Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0747FDC663B7FA980518FACB203AEBCF24C60F29.cer
File:                     0747FDC663B7FA980518FACB203AEBCF24C60F29.cer (raw, json)
Hash identifier:          c/r2zWNOcnqOVjP5uMfrQUJtAekCQm8mHgXVVX33tQY=
Subject key identifier:   07:47:FD:C6:63:B7:FA:98:05:18:FA:CB:20:3A:EB:CF:24:C6:0F:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       546EA25BAA9737E70A55DAB880EDD8763E3E8E7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/0747FDC663B7FA980518FACB203AEBCF24C60F29.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 20:29:22 +0000
Certificate not after:    Mon 20 May 2024 20:34:22 +0000
Subordinate resources:    AS: 52927
                          IP: 177.185.32.0/21
                          IP: 2804:adc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6e:a2:5b:aa:97:37:e7:0a:55:da:b8:80:ed:d8:76:3e:3e:8e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 22 20:29:22 2023 GMT
            Not After : May 20 20:34:22 2024 GMT
        Subject: CN=0747FDC663B7FA980518FACB203AEBCF24C60F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:03:fa:72:f2:ef:d1:5f:d9:6a:a5:d0:dc:55:
                    ef:11:1e:73:26:2e:1d:7b:82:98:8d:2b:28:57:a7:
                    56:da:c3:99:bf:04:95:b7:0b:76:4a:af:25:90:09:
                    24:0a:f0:0c:ed:2b:3d:5f:b3:c6:eb:e0:72:fa:26:
                    aa:3d:be:69:51:11:51:83:a3:8c:c7:36:1c:c2:ad:
                    bf:35:9c:26:99:59:a0:9d:2d:48:16:ab:89:5d:ea:
                    5f:ff:0a:c1:1d:22:04:26:4a:0a:d8:dc:47:05:3c:
                    93:0a:ce:e1:e8:e2:32:ec:fe:7d:a1:17:a8:8f:2e:
                    f1:5d:62:9d:c6:3a:e3:33:34:85:de:df:9a:aa:84:
                    1c:c0:fb:cd:33:77:7f:96:d8:51:51:d5:c1:ef:4f:
                    56:88:b7:13:8b:9f:e1:77:01:16:14:ab:d2:ce:0e:
                    a1:1d:58:0d:70:5e:1c:2e:00:93:58:a1:ca:c3:83:
                    1b:9f:26:21:b2:27:c8:bc:65:58:12:5a:2b:0f:6c:
                    5e:06:e6:17:e6:a7:d7:01:6b:3f:ca:15:9c:35:54:
                    95:80:79:dc:b7:0a:9c:de:36:cc:cb:7e:fb:38:41:
                    f6:33:55:fb:bf:cc:45:12:77:2d:ca:88:7c:bc:8e:
                    97:0e:8d:6e:a2:67:f2:12:49:8e:6d:8c:e9:ef:e3:
                    43:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:47:FD:C6:63:B7:FA:98:05:18:FA:CB:20:3A:EB:CF:24:C6:0F:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/0747FDC663B7FA980518FACB203AEBCF24C60F29.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.32.0/21
                IPv6:
                  2804:adc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52927

    Signature Algorithm: sha256WithRSAEncryption
         6d:1d:2c:99:b7:12:c8:c7:55:62:ec:0b:0c:32:d1:59:62:0e:
         97:78:83:fd:85:5f:44:63:e0:e9:c2:a7:9d:ee:d1:18:ef:94:
         9d:1b:cd:80:28:cd:ce:a8:45:ea:88:76:ef:a9:6a:27:73:eb:
         68:06:69:86:9c:d1:8a:fd:a5:e2:29:bd:50:88:f4:10:31:b2:
         78:12:58:6a:8e:ab:a2:d2:bc:d8:8c:47:08:f6:ef:92:de:3a:
         3a:f5:e5:bf:40:f5:60:ba:60:b9:ce:59:59:d7:44:b0:80:e6:
         7a:ec:26:86:2e:a7:5d:87:29:9c:af:4b:29:3a:2f:dc:fd:c4:
         56:70:db:0a:17:25:ad:d4:3e:ae:59:74:93:ff:ef:ef:71:62:
         b1:b0:36:c0:de:41:fa:d9:06:44:78:4d:12:ef:1d:42:89:59:
         29:0b:cd:c5:3f:3a:2f:24:3a:91:14:bf:a2:63:6a:23:c7:9b:
         4f:53:01:3c:6d:37:b6:80:30:f7:fe:7d:8d:50:f8:63:b5:fa:
         91:a4:b9:02:33:eb:80:f9:dc:ba:92:fe:ff:e1:91:99:c3:25:
         6a:fe:c7:98:e2:8e:f3:8b:17:49:19:b4:2a:1e:d0:52:17:c4:
         cf:0b:fa:17:3f:b1:53:26:f2:3e:68:2f:5b:26:cd:44:6b:c7:
         7a:df:1a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 15:22:43 2025 by rpki-client