Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/97E7B0D6AAB7955225483A872B80E0CC7EFFFB19.cer
File:                     97E7B0D6AAB7955225483A872B80E0CC7EFFFB19.cer (raw, json)
Hash identifier:          wIuiXuxTGEsTZ0uQ1Q10Gkjz2fdTGWW2o9Y7m0ghrno=
Subject key identifier:   97:E7:B0:D6:AA:B7:95:52:25:48:3A:87:2B:80:E0:CC:7E:FF:FB:19
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A3E35C65C18C57131C2F56426CCF9646A84F684
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/97E7B0D6AAB7955225483A872B80E0CC7EFFFB19.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Jun 2023 18:55:32 +0000
Certificate not after:    Wed 26 Jun 2024 19:00:32 +0000
Subordinate resources:    AS: 264422
                          IP: 131.221.172.0/22
                          IP: 2804:1e58::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3e:35:c6:5c:18:c5:71:31:c2:f5:64:26:cc:f9:64:6a:84:f6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 28 18:55:32 2023 GMT
            Not After : Jun 26 19:00:32 2024 GMT
        Subject: CN=97E7B0D6AAB7955225483A872B80E0CC7EFFFB19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:80:92:c2:83:45:97:dc:93:cc:00:a8:e3:a4:
                    24:21:22:dc:d5:3e:e8:70:24:b1:a5:37:95:85:5e:
                    60:d8:b9:44:29:c6:ac:76:69:d2:11:49:62:78:40:
                    fe:13:ba:bb:07:ff:bf:4b:f8:51:93:fa:5f:8b:60:
                    3a:ed:61:68:89:80:79:d8:8e:f6:e1:c8:d2:45:43:
                    16:da:fc:87:12:d0:bb:77:e5:50:50:a0:6c:bf:f3:
                    b4:a9:5e:30:76:9c:97:dd:79:c3:97:0a:d2:e3:c8:
                    0f:08:9c:db:92:52:73:88:61:3e:5e:01:1e:6a:89:
                    05:10:ad:9d:ef:60:d5:89:04:47:61:f5:b8:fe:81:
                    6f:cc:d2:cd:80:18:fd:5e:84:38:05:cc:31:5c:52:
                    d2:34:e4:5e:55:11:7a:95:89:b5:38:14:b8:1c:1c:
                    10:12:03:2b:77:d3:0c:5b:17:cb:8d:eb:ca:a0:b0:
                    59:55:5e:d4:b0:0a:bd:68:0b:17:fe:c2:ff:dc:ad:
                    7b:03:aa:20:77:e2:c8:ed:4f:8c:cc:36:31:91:e6:
                    2d:74:4f:16:f0:c9:f8:1d:cb:28:0e:83:13:ba:53:
                    c0:5f:7f:5f:2e:97:db:57:08:67:b0:76:ed:74:eb:
                    d2:f3:10:25:ab:a1:40:9e:f3:4d:ce:ff:c8:ae:43:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:E7:B0:D6:AA:B7:95:52:25:48:3A:87:2B:80:E0:CC:7E:FF:FB:19
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/97E7B0D6AAB7955225483A872B80E0CC7EFFFB19.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.172.0/22
                IPv6:
                  2804:1e58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264422

    Signature Algorithm: sha256WithRSAEncryption
         38:4f:02:33:f5:79:8e:6d:8d:17:40:14:62:cc:e2:ea:40:45:
         a5:3c:74:b7:e8:dc:b4:0e:e2:d6:7b:4b:77:3a:24:45:cb:81:
         d0:60:74:f2:b3:6e:88:55:4d:4e:4a:48:d7:cb:6a:5b:5d:d8:
         60:c6:4b:fd:0e:ea:a4:95:1d:5d:cb:ea:c6:c1:62:bc:a1:d9:
         f1:6c:a2:9b:41:db:d3:db:3d:22:8c:b6:08:ae:37:fd:15:d6:
         8f:89:c3:99:77:93:90:3c:e9:31:a9:c1:0f:07:e6:1d:57:d3:
         16:70:dd:39:99:5e:38:48:0b:20:67:a2:5c:0c:21:df:14:44:
         14:25:37:dd:92:4f:86:53:fc:ce:0e:71:3a:85:bc:fb:df:ad:
         7b:32:3f:33:26:3f:d6:dd:cd:e2:55:71:ca:6e:76:e0:49:1b:
         9b:cc:e9:79:71:60:a1:85:08:a1:7b:b6:4f:81:12:01:7e:a7:
         8e:63:76:73:5a:5d:ae:46:5b:0e:da:7d:9c:76:67:e3:ce:20:
         4c:43:54:66:8b:c7:cf:05:aa:3e:48:e8:01:f6:c8:54:bb:3b:
         90:3d:3a:21:6f:ea:84:bb:55:fd:ce:2e:f8:d3:07:c2:09:88:
         16:66:3e:ae:45:e8:1c:f1:a6:25:73:09:1f:e3:3a:e9:e0:b6:
         37:f1:9b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:25 2025 by rpki-client