Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AFE278875684A95688481FDA0240406D1EA7F004.cer
File:                     AFE278875684A95688481FDA0240406D1EA7F004.cer (raw, json)
Hash identifier:          51PD/At7xz6ykMXlM7bh6fyAwJseG1yZdiWNVRy/WbI=
Subject key identifier:   AF:E2:78:87:56:84:A9:56:88:48:1F:DA:02:40:40:6D:1E:A7:F0:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B03CDD6EE54A104B9173A9DABC586F1F96179AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/AFE278875684A95688481FDA0240406D1EA7F004.mft
caRepository:             rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Mar 2023 15:48:30 +0000
Certificate not after:    Wed 27 Mar 2024 15:53:30 +0000
Subordinate resources:    AS: 267946
                          IP: 45.166.64.0/22
                          IP: 2804:55a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:03:cd:d6:ee:54:a1:04:b9:17:3a:9d:ab:c5:86:f1:f9:61:79:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 29 15:48:30 2023 GMT
            Not After : Mar 27 15:53:30 2024 GMT
        Subject: CN=AFE278875684A95688481FDA0240406D1EA7F004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:e8:d7:d4:82:1c:1f:12:b2:70:8f:7b:12:
                    15:6d:29:b5:07:95:46:b9:5c:cb:b6:89:cb:f4:77:
                    aa:98:72:ad:1d:a4:3c:2e:96:1a:17:86:00:3f:c0:
                    ac:43:47:fc:2d:1f:49:7e:18:5a:6d:6c:da:43:ad:
                    f0:01:ef:14:3c:64:c1:69:7f:b2:a1:71:06:51:9c:
                    b8:29:49:2e:af:51:ce:53:da:30:19:04:c6:04:82:
                    7f:ec:a5:0e:39:9d:ec:76:d9:c4:f6:ae:f3:89:0e:
                    38:4a:9c:7c:32:90:92:b8:6f:f3:e2:b1:08:cf:4c:
                    74:14:24:c9:d8:ef:83:ed:64:3a:b5:81:f2:b8:38:
                    3a:fa:d0:3d:44:03:c7:08:8b:07:00:7e:65:f7:36:
                    dc:a3:71:1e:e6:e2:29:c2:90:03:48:d2:55:d4:66:
                    a8:7f:ea:2c:09:df:c5:ef:ee:d2:ca:c7:85:df:7e:
                    c0:0d:8a:23:42:ef:2f:9d:17:32:bb:a8:24:a2:cf:
                    f2:33:c7:e6:60:31:a1:b9:3a:18:bd:76:85:a7:5f:
                    fa:a3:60:89:0f:1f:60:15:0a:93:1c:9e:04:16:a1:
                    2e:f3:5a:bc:90:fa:df:49:94:db:7c:45:a4:af:b1:
                    82:20:c7:04:8d:36:7d:e8:cb:92:07:f8:03:fc:99:
                    de:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:E2:78:87:56:84:A9:56:88:48:1F:DA:02:40:40:6D:1E:A7:F0:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/AFE278875684A95688481FDA0240406D1EA7F004.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.64.0/22
                IPv6:
                  2804:55a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267946

    Signature Algorithm: sha256WithRSAEncryption
         ae:a6:f2:61:b8:2e:5c:5d:f1:55:95:d0:90:17:c8:2e:02:97:
         6e:aa:d5:e5:84:d0:41:7a:a9:f3:d2:55:8a:21:7c:01:30:82:
         53:6c:79:ce:96:be:b7:c8:c1:0a:8b:da:39:fe:8c:8b:fb:11:
         af:a5:23:02:16:9e:b9:22:c0:00:05:1f:af:2a:ff:6c:45:0a:
         58:13:7e:c4:98:d5:89:af:62:84:06:eb:f3:54:75:79:09:fb:
         05:a3:e4:b2:e8:d5:bd:54:cf:94:66:ca:1f:01:ca:8f:23:66:
         08:48:5e:1f:a8:02:c6:86:e6:da:c5:f5:4e:df:03:11:be:3c:
         20:8c:73:af:41:f4:d5:3f:28:42:a7:1f:32:98:32:5c:33:5a:
         e0:aa:d8:12:0c:cb:79:b3:94:8d:76:ca:db:c6:e2:a8:1f:b0:
         d2:16:9b:da:ec:1d:62:e1:89:dd:a5:a8:e4:e2:11:f4:aa:a0:
         04:95:2a:9f:54:68:e3:1a:77:48:61:2e:86:d5:56:bd:7d:54:
         b0:f9:95:9d:4b:9d:d9:f9:eb:39:7a:7d:dc:ec:06:33:b3:3f:
         a9:9d:5b:3d:ac:ff:7b:1d:15:48:b0:22:fd:bd:5b:b8:54:f0:
         b6:51:6b:80:7b:23:5b:00:2a:f0:aa:54:5e:cb:7b:54:f5:85:
         7e:ac:c9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:25:03 2025 by rpki-client