Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/30403135DF5A9195225306C01729841538F10482.cer
File:                     30403135DF5A9195225306C01729841538F10482.cer (raw, json)
Hash identifier:          TWD9VHMmY8r5acJ2I+xT5da2ddh02kb13hWOuPeLLz0=
Subject key identifier:   30:40:31:35:DF:5A:91:95:22:53:06:C0:17:29:84:15:38:F1:04:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       78CF62B0DBD2F002C3F3B4E66C575F1E3AFE5A93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/30403135DF5A9195225306C01729841538F10482.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 19:01:41 +0000
Certificate not after:    Tue 21 May 2024 19:06:41 +0000
Subordinate resources:    AS: 264297
                          IP: 138.121.136.0/22
                          IP: 168.197.220.0/22
                          IP: 2804:25b4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:cf:62:b0:db:d2:f0:02:c3:f3:b4:e6:6c:57:5f:1e:3a:fe:5a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 19:01:41 2023 GMT
            Not After : May 21 19:06:41 2024 GMT
        Subject: CN=30403135DF5A9195225306C01729841538F10482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:d2:bb:1a:ed:82:8a:bc:47:91:b4:39:2b:
                    9a:2c:f6:ca:9d:85:8f:c4:7d:82:71:80:fa:2a:c0:
                    97:13:12:28:83:2c:6a:8f:ef:e3:76:aa:be:05:72:
                    05:91:51:b6:9e:57:64:fe:63:ab:be:36:b7:97:4e:
                    95:61:41:27:4a:9f:ea:b1:e1:6e:bd:07:4f:21:f3:
                    7e:fd:92:4e:14:f8:9d:7b:bc:9f:ae:6a:4e:02:4a:
                    ef:5e:03:cb:58:77:1f:0b:e9:eb:6b:6f:22:0d:ae:
                    43:6b:c0:37:35:62:c5:ef:5e:17:3d:62:5b:2a:27:
                    df:4c:6c:e4:3c:55:1f:4e:1c:de:0d:e0:ad:25:ce:
                    e6:c2:02:c5:1a:4c:fa:64:6d:2c:78:bc:35:de:6c:
                    95:cc:54:78:0d:57:4d:95:24:f0:f2:b0:4e:19:ad:
                    c2:9f:d2:50:89:ab:e2:45:36:ae:e9:63:60:85:23:
                    00:24:26:1f:92:08:94:30:eb:94:9d:92:b1:76:07:
                    83:0f:21:99:52:33:75:81:1e:f3:5f:ff:44:a0:64:
                    4a:21:99:7a:d0:3d:d6:97:c4:a4:00:ef:ff:eb:4c:
                    95:e8:47:7c:db:2a:68:70:a2:28:69:b8:39:93:89:
                    cc:9a:0e:ed:00:26:7e:89:45:8b:f0:43:4d:02:03:
                    e2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:40:31:35:DF:5A:91:95:22:53:06:C0:17:29:84:15:38:F1:04:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/30403135DF5A9195225306C01729841538F10482.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.136.0/22
                  168.197.220.0/22
                IPv6:
                  2804:25b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264297

    Signature Algorithm: sha256WithRSAEncryption
         46:77:e7:10:55:da:0f:a1:40:6f:2e:0c:bf:b7:44:9e:79:c3:
         f8:8b:83:63:b4:a1:0c:06:6f:ef:30:e1:b5:66:3f:85:9a:1e:
         5c:e2:7d:8d:e6:9d:3b:f4:bc:1f:d2:3a:6c:be:0e:3d:bd:c0:
         56:a7:b6:f9:b9:4a:2d:38:6f:a3:ec:14:28:86:50:e1:55:cc:
         34:94:c2:14:ab:fa:b0:27:1b:c3:bd:56:5c:25:c9:8e:ff:fd:
         76:5d:5b:77:e2:5d:54:0d:5d:08:6b:8c:d3:37:c5:8e:9f:14:
         ca:59:06:b8:d9:41:e2:00:82:80:b5:41:d5:eb:3d:24:44:50:
         50:27:0a:a1:d8:50:7f:dd:32:3d:aa:ac:ea:e5:83:53:2f:80:
         d2:95:cf:ab:63:66:cd:c0:89:a1:69:fd:73:86:eb:cd:e5:74:
         cd:43:f5:2a:b3:a7:a1:b8:06:52:e6:78:36:d0:f3:5e:cc:00:
         77:a8:fe:eb:bf:b6:72:c0:ee:d4:c8:6c:86:96:cc:84:0e:43:
         5b:9e:72:f2:9c:9e:fc:d1:36:d9:d3:ea:ad:3c:85:78:6f:b7:
         a5:5e:a8:33:60:c5:9a:3a:d6:f9:97:0e:86:ea:ca:3a:4c:bf:
         94:90:9b:59:d9:9b:4d:32:be:e2:41:d4:5f:c1:f0:3f:83:58:
         d4:ee:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:28:46 2025 by rpki-client