Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9000A8326BD1A57773C7C207FBF8BA44DD2C350D.cer
File:                     9000A8326BD1A57773C7C207FBF8BA44DD2C350D.cer (raw, json)
Hash identifier:          uNoAW6lGYrF2uJ2knI45ZZh6dl7kMglkUtAoa989GXQ=
Subject key identifier:   90:00:A8:32:6B:D1:A5:77:73:C7:C2:07:FB:F8:BA:44:DD:2C:35:0D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7CF9E35796BAC1B6A07AE126DC0D0CC39A65CCDC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/9000A8326BD1A57773C7C207FBF8BA44DD2C350D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 19:56:15 +0000
Certificate not after:    Thu 13 Feb 2025 20:01:15 +0000
Subordinate resources:    AS: 266304
                          IP: 170.79.200.0/22
                          IP: 2804:35c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f9:e3:57:96:ba:c1:b6:a0:7a:e1:26:dc:0d:0c:c3:9a:65:cc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 19:56:15 2024 GMT
            Not After : Feb 13 20:01:15 2025 GMT
        Subject: CN=9000A8326BD1A57773C7C207FBF8BA44DD2C350D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:83:e0:08:7f:9f:dc:31:a4:49:d4:ed:2a:07:
                    e0:62:57:f0:c5:d8:f8:90:3e:eb:0a:b2:c4:f3:1b:
                    61:4a:86:3e:0a:3d:f5:5f:f1:c0:52:e8:96:0a:3b:
                    89:4b:e6:2e:32:d9:c3:69:21:a0:9c:6f:1e:00:7b:
                    74:b7:ed:df:38:c5:44:4d:9c:4d:98:5f:56:2e:ac:
                    bb:c3:fe:54:ae:0f:bf:b9:74:85:c5:58:eb:f9:29:
                    8c:47:77:cc:31:86:a2:82:70:25:f9:a0:a8:02:5c:
                    7f:9b:31:18:7e:db:5b:a6:8d:c8:83:f8:48:3f:ea:
                    7f:58:74:b4:fe:13:69:ad:bf:78:e8:72:17:44:f3:
                    4b:d5:8b:9d:6d:9a:8f:93:68:17:75:80:1e:54:90:
                    88:6a:01:83:0a:cb:8b:7f:1d:d6:cc:61:54:d4:47:
                    ce:b5:fb:51:bc:49:cc:04:03:dc:8c:40:06:45:2d:
                    9d:25:78:a6:54:e0:70:0b:b6:f6:f4:7f:92:4a:c6:
                    bf:ec:ce:74:5c:51:ba:58:f5:b9:79:e0:18:f4:28:
                    7b:d2:10:22:42:82:92:d0:39:71:dc:89:df:7f:e6:
                    ac:34:38:d4:36:0d:8d:ad:27:e9:82:18:76:77:fa:
                    07:9f:11:45:9c:ee:f9:6e:72:f3:f7:66:58:82:ee:
                    af:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:00:A8:32:6B:D1:A5:77:73:C7:C2:07:FB:F8:BA:44:DD:2C:35:0D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/9000A8326BD1A57773C7C207FBF8BA44DD2C350D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.200.0/22
                IPv6:
                  2804:35c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266304

    Signature Algorithm: sha256WithRSAEncryption
         5a:50:e4:ae:57:48:f1:98:e2:0a:f8:54:c4:08:cb:81:e2:7e:
         8e:ae:9e:82:b5:2d:e3:77:a3:a8:75:fe:d2:f7:91:d1:ab:13:
         d8:58:b5:2c:e7:77:e6:58:0e:ea:84:c2:85:d4:62:e1:a5:ce:
         dc:c1:2f:91:b8:97:d9:38:7c:06:a9:a3:4f:6f:dd:45:22:e3:
         1c:62:7b:a1:77:8f:1b:03:c9:ea:8a:57:50:fc:9b:d5:77:87:
         67:ea:c5:ba:34:90:ed:c3:cc:f2:a5:6e:bb:d0:00:8c:e1:3a:
         d9:d8:52:9e:fa:77:a8:0b:9a:4b:e9:4c:4e:ea:6b:4e:dc:0a:
         2c:65:7d:e0:cf:72:1f:6f:be:38:86:4e:89:fd:39:10:1b:bb:
         a4:f7:62:17:77:15:b3:c3:0e:e0:16:b0:7b:ec:4b:7a:98:f7:
         2e:54:f5:c5:04:3d:5b:5d:fc:80:d0:40:53:4c:f1:fe:75:ec:
         d0:61:30:25:67:9d:96:43:68:d1:95:9d:29:4d:34:16:ea:5e:
         e8:80:2c:10:93:41:5e:c7:8d:c0:1c:30:6b:f2:85:6d:ab:16:
         b6:0c:45:fc:be:ac:4f:61:b6:4b:3f:f2:ec:e8:5e:b9:f3:53:
         06:77:0c:7d:ae:7c:e8:48:2a:b0:9c:57:f1:a9:37:53:3c:0b:
         cb:64:bc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:43 2025 by rpki-client