Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B7A7C314F8D7B33DCBD0E31F5ED06533F6F9A827.cer
File:                     B7A7C314F8D7B33DCBD0E31F5ED06533F6F9A827.cer (raw, json)
Hash identifier:          TIUQ40KEMzLulwqk0Rj9eYcl2nNxnWIJrovvjAQ3k00=
Subject key identifier:   B7:A7:C3:14:F8:D7:B3:3D:CB:D0:E3:1F:5E:D0:65:33:F6:F9:A8:27
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       62AE266DFB2354CDD222B62572FD99FC7AAE061A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/0/B7A7C314F8D7B33DCBD0E31F5ED06533F6F9A827.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 20:10:13 +0000
Certificate not after:    Tue 21 May 2024 20:15:13 +0000
Subordinate resources:    AS: 264504
                          IP: 131.255.252.0/22
                          IP: 2804:20a8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ae:26:6d:fb:23:54:cd:d2:22:b6:25:72:fd:99:fc:7a:ae:06:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 20:10:13 2023 GMT
            Not After : May 21 20:15:13 2024 GMT
        Subject: CN=B7A7C314F8D7B33DCBD0E31F5ED06533F6F9A827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:65:82:e0:0a:d5:04:4d:ce:88:c4:24:f3:ae:
                    51:4d:4c:6b:28:2b:be:34:ce:2a:7d:36:c1:e0:4b:
                    29:76:8a:68:0e:2b:a7:0e:d3:aa:25:b2:2f:c3:9c:
                    7d:0e:c0:80:75:50:17:ba:1d:2b:e6:ef:46:5b:c7:
                    4f:38:f0:31:c2:d8:e1:0e:8a:04:ed:6b:6e:88:3c:
                    e5:d1:02:ce:53:72:6d:22:60:5e:9f:0a:25:7a:1d:
                    90:81:7d:fa:ef:9f:ba:37:fe:ac:77:4d:ae:31:b5:
                    1f:a6:6a:c0:b6:bd:bc:ea:1b:4d:5a:b6:4a:91:14:
                    9c:e9:27:cf:e2:2e:1e:40:6a:ce:cf:85:5b:54:9b:
                    bd:98:29:af:a4:6a:69:b1:70:2f:9a:07:4b:1d:09:
                    17:e4:80:51:1b:a2:54:cc:4b:c8:4d:d3:07:65:3c:
                    2b:46:5d:9d:64:bf:cb:71:49:77:82:17:89:20:f0:
                    b2:fe:8c:2b:cc:60:ac:69:ca:9d:8d:ba:14:3e:a9:
                    4e:fe:34:2c:58:6c:76:12:08:12:e8:98:c8:b6:3c:
                    d6:cf:42:98:bf:68:e8:bc:4d:a9:73:92:4e:c7:03:
                    43:bb:ce:5d:30:82:37:80:06:ca:8a:ce:04:9b:ba:
                    2b:e7:e1:df:9e:e9:5b:37:f6:93:39:ee:08:79:bd:
                    7f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:A7:C3:14:F8:D7:B3:3D:CB:D0:E3:1F:5E:D0:65:33:F6:F9:A8:27
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/0/B7A7C314F8D7B33DCBD0E31F5ED06533F6F9A827.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.252.0/22
                IPv6:
                  2804:20a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264504

    Signature Algorithm: sha256WithRSAEncryption
         2d:a1:92:c8:87:c4:f7:12:64:46:5e:a0:39:38:ab:68:09:61:
         a9:1d:d6:7d:0f:04:11:f5:a8:47:ac:bf:c4:58:82:4c:cf:55:
         2d:61:f7:e6:ef:a0:01:f0:99:e4:47:51:95:c3:48:24:7a:46:
         d8:75:1a:77:13:54:a4:2e:45:bc:f1:c3:e2:85:6c:f2:18:8f:
         0a:a8:b4:87:e7:e3:b2:6b:54:64:b7:a7:ea:19:67:5c:f5:3a:
         cc:4c:6a:01:0f:97:92:a5:57:4f:c3:85:cd:a9:db:cd:4d:a9:
         48:53:d9:51:09:d5:72:c9:a3:41:af:b4:2d:2b:28:70:06:e6:
         02:7a:74:f8:ca:41:a3:3f:c9:43:b1:9f:68:de:fe:31:5b:b6:
         3c:a6:54:2b:35:50:28:46:d7:f0:4a:b8:66:fc:69:61:63:ce:
         ba:9e:6d:6e:bc:3a:e2:b1:82:c4:f0:56:a2:71:74:0a:1d:db:
         61:e5:da:2a:56:43:49:41:4a:8d:3c:62:5c:94:2c:03:8e:b1:
         a1:0b:fb:18:64:54:58:0c:b3:b9:0b:47:15:56:84:c9:aa:1c:
         e6:e0:0b:21:30:b6:7f:fd:e4:18:6b:9c:5c:a6:29:41:7f:50:
         61:91:8c:2d:51:90:44:d4:2a:55:2d:e5:fe:6a:a7:2a:fb:63:
         d8:ff:c2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:10:56 2025 by rpki-client