:F0:A8:0A:6C:B5:09:56:AB:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/0/7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.187.0/24
                  45.224.200.0/23
                IPv6:
                  2804:4510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267670

    Signature Algorithm: sha256WithRSAEncryption
         08:b9:a9:1a:be:20:6a:a9:19:51:fc:b5:f8:c2:86:d5:9f:e7:
         5c:61:b1:f9:84:9c:11:93:35:7a:79:a3:04:21:80:fb:6e:50:
         e1:09:35:b9:ce:bc:26:50:95:3e:b9:8d:82:0d:17:3d:0d:45:
         96:d4:fd:cc:52:5b:37:69:f2:f8:f6:a8:ba:67:d2:69:26:51:
         66:00:51:97:8d:c6:2e:45:ce:23:73:bc:37:c5:ab:8b:87:bc:
         07:7a:7e:86:3f:e0:3d:4b:de:8e:a8:25:a0:8b:80:8d:d0:1f:
         d7:26:f6:3f:77:00:5d:05:11:96:92:54:20:9e:a1:68:de:27:
         d4:74:ee:21:24:0e:24:d3:38:ae:1b:da:57:cb:e9:fc:a1:8f:
         ee:77:d7:1b:b3:b5:85:68:e3:c0:e9:a6:38:10:e8:bc:14:d9:
         5d:6c:34:c5:97:e8:a8:d8:41:2d:2f:cd:4a:59:46:1d:f3:55:
         43:a0:f5:ee:e5:16:7d:72:fb:d9:30:a7:fb:3a:62:c1:30:8c:
         10:d4:ae:64:a3:da:48:e3:38:63:33:5a:f7:83:cd:c6:cb:97:
         27:11:ee:05:bc:39:45:1f:3a:f1:c6:c2:c2:ab:bd:c9:25:ae:
         d7:c9:f2:1b:05:fd:8d:c9:25:91:79:0a:3b:50:30:ab:30:c8:
         4d:1c:55:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org