Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F0B7913EF5AA48D8C4C939AF268EE5915DF7B75A.cer
File:                     F0B7913EF5AA48D8C4C939AF268EE5915DF7B75A.cer (raw, json)
Hash identifier:          EfBe8LzWjqT0QbKH6zk3Wg8L0fSGHO03uoU3u44iqAY=
Subject key identifier:   F0:B7:91:3E:F5:AA:48:D8:C4:C9:39:AF:26:8E:E5:91:5D:F7:B7:5A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E25D6046D719561AC76A5F3134A7FB2BEAFD565
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/F0B7913EF5AA48D8C4C939AF268EE5915DF7B75A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Jun 2022 19:54:11 +0000
Certificate not after:    Tue 27 Jun 2023 19:59:11 +0000
Subordinate resources:    AS: 264289
                          IP: 138.121.28.0/22
                          IP: 2804:2594::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:25:d6:04:6d:71:95:61:ac:76:a5:f3:13:4a:7f:b2:be:af:d5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 28 19:54:11 2022 GMT
            Not After : Jun 27 19:59:11 2023 GMT
        Subject: CN=F0B7913EF5AA48D8C4C939AF268EE5915DF7B75A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:eb:47:4b:d0:d1:8b:b0:42:bf:ff:82:c1:
                    d8:ca:94:2c:8e:ee:c4:0a:54:61:d9:91:93:9d:fc:
                    95:66:a5:b6:1a:c1:34:41:47:40:0c:01:c9:52:78:
                    24:e2:f2:c7:80:96:a2:c7:f2:69:9d:dc:d0:90:03:
                    db:3c:db:98:6a:cb:9f:43:6e:fe:9a:35:1a:cc:4a:
                    67:47:6b:a8:c2:9d:21:2f:e1:72:20:65:ce:52:61:
                    5b:83:d3:68:b6:5c:79:95:af:9d:74:e8:52:42:db:
                    a8:37:21:2b:3e:d9:e9:fe:99:29:94:db:c7:ec:fe:
                    61:5c:47:42:8f:a6:a6:cb:4b:46:66:30:f1:33:80:
                    8a:1a:ae:ff:5f:94:91:1d:2c:c1:56:22:08:d5:6c:
                    ed:d0:72:62:9a:77:a5:e7:a9:40:9e:e6:31:b2:01:
                    02:1c:f2:41:fc:97:90:17:ef:85:37:ab:75:6f:81:
                    04:f0:72:25:fb:9e:b0:35:2d:37:06:da:02:2e:d1:
                    66:35:a6:fc:c3:e4:f7:3e:49:ca:fd:2a:75:5c:41:
                    73:33:0d:44:78:01:d6:64:bf:03:48:24:16:8e:ca:
                    02:84:38:c3:41:8c:ec:15:b4:2e:f5:c7:d1:4f:b9:
                    fc:03:58:11:c4:a6:b6:43:fc:c1:9a:7e:ed:c4:35:
                    28:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:B7:91:3E:F5:AA:48:D8:C4:C9:39:AF:26:8E:E5:91:5D:F7:B7:5A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/F0B7913EF5AA48D8C4C939AF268EE5915DF7B75A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.28.0/22
                IPv6:
                  2804:2594::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264289

    Signature Algorithm: sha256WithRSAEncryption
         93:fd:44:d0:2f:3e:39:24:22:e3:c7:1e:b2:87:12:03:50:cb:
         a0:b9:f5:a5:a5:e1:10:a6:cd:10:df:ce:cb:17:23:68:d1:25:
         a6:ee:8b:7a:ae:59:d5:05:bd:78:cc:5e:04:d2:b6:21:28:bf:
         ad:cd:28:23:f6:92:43:b8:44:56:a2:b3:7b:71:f5:fd:95:9c:
         51:1e:af:20:65:ad:a7:96:e9:81:2b:0e:c4:e7:ea:4a:ce:c3:
         dc:68:da:8e:a4:76:b5:01:f7:c1:05:6f:3f:99:c9:2d:77:69:
         2e:ea:a5:e1:0e:10:b9:c9:d2:8f:1e:42:22:1e:07:32:68:e6:
         13:32:85:39:5b:c1:e3:1b:ed:91:ca:3f:93:f4:fd:72:d6:97:
         0d:3f:29:c3:5c:4a:6a:0d:5b:2c:b9:61:e1:07:b3:79:19:5a:
         72:2a:8d:5e:b7:78:97:1f:9b:22:78:54:49:23:f6:27:86:2f:
         77:c3:5e:5f:02:bb:d3:75:c6:d4:0e:97:eb:7c:d2:6d:40:ae:
         6b:ff:a7:76:57:e3:d2:0a:80:64:f5:a3:df:a5:35:4c:02:25:
         a1:73:d7:43:0a:69:c0:47:b3:a4:e9:51:f3:78:69:eb:61:e3:
         b1:50:bf:63:4d:89:ea:a0:49:b0:62:37:3e:0a:d1:d1:a4:ff:
         46:94:98:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:51:18 2025 by rpki-client