Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/523B80F5791011FFECF224DC0B730E6133E79FAB.cer
File:                     523B80F5791011FFECF224DC0B730E6133E79FAB.cer (raw, json)
Hash identifier:          iQ65pY3COu/NAyw3ndzlUMHB3qG8yUJ3xQ16IViraC8=
Subject key identifier:   52:3B:80:F5:79:10:11:FF:EC:F2:24:DC:0B:73:0E:61:33:E7:9F:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       370EBA9B92B17F5564DB9A222E3C0A94108B1FA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/523B80F5791011FFECF224DC0B730E6133E79FAB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Feb 2024 21:33:28 +0000
Certificate not after:    Sat 08 Feb 2025 21:38:28 +0000
Subordinate resources:    AS: 268596
                          IP: 45.164.40.0/22
                          IP: 2804:53a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0e:ba:9b:92:b1:7f:55:64:db:9a:22:2e:3c:0a:94:10:8b:1f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 10 21:33:28 2024 GMT
            Not After : Feb  8 21:38:28 2025 GMT
        Subject: CN=523B80F5791011FFECF224DC0B730E6133E79FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:78:1c:66:31:6d:7c:b5:af:46:95:0e:34:
                    3b:a9:23:f2:0f:21:8a:11:b0:74:64:b7:05:58:26:
                    78:dc:8a:c7:6b:a5:45:a9:e5:80:fd:e6:b2:61:b9:
                    c1:e4:84:15:8f:5f:1d:c1:06:f3:ad:38:31:3c:5f:
                    58:2a:4d:b1:7b:e9:62:2e:b9:e8:a5:bb:85:b6:55:
                    1d:fc:b2:6f:ee:65:ee:11:d8:4a:33:ef:36:a8:82:
                    37:5f:ba:22:91:90:c5:5c:42:d7:38:69:ca:ef:f4:
                    c5:04:93:9a:d3:1d:28:18:5d:54:64:d3:ba:0c:26:
                    07:ce:5f:12:ee:8e:fe:43:e7:75:af:c4:50:94:80:
                    de:f3:96:15:b7:b1:25:45:7d:f0:ea:37:b1:50:0f:
                    c3:f4:c6:20:37:42:df:50:ae:f0:82:dd:e2:f2:26:
                    7a:a1:8d:ef:2e:73:24:84:ea:b2:93:1b:79:46:4c:
                    95:a2:22:d2:18:6a:55:c3:5c:d7:29:7d:92:02:b5:
                    24:08:3e:ad:a2:68:ea:5c:2f:e5:81:47:ce:53:36:
                    c7:82:58:50:df:0e:c7:d0:ff:d6:40:60:ae:1a:9d:
                    17:d4:58:bb:d9:a3:be:b7:67:4b:e2:39:82:95:91:
                    11:2c:66:bc:34:86:20:d4:75:1f:d3:f5:b3:f9:55:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:3B:80:F5:79:10:11:FF:EC:F2:24:DC:0B:73:0E:61:33:E7:9F:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/523B80F5791011FFECF224DC0B730E6133E79FAB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.40.0/22
                IPv6:
                  2804:53a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268596

    Signature Algorithm: sha256WithRSAEncryption
         a2:99:3e:68:82:55:ae:5c:ee:f4:89:d2:e6:a2:72:04:fb:74:
         32:f1:b5:2b:e9:f7:11:77:ba:d4:b4:f5:80:1f:14:6c:a9:00:
         d0:b5:a6:74:da:d3:8e:dd:1a:ea:53:27:40:d6:a0:fb:6d:9a:
         a0:14:91:02:ce:d8:5b:b1:8d:98:5b:de:b5:04:7b:28:07:c5:
         dd:e3:e2:15:17:d0:89:bd:d2:8c:92:99:9c:c9:b4:3a:3b:be:
         22:ff:27:74:91:d1:39:e1:72:8f:d0:d5:1c:21:10:3d:0e:3b:
         f4:8a:ab:4b:1a:fe:e5:2a:63:dd:be:9a:55:a2:24:79:f9:89:
         12:dd:6d:00:87:3c:e7:08:55:ec:37:8d:eb:b3:6f:82:19:b2:
         78:6a:b0:82:84:e1:7d:d6:c0:0a:f4:d6:38:75:3e:46:04:3d:
         33:34:97:b9:c7:fd:6b:ab:95:b8:de:3f:5f:2d:d9:31:4f:03:
         d8:15:71:a7:18:e3:20:e1:be:11:20:db:96:cb:f5:8b:bb:a8:
         e9:9f:ed:4d:73:b4:53:fe:47:d0:d0:d7:1b:32:69:83:bf:d2:
         d3:0d:33:d1:6c:40:25:b5:ba:8d:4b:b4:d1:67:96:07:db:b3:
         6b:83:29:62:a7:94:18:45:c6:b5:a3:c7:9d:23:94:5e:24:20:
         f9:4e:e1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:31:13 2025 by rpki-client