Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F8A98F1BD024478F78711C4B65585771418C312C.cer
File:                     F8A98F1BD024478F78711C4B65585771418C312C.cer (raw, json)
Hash identifier:          hU8vA64UVquDxXiOzSoQjXGKG51jM8IU1Rh76BPT10c=
Subject key identifier:   F8:A9:8F:1B:D0:24:47:8F:78:71:1C:4B:65:58:57:71:41:8C:31:2C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       173FC9344E3D4790F2516CD9BD892A6E46CEE869
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/F8A98F1BD024478F78711C4B65585771418C312C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Jul 2022 12:25:38 +0000
Certificate not after:    Thu 13 Jul 2023 12:30:38 +0000
Subordinate resources:    AS: 267373
                          IP: 45.234.212.0/22
                          IP: 2804:4c7c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3f:c9:34:4e:3d:47:90:f2:51:6c:d9:bd:89:2a:6e:46:ce:e8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 12:25:38 2022 GMT
            Not After : Jul 13 12:30:38 2023 GMT
        Subject: CN=F8A98F1BD024478F78711C4B65585771418C312C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:97:06:28:45:db:37:37:15:2f:b4:e0:6e:
                    db:b7:3a:ac:1a:3f:2a:4e:04:1d:75:1d:f3:5b:f7:
                    bc:1c:d5:73:26:22:27:19:f8:c3:63:6c:d2:d4:07:
                    b3:49:0e:cf:b4:78:19:61:7e:71:3b:5f:c6:da:34:
                    96:2a:09:af:09:de:b9:60:11:82:a4:54:40:f7:f4:
                    d5:db:3e:ad:3b:1c:3b:19:d3:62:44:16:d3:d9:2c:
                    21:7e:45:3e:d5:b8:37:9d:66:a3:2c:59:ef:e8:85:
                    c6:c6:48:0d:ff:52:09:65:9a:d8:19:69:85:1a:ed:
                    13:cc:43:2b:10:93:6c:07:bd:20:df:1d:d9:cd:77:
                    05:50:35:f8:34:f8:cd:8e:74:1d:8c:26:00:bf:db:
                    95:ff:c8:0e:3f:a1:91:05:0f:49:6a:8a:04:c0:61:
                    e3:ac:ef:f8:f7:6f:4f:f4:5f:03:8f:17:6d:40:2b:
                    4a:54:37:1f:bf:ba:b3:c7:ee:39:b2:1c:8e:86:56:
                    7a:56:26:cd:81:52:0d:df:d5:e2:97:68:3f:e8:13:
                    6d:ee:56:b1:25:2a:78:6b:17:13:3b:b7:f4:f8:a9:
                    9f:b8:2b:19:52:e4:1e:41:2b:32:6e:42:37:76:5e:
                    79:1f:e8:80:32:c3:92:5a:fb:3e:aa:7f:3b:1b:65:
                    64:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:A9:8F:1B:D0:24:47:8F:78:71:1C:4B:65:58:57:71:41:8C:31:2C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/F8A98F1BD024478F78711C4B65585771418C312C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.212.0/22
                IPv6:
                  2804:4c7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267373

    Signature Algorithm: sha256WithRSAEncryption
         70:32:a1:a1:58:09:51:7c:80:a3:59:87:8d:99:14:fa:a7:38:
         d8:0c:7f:15:bc:5c:17:c8:97:39:2e:cb:11:b0:f7:b6:22:6d:
         4b:27:9f:04:c3:87:06:3a:49:12:04:8c:b7:cb:2a:0c:ab:8b:
         e1:5a:eb:6c:70:6b:3d:54:6d:4b:9d:cd:98:34:9f:09:4e:2c:
         58:fc:a0:1d:65:53:8f:03:ec:1d:dc:24:b5:84:7d:af:0b:73:
         82:b9:56:28:b1:c9:73:37:a3:f8:94:a6:bc:8d:34:45:25:0c:
         1f:6b:ce:3e:4c:34:96:3d:88:80:5b:37:04:31:35:c3:fb:f9:
         9a:f8:9a:d4:64:0d:32:37:a7:ed:1e:4f:18:b0:8c:d5:4c:32:
         15:5f:84:6c:8a:e0:6c:fe:ef:b7:3a:4a:7b:b2:3d:b4:13:45:
         3b:66:77:99:ab:12:7b:06:e9:7c:60:e5:00:a4:00:a7:ae:a8:
         a5:07:61:8c:c4:d1:dc:61:0b:65:66:ef:0e:3d:dc:1e:f6:a5:
         4c:84:fd:6b:0c:23:d4:55:36:cb:ce:a5:49:ff:69:95:50:8d:
         2a:85:5c:5a:41:3d:83:fe:b9:48:86:5b:5c:48:07:f3:cd:ec:
         30:5c:44:8a:da:67:0f:ef:cb:86:2e:2e:af:e0:a5:4d:d9:c1:
         03:0a:aa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:35:29 2025 by rpki-client