Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/33915C406007FF168D8D1C4BAAB341E4A227466C.cer
File:                     33915C406007FF168D8D1C4BAAB341E4A227466C.cer (raw, json)
Hash identifier:          sJIDO+OhWS8wwywXAiq3/Z1y+NlaB5KgcU41L8JjYDU=
Subject key identifier:   33:91:5C:40:60:07:FF:16:8D:8D:1C:4B:AA:B3:41:E4:A2:27:46:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       422C03AA56662B8FDAA23AA3597D367076104B70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/33915C406007FF168D8D1C4BAAB341E4A227466C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Sep 2023 20:35:43 +0000
Certificate not after:    Wed 11 Sep 2024 20:40:43 +0000
Subordinate resources:    AS: 270382
                          IP: 190.111.128.0/22
                          IP: 2804:6b28::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2c:03:aa:56:66:2b:8f:da:a2:3a:a3:59:7d:36:70:76:10:4b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 13 20:35:43 2023 GMT
            Not After : Sep 11 20:40:43 2024 GMT
        Subject: CN=33915C406007FF168D8D1C4BAAB341E4A227466C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:44:5c:a0:e4:c9:e7:6e:68:3c:ce:c4:f2:
                    fa:20:c7:c2:87:8f:5a:ae:15:a8:9b:68:7c:72:8d:
                    8c:c7:51:ce:97:6d:8a:75:a2:e0:52:6a:27:15:1c:
                    c4:b9:49:b4:d0:a5:b7:fa:35:bc:41:0b:d4:11:88:
                    98:23:e3:d9:c7:33:38:d7:72:e9:d4:c3:75:3a:16:
                    b1:59:97:9b:fa:b6:1e:d3:8d:89:de:03:51:d3:16:
                    b3:ff:55:f0:52:4b:e4:c1:48:bb:fd:0c:a9:f2:2b:
                    67:ab:57:4d:73:d4:a0:fc:29:de:91:6d:d9:ae:ce:
                    d4:03:27:05:bc:ed:4d:56:cd:77:aa:4a:b5:74:23:
                    64:f8:21:06:e1:b2:86:83:e5:60:52:ab:e6:10:a2:
                    e0:0a:ca:3e:40:35:48:ba:4b:08:58:74:b8:bf:87:
                    2e:1e:05:4e:d8:d0:a5:81:a8:5c:09:7b:3f:1a:96:
                    62:fe:21:57:a1:01:fe:f3:91:7e:19:e9:ab:30:d1:
                    81:ce:81:dc:e5:c1:3a:d2:9d:70:6b:cf:13:88:51:
                    c1:a5:6a:67:e3:be:77:b2:70:11:5b:dc:18:57:01:
                    df:ed:84:22:36:e8:57:f1:d3:07:57:09:4b:01:e7:
                    b1:9a:d2:4d:1f:4e:b5:fa:20:fb:9e:92:56:8d:1f:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:91:5C:40:60:07:FF:16:8D:8D:1C:4B:AA:B3:41:E4:A2:27:46:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/33915C406007FF168D8D1C4BAAB341E4A227466C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.128.0/22
                IPv6:
                  2804:6b28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270382

    Signature Algorithm: sha256WithRSAEncryption
         91:fa:9a:8f:88:4a:e5:81:8b:4c:fe:b9:06:84:17:6b:85:20:
         b5:ab:31:0a:8e:42:d9:9b:4f:93:7d:15:f7:3e:6d:4d:ec:cd:
         d4:cb:65:38:2f:1a:09:bb:7f:ab:43:b2:57:ca:35:14:11:9c:
         02:0e:f6:0b:ee:29:4d:38:58:f3:18:f5:07:f3:fe:6f:22:ec:
         27:b6:b6:13:56:eb:ff:92:d1:4b:0a:85:6b:4b:fc:d0:08:88:
         8d:c5:00:98:fb:b7:2d:a7:e2:ab:22:01:57:22:83:b5:1e:29:
         80:ee:7f:72:4d:f2:1d:6c:a6:6c:0e:d0:b6:57:1c:02:3b:7e:
         8b:4e:1e:bd:f3:1a:b6:96:8b:1c:90:b5:8d:e8:17:b9:e3:0e:
         2a:86:e3:4e:b7:35:e0:44:9f:02:7e:5c:30:6e:85:1c:66:85:
         19:98:8f:12:3b:c3:ed:48:5c:62:bd:6d:c5:f2:dc:09:3a:d1:
         2b:06:b5:9a:fc:de:41:0e:f5:72:b8:6b:9d:a9:43:ba:11:10:
         89:5c:6a:49:58:bf:e1:71:c1:0b:00:c9:a9:75:c5:af:ae:23:
         b7:8d:f1:d9:98:4e:98:39:23:f0:b0:84:4d:cb:10:d9:be:f1:
         72:b2:99:40:55:f9:6f:ca:7c:e9:35:cc:42:91:82:8a:e7:54:
         d6:3c:e8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 15:28:59 2025 by rpki-client