Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/870E7946630644D65D049C7FD54C33D6324E7B0A.cer
File:                     870E7946630644D65D049C7FD54C33D6324E7B0A.cer (raw, json)
Hash identifier:          fp+qh5qJrMWgi5zYxbe+/1LyCOKaef8qwQg/BuFpvp8=
Subject key identifier:   87:0E:79:46:63:06:44:D6:5D:04:9C:7F:D5:4C:33:D6:32:4E:7B:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       033C6DB9BD57F483A71AAB5CDD8ED1A1150F0F0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9ptizjQEN1V5rhh9AMr3gHCjQaAEFyESS1WfboffzWCN/0/870E7946630644D65D049C7FD54C33D6324E7B0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9ptizjQEN1V5rhh9AMr3gHCjQaAEFyESS1WfboffzWCN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 16:32:47 +0000
Certificate not after:    Tue 27 Aug 2024 16:37:47 +0000
Subordinate resources:    AS: 268772
                          IP: 45.172.180.0/22
                          IP: 2804:5a6c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3c:6d:b9:bd:57:f4:83:a7:1a:ab:5c:dd:8e:d1:a1:15:0f:0f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 29 16:32:47 2023 GMT
            Not After : Aug 27 16:37:47 2024 GMT
        Subject: CN=870E7946630644D65D049C7FD54C33D6324E7B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:b6:2a:7e:6b:4b:dc:d9:a0:c1:89:f6:94:0b:
                    88:4c:44:89:ac:16:31:61:5b:6c:99:ea:12:92:40:
                    3d:43:d5:44:44:6c:5b:8e:af:ca:ae:eb:9d:03:db:
                    ca:a9:75:c6:aa:e9:98:81:bf:f8:f4:d4:f2:43:3e:
                    97:5f:df:3d:38:43:29:e2:00:85:66:b3:5a:fa:f4:
                    6b:b6:07:16:09:e0:4b:58:7d:ad:09:e3:76:ea:94:
                    88:d9:3f:c1:82:df:9d:0b:ae:66:0f:b0:96:d3:c5:
                    44:df:61:61:e6:38:8f:3b:b8:38:da:fd:de:ff:8d:
                    43:15:30:97:9d:47:04:e0:12:72:58:7f:e2:37:5b:
                    11:1a:cb:9e:85:3b:ed:7a:73:e4:de:a9:9d:9e:e3:
                    ce:07:ca:bb:18:bd:4b:d3:cf:88:9b:d5:78:96:4d:
                    37:cc:86:5f:ca:79:35:79:cd:90:07:e9:1a:57:02:
                    7a:0c:65:67:89:49:59:31:6c:1c:4d:eb:76:41:64:
                    fb:84:3b:32:63:a4:aa:88:61:bd:fe:6c:e2:f9:16:
                    00:51:c8:7a:17:d8:45:7c:60:c6:b0:cd:de:2a:77:
                    c5:2b:07:eb:0e:33:3b:fb:f7:f0:56:ea:16:d1:1d:
                    01:f0:f1:38:bd:d5:af:61:4f:d9:3f:89:e9:d8:40:
                    19:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:0E:79:46:63:06:44:D6:5D:04:9C:7F:D5:4C:33:D6:32:4E:7B:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9ptizjQEN1V5rhh9AMr3gHCjQaAEFyESS1WfboffzWCN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9ptizjQEN1V5rhh9AMr3gHCjQaAEFyESS1WfboffzWCN/0/870E7946630644D65D049C7FD54C33D6324E7B0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.180.0/22
                IPv6:
                  2804:5a6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268772

    Signature Algorithm: sha256WithRSAEncryption
         04:32:a1:e3:cc:80:4f:4b:43:10:aa:47:55:e9:5c:9d:62:18:
         35:86:8c:0e:f8:07:99:13:d8:5f:a3:25:3a:9d:ad:f8:0c:14:
         d9:1d:be:42:be:ca:ed:e0:1c:95:03:6b:aa:7d:80:ff:6d:3b:
         74:5e:e4:ce:11:4e:f0:4c:4e:79:da:f3:b2:cc:57:64:6b:16:
         1f:20:8f:54:85:85:3b:03:15:1f:71:6b:32:fb:cf:6c:6e:a5:
         44:78:dd:da:44:34:cc:3f:9e:82:cc:40:63:3d:d5:d0:7b:1f:
         99:00:93:64:fb:0e:c2:1d:0f:1c:5f:d7:fb:ba:70:b6:75:9d:
         87:ab:ea:cf:80:09:83:c1:10:e0:7c:a0:5a:51:58:d3:20:94:
         c9:7c:64:0e:ef:47:9d:06:9a:4b:37:7c:44:39:c6:9f:86:c8:
         8a:0f:98:ec:6e:21:c7:6a:bc:53:0d:6b:e1:ff:c8:9d:f0:7a:
         59:93:c2:05:70:44:64:10:96:6d:4b:1c:f3:de:0b:cf:32:7a:
         b3:f5:8f:29:5f:fa:16:48:6b:60:86:dc:e4:21:e4:7f:c1:93:
         59:43:10:ec:16:b4:49:4f:55:c0:8c:22:b2:d6:73:3e:5a:2f:
         5c:df:21:c9:fd:ab:09:47:2b:94:83:2c:fe:34:94:e0:0a:fc:
         cb:08:56:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 18:12:53 2025 by rpki-client