Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1D3352C56039972326277AA2B613DA4D5E150421.cer
File:                     1D3352C56039972326277AA2B613DA4D5E150421.cer (raw, json)
Hash identifier:          dCVI8fd0i9Rbugx1lCh1MNQQ2iNs5kdUSp4nRIa0jM4=
Subject key identifier:   1D:33:52:C5:60:39:97:23:26:27:7A:A2:B6:13:DA:4D:5E:15:04:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       69F0E32DFDE7AA6A41F40553D0CCA5834641EB23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/1D3352C56039972326277AA2B613DA4D5E150421.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Nov 2023 12:38:18 +0000
Certificate not after:    Mon 25 Nov 2024 12:43:18 +0000
Subordinate resources:    AS: 271180
                          IP: 200.125.129.0/24
                          IP: 2804:7778::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f0:e3:2d:fd:e7:aa:6a:41:f4:05:53:d0:cc:a5:83:46:41:eb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 27 12:38:18 2023 GMT
            Not After : Nov 25 12:43:18 2024 GMT
        Subject: CN=1D3352C56039972326277AA2B613DA4D5E150421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:d7:52:c5:a4:dd:da:79:4f:0b:6b:74:bb:
                    27:3b:e6:3f:be:25:a9:5b:47:8c:31:1a:43:d1:6c:
                    83:e5:9c:e2:72:01:8d:0f:87:0b:c3:d5:dd:fc:12:
                    e6:2e:c9:75:87:51:91:b4:2a:a2:4a:7b:e3:f8:78:
                    bf:6b:a4:b6:92:2b:da:0a:a7:58:c6:8a:c8:c0:eb:
                    81:6d:b4:31:ac:28:b5:93:40:c9:65:3d:a5:22:7e:
                    71:bd:7c:ee:fc:b0:b0:51:60:15:c3:bb:43:d4:3e:
                    0d:47:b3:d0:73:95:5d:b5:1c:04:f0:b3:cb:7b:ef:
                    24:a6:58:fd:9c:d6:f6:ca:b6:49:23:6c:d6:cf:6b:
                    2b:2d:e4:54:d5:35:49:45:4f:e7:7d:39:49:de:b1:
                    1f:c9:8e:0c:41:2c:53:fc:57:6a:4a:91:ce:f5:36:
                    f4:30:5e:9c:ba:a0:82:c8:1a:0b:b8:92:06:21:4b:
                    c8:37:6e:f0:fe:7b:c9:28:64:16:43:d3:8b:3a:35:
                    5a:ca:c4:b9:1d:3d:6c:73:23:3f:08:d3:de:25:7e:
                    47:71:bf:9b:d3:2d:57:b8:d4:06:67:ad:37:5f:16:
                    7c:b4:8b:5c:d3:09:32:0c:59:8f:02:ed:d9:76:c0:
                    68:e0:35:84:e3:0d:66:1e:71:83:33:3e:0b:98:b3:
                    9e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:33:52:C5:60:39:97:23:26:27:7A:A2:B6:13:DA:4D:5E:15:04:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/1D3352C56039972326277AA2B613DA4D5E150421.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.129.0/24
                IPv6:
                  2804:7778::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271180

    Signature Algorithm: sha256WithRSAEncryption
         a0:db:64:de:c0:0b:ce:42:21:89:7f:60:ac:3d:e6:c4:04:13:
         71:f6:b9:2b:59:62:83:80:9b:b6:2e:13:c7:53:9c:b8:a2:93:
         e0:3e:cc:62:e9:d7:b6:3c:47:49:08:11:45:f2:bc:5f:72:a1:
         9f:4c:f8:56:d0:37:bc:b3:3f:4a:89:a2:0c:e0:a5:10:52:dd:
         13:cf:a2:1e:69:95:0e:fc:c7:61:1c:17:0b:1a:c3:d2:1d:93:
         3f:28:48:4c:7c:9d:e5:72:37:b4:f3:d3:9b:d2:27:c2:9f:fa:
         63:e7:8a:4f:9f:f9:b1:76:80:e9:a3:7b:13:1f:e6:c5:39:af:
         49:da:09:47:0b:41:d2:ed:e3:46:54:f0:27:8b:1c:b5:17:10:
         df:f6:ac:04:7d:88:b7:0c:e3:2c:c7:72:79:cd:09:1a:25:3d:
         08:2d:2c:02:f4:6d:b6:ca:9f:5f:a1:76:d4:a5:21:76:2f:eb:
         5b:8a:a7:db:55:9f:f6:7f:4f:93:16:2c:9d:a0:40:ce:37:3e:
         e9:36:cf:a5:57:65:f2:77:14:25:e6:8a:5a:90:2c:8c:6d:1e:
         fa:bd:4a:55:85:e0:d5:df:e8:9c:30:67:40:e2:6c:f4:f0:16:
         6b:19:d4:56:0a:c4:d3:38:46:23:3c:0c:6e:66:e9:52:ea:57:
         21:2d:af:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:58:06 2025 by rpki-client