Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7F25E17BE1F38B07E1BB16B506ADA73762E20233.cer
File:                     7F25E17BE1F38B07E1BB16B506ADA73762E20233.cer (raw, json)
Hash identifier:          q1s8zFZRmXrDswMaBZdwnGeHFb/8BsNHeYM1KdMDXww=
Subject key identifier:   7F:25:E1:7B:E1:F3:8B:07:E1:BB:16:B5:06:AD:A7:37:62:E2:02:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       43A8A4A7A1902344159890A85218BE02E0B2346D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/7F25E17BE1F38B07E1BB16B506ADA73762E20233.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Apr 2022 15:01:52 +0000
Certificate not after:    Mon 24 Apr 2023 15:06:52 +0000
Subordinate resources:    AS: 23289
                          IP: 200.160.208.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a8:a4:a7:a1:90:23:44:15:98:90:a8:52:18:be:02:e0:b2:34:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 25 15:01:52 2022 GMT
            Not After : Apr 24 15:06:52 2023 GMT
        Subject: CN=7F25E17BE1F38B07E1BB16B506ADA73762E20233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6e:4d:ec:48:67:12:aa:a4:38:f6:34:de:dc:
                    ac:a7:5a:7e:e0:f2:f0:e1:72:5b:f0:1e:1f:1e:7e:
                    78:20:cc:b4:f6:f6:ef:73:c6:ab:64:52:da:f7:f4:
                    8d:2e:c4:80:e2:df:9b:e9:c5:39:18:39:fb:6c:68:
                    e5:d5:0a:74:67:6c:2b:8e:87:03:c4:73:52:f5:26:
                    a9:54:1d:5d:a5:e7:78:1e:df:cd:ae:84:7b:25:50:
                    33:9f:7c:79:cf:6d:4a:d6:e8:3f:08:ca:9e:bf:a2:
                    f8:e5:c1:99:ff:b9:86:93:bd:4a:c0:5e:6d:e8:47:
                    c8:de:ec:14:6e:0c:f5:f1:59:07:95:83:d8:72:66:
                    7f:e7:f0:c9:de:1e:08:1f:49:e8:84:8d:4f:fa:eb:
                    b4:f9:90:77:e9:cb:28:52:47:94:fe:f2:3a:fd:25:
                    aa:bc:6f:1d:bf:c6:65:2b:84:99:ad:7a:f5:1a:38:
                    83:2c:78:17:8b:40:f8:f4:44:06:69:f4:d8:88:56:
                    2f:ce:fa:42:2e:fc:1f:51:1e:3c:bc:ec:01:d6:e4:
                    10:96:e9:b2:7f:8f:9f:78:c1:3a:fd:0d:63:2a:aa:
                    89:18:66:b9:a3:5a:44:67:31:2e:25:67:f6:f6:e7:
                    e0:d2:81:fe:6c:3e:27:da:57:c7:f2:8b:19:6d:cd:
                    a0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:25:E1:7B:E1:F3:8B:07:E1:BB:16:B5:06:AD:A7:37:62:E2:02:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/7F25E17BE1F38B07E1BB16B506ADA73762E20233.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.208.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23289

    Signature Algorithm: sha256WithRSAEncryption
         72:e6:38:47:ba:b2:fd:55:0c:7e:67:0b:38:e2:be:94:c3:ff:
         61:b0:e5:23:7c:1a:d3:1f:b6:17:da:10:ee:0b:5a:eb:e2:1e:
         36:72:6f:2a:02:5b:f8:6e:2a:c0:81:f7:d6:b1:ae:94:ec:e0:
         9a:e8:9c:41:e9:c0:fc:d4:07:fa:e0:66:49:61:be:3f:97:c4:
         59:0e:1d:00:39:a2:03:4b:8b:50:cc:fd:f4:9c:9e:28:fb:a8:
         f2:d4:7e:1d:fa:ef:44:13:cb:a2:89:c8:6e:51:08:1e:6a:31:
         dc:cc:a7:17:f5:c5:96:f8:88:23:68:eb:de:3f:a1:75:4d:e1:
         cf:f1:56:97:8d:e1:18:79:2a:e8:57:2a:2e:52:b7:1f:17:87:
         d8:f6:90:76:6e:91:d0:d8:64:70:0b:78:4b:eb:78:09:e5:e0:
         2e:9e:67:c5:f6:84:7a:9e:6a:91:5f:4b:11:21:7e:ee:d6:35:
         b8:42:83:68:70:31:68:38:b3:94:42:07:bc:af:87:1c:6b:56:
         7a:71:11:18:84:7c:2e:ff:0d:07:0d:78:e9:54:89:28:5e:03:
         3c:89:42:c7:11:cd:29:e5:22:22:36:d8:03:87:0d:4c:a3:4d:
         1d:ff:70:bf:18:dd:98:ea:60:13:4d:68:fe:5b:bf:01:bc:5a:
         e6:79:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:39:40 2025 by rpki-client