Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
File:                     7F2D68010D759A0F44F99D8397541824AD9D9781.cer (raw, json)
Hash identifier:          5e9RAGKdOnstebb0+ed/NZoYNS8XijLxladWbD6kQ3k=
Subject key identifier:   7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       31048B2786C898AD64E7B5024A9377B50313E5A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 18:20:39 +0000
Certificate not after:    Fri 07 Mar 2025 18:25:39 +0000
Subordinate resources:    AS: 267458
                          IP: 45.185.24.0/22
                          IP: 192.141.32.0/22
                          IP: 2804:41d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:04:8b:27:86:c8:98:ad:64:e7:b5:02:4a:93:77:b5:03:13:e5:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 18:20:39 2024 GMT
            Not After : Mar  7 18:25:39 2025 GMT
        Subject: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:67:f0:da:24:95:a1:2d:a7:04:09:bb:cf:
                    c9:16:52:d7:0b:41:7a:0f:5a:fc:c7:c3:b6:c0:f1:
                    e6:52:c6:f2:8b:a8:12:85:bb:1f:83:d2:28:41:27:
                    7f:8b:5e:72:b9:4d:6b:e2:64:79:05:55:92:cb:5f:
                    2d:41:49:dc:d0:77:7f:01:f1:22:85:81:94:6d:0a:
                    8f:a8:d2:4f:43:4a:6d:1d:ef:f9:0c:9b:82:c8:67:
                    02:60:83:e2:4f:11:79:f0:27:87:db:29:e0:e6:9f:
                    30:ec:fe:1e:e4:7b:a0:25:c1:38:80:05:fb:27:59:
                    ec:45:7a:cb:c3:27:6f:5e:92:57:e9:59:0c:96:75:
                    3e:08:1e:af:dd:29:14:06:f5:9c:bf:89:aa:32:42:
                    ba:4a:84:8c:e9:9c:83:85:6e:c4:d2:d6:d1:b0:4a:
                    31:f0:aa:77:e8:d6:d4:03:92:92:b1:46:58:3e:42:
                    5f:bd:71:61:57:4c:27:ab:8a:5f:15:79:d1:12:22:
                    c8:15:ce:57:9a:83:53:c7:8a:a6:1e:c0:65:9f:ae:
                    79:c4:e5:ad:5f:da:30:92:01:61:4a:e1:0b:ce:b2:
                    d6:75:12:6c:3a:29:31:1f:53:c2:a5:8f:87:7e:02:
                    0b:fb:27:cf:a4:52:0e:9c:e4:19:27:b0:2c:6f:52:
                    9c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.24.0/22
                  192.141.32.0/22
                IPv6:
                  2804:41d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267458

    Signature Algorithm: sha256WithRSAEncryption
         06:23:0f:fd:93:57:e3:ee:09:30:98:59:24:f4:22:02:fc:ff:
         31:13:75:ce:9d:77:8a:b2:9f:1e:c0:d8:3f:21:80:e6:af:76:
         bd:11:bb:c3:6e:63:da:bc:f3:cb:ce:9f:5a:ce:1c:3a:3d:7d:
         22:27:c2:b3:6d:69:4c:98:6c:71:d4:50:9d:c3:fd:6d:6f:11:
         56:4e:2a:4f:fd:cb:f3:80:ae:1f:e2:d7:82:28:59:41:f3:d8:
         49:ed:5c:84:6a:8a:ca:93:96:09:28:13:b4:23:d3:af:d5:ca:
         c2:0b:2b:b4:c0:d7:3b:56:9c:68:55:e2:8c:3d:07:13:06:8d:
         3f:a5:a8:0a:fe:0d:b9:7d:67:e2:52:36:6c:fc:5c:b8:59:d9:
         6c:44:09:e0:c5:a7:13:b8:f9:a5:f0:18:4e:c2:bb:dc:ef:d2:
         e3:a4:ee:e0:2b:6a:c4:bc:63:45:76:6c:1b:18:98:15:d3:50:
         27:2e:30:3d:1f:a5:2a:aa:11:57:07:eb:97:77:42:d0:f8:62:
         fd:37:d3:e5:f6:c7:11:a2:10:bb:a0:a6:35:92:76:c0:8d:b6:
         8d:bf:99:c3:40:e3:e5:6d:a0:99:13:c5:5c:4e:5a:91:5f:03:
         26:53:d3:71:3f:88:0c:ae:65:f9:69:e1:9c:7d:bd:26:44:75:
         00:9d:69:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:40 2024 by rpki-client on console-ams.rpki-client.org