Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B7EA781400D109998DCFCE31A390705056EBEEAE.cer
File:                     B7EA781400D109998DCFCE31A390705056EBEEAE.cer (raw, json)
Hash identifier:          eXshjVvU31dGPTi45h739ewvX7Cy28aqpnPd0veHJ40=
Subject key identifier:   B7:EA:78:14:00:D1:09:99:8D:CF:CE:31:A3:90:70:50:56:EB:EE:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0C49AB5058C1CEFACCC805B16617A68B4E4CD4F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/0/B7EA781400D109998DCFCE31A390705056EBEEAE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Nov 2022 14:13:56 +0000
Certificate not after:    Wed 15 Nov 2023 14:18:56 +0000
Subordinate resources:    AS: 266539
                          IP: 45.65.220.0/22
                          IP: 2804:3d90::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:49:ab:50:58:c1:ce:fa:cc:c8:05:b1:66:17:a6:8b:4e:4c:d4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 16 14:13:56 2022 GMT
            Not After : Nov 15 14:18:56 2023 GMT
        Subject: CN=B7EA781400D109998DCFCE31A390705056EBEEAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:60:d5:ff:0c:7f:ec:52:dc:43:24:8e:96:
                    f9:48:27:7e:b2:56:d9:0e:f4:2a:9a:39:59:61:eb:
                    f9:7c:3f:f5:db:b0:d4:d2:32:bc:30:56:61:f0:1d:
                    d2:7f:84:8e:85:17:08:fe:c2:d5:42:2c:51:82:23:
                    2f:49:5b:7c:e9:53:93:b2:de:4a:ae:9a:8f:da:13:
                    df:52:97:96:ea:50:2d:41:04:56:0b:89:a4:86:91:
                    13:cc:8b:a7:e3:04:e2:fa:fd:64:5f:44:18:29:36:
                    89:89:66:93:06:94:14:40:1f:20:4c:37:c3:ea:bf:
                    6b:9d:9e:17:c1:cd:a9:2b:47:e3:62:f3:4f:a3:55:
                    47:28:52:2b:42:9c:ad:e4:b0:f7:5e:df:45:75:48:
                    f8:78:9b:58:0e:3f:d1:f1:d2:69:3d:13:c4:3c:bf:
                    79:aa:83:a1:94:a9:d0:36:db:2f:a4:20:1e:63:92:
                    cf:ed:65:67:10:53:01:17:17:ca:39:1c:fa:a2:e8:
                    57:4b:6c:1a:63:c7:f6:ba:e1:45:97:a3:f5:90:17:
                    38:e4:95:cc:5a:bc:95:0e:36:cb:b6:dc:33:4d:b1:
                    70:61:ff:4f:62:1f:66:72:4c:c1:20:1d:bb:6a:38:
                    4b:ff:8c:36:0a:ca:64:2f:60:11:5e:2c:56:5c:2b:
                    1a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:EA:78:14:00:D1:09:99:8D:CF:CE:31:A3:90:70:50:56:EB:EE:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/0/B7EA781400D109998DCFCE31A390705056EBEEAE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.220.0/22
                IPv6:
                  2804:3d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266539

    Signature Algorithm: sha256WithRSAEncryption
         0d:67:2d:1e:dd:5d:b9:04:8c:14:0c:78:03:09:b2:22:0a:09:
         43:71:c2:21:43:14:1e:8f:e5:33:03:b2:31:ab:51:27:30:14:
         b9:83:ad:14:07:6a:c9:8c:88:b5:f6:e9:cc:e8:9c:51:28:60:
         0e:e7:a3:c0:7e:39:8b:76:e4:2e:30:94:4c:d3:87:02:1d:44:
         bb:c8:2e:31:86:40:43:47:28:df:53:52:59:2a:36:68:bb:51:
         5b:92:df:e6:1d:e5:ae:2d:4f:1a:91:0e:ca:5f:46:4f:25:21:
         fd:d5:65:8d:5a:74:d4:01:c0:cd:83:58:3a:1e:fc:2f:47:d6:
         4a:b1:93:4e:6f:08:26:53:b7:78:50:32:54:2d:37:7a:ec:6b:
         23:2d:90:28:3e:1c:50:c7:3f:07:72:0f:5c:1d:2e:d3:67:26:
         b0:8d:9b:52:55:b8:fc:ed:fc:dd:d7:2c:48:62:1d:66:0f:11:
         09:e7:d6:85:a5:f6:32:1d:8a:6f:89:af:cc:b8:ee:56:95:18:
         56:5a:72:f2:7f:40:99:b4:3c:d9:14:35:a8:aa:55:2d:a9:7c:
         e2:f3:53:14:ed:a7:03:fb:2f:8d:35:c0:54:14:f8:6f:13:94:
         9b:7e:d7:d5:92:63:18:1a:ed:53:86:ec:f0:33:63:87:02:05:
         b0:31:70:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:43:24 2025 by rpki-client