Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7DDD1BAC7F4B720D346ADC0831C599B7146A832A.cer
File:                     7DDD1BAC7F4B720D346ADC0831C599B7146A832A.cer (raw, json)
Hash identifier:          VuzKLvicIZeZMJRbxhvsyWUhid9XpuDvofs49qE0Yg4=
Subject key identifier:   7D:DD:1B:AC:7F:4B:72:0D:34:6A:DC:08:31:C5:99:B7:14:6A:83:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7BCAF53B0C1EDF5F90CBFB2AC54ADEAA85419CC7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/7DDD1BAC7F4B720D346ADC0831C599B7146A832A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Aug 2023 18:24:28 +0000
Certificate not after:    Mon 19 Aug 2024 18:29:28 +0000
Subordinate resources:    AS: 268126
                          IP: 45.169.228.0/22
                          IP: 2804:5864::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ca:f5:3b:0c:1e:df:5f:90:cb:fb:2a:c5:4a:de:aa:85:41:9c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 21 18:24:28 2023 GMT
            Not After : Aug 19 18:29:28 2024 GMT
        Subject: CN=7DDD1BAC7F4B720D346ADC0831C599B7146A832A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:30:df:55:98:41:44:01:19:ad:3d:58:b8:
                    9e:f7:94:42:6a:28:f9:24:5d:29:f2:95:13:66:47:
                    25:9d:94:c7:53:e4:b1:e6:e3:b7:5b:c3:cd:6a:4c:
                    d8:30:b2:f3:ce:4e:71:48:c3:e3:50:4e:2b:6c:c2:
                    3f:b7:ff:c0:c9:77:ff:7b:75:28:ef:d3:30:5a:c8:
                    9b:0b:f3:40:48:3a:8e:bb:5b:e9:86:3e:62:ec:f5:
                    32:27:00:a6:27:52:d3:07:5e:33:a3:54:7e:cf:3c:
                    d9:67:13:2a:e7:80:c9:46:10:ed:dc:68:0c:7c:99:
                    d8:41:60:87:8c:5c:c9:47:50:b0:a0:b7:cf:1d:9e:
                    9a:a9:61:de:40:0f:7b:54:b8:b7:42:cc:98:a2:46:
                    70:c5:1e:d4:13:cf:e8:10:42:da:4f:85:7c:b7:b2:
                    35:d3:69:5a:77:cb:0a:8c:e0:67:a6:26:c9:d1:6a:
                    2f:5f:c8:c5:5e:e5:91:8d:40:bf:2f:71:26:0b:19:
                    9a:51:7b:e9:6e:31:84:f4:40:c2:c9:cb:1e:2e:2f:
                    20:5a:38:e7:70:86:f5:a3:39:39:ff:15:21:d8:92:
                    40:dc:ab:55:d2:69:5c:22:81:aa:3e:ea:fe:71:d0:
                    56:6b:e9:d4:54:9f:2f:66:34:26:5f:73:21:e9:91:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:DD:1B:AC:7F:4B:72:0D:34:6A:DC:08:31:C5:99:B7:14:6A:83:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/7DDD1BAC7F4B720D346ADC0831C599B7146A832A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.228.0/22
                IPv6:
                  2804:5864::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268126

    Signature Algorithm: sha256WithRSAEncryption
         21:01:a0:a3:a8:28:0e:18:e5:c1:0f:48:02:8d:7a:af:11:1b:
         f0:f9:40:f3:dd:c6:03:c2:e6:6e:43:fb:f9:ca:e5:26:fb:87:
         49:aa:c6:b4:cd:93:3f:02:70:ff:c0:3c:c3:c1:a8:7c:7b:9f:
         35:ea:a4:44:3f:8f:e6:bc:8f:4a:97:25:d6:2c:fe:10:3d:18:
         5b:de:83:e8:fd:a2:10:a7:f7:70:69:81:5a:83:bf:79:39:d4:
         19:1f:37:e1:bc:7e:29:05:6d:82:d5:aa:03:0b:ee:ad:b0:43:
         3c:05:fc:9b:ad:64:ff:5c:87:aa:e9:fe:8d:1b:bd:69:8f:eb:
         ab:ad:1f:1a:28:40:54:63:f8:c2:24:c2:c7:73:b3:66:a6:de:
         3e:33:2e:46:48:80:73:46:c3:06:87:25:45:4f:29:3c:ea:9b:
         08:93:f9:b3:82:8c:10:12:a5:ce:b3:76:65:27:7a:da:31:19:
         80:4b:d7:ee:b1:43:ce:12:d7:d0:08:23:42:f1:fe:5c:c0:02:
         ee:6b:fb:99:b6:49:b6:2b:31:74:25:13:eb:14:c0:a8:70:1d:
         e3:73:c7:23:25:85:8b:33:ee:ad:21:46:6b:d9:53:33:2b:a7:
         e8:d7:53:4f:83:19:30:f3:88:1f:e8:cc:b8:55:ef:af:7b:5d:
         f6:20:c9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:30:46 2025 by rpki-client