Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8D4E51056B4E895071086E8CDA4D70221565AF04.cer
File:                     8D4E51056B4E895071086E8CDA4D70221565AF04.cer (raw, json)
Hash identifier:          mZfcSmraNf2q3u3M7GzWLEOZcV8gw/w/jKiOyuHaO08=
Subject key identifier:   8D:4E:51:05:6B:4E:89:50:71:08:6E:8C:DA:4D:70:22:15:65:AF:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E43C4E332FB32EE8A15EBC59EA74991C46D9C5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/8D4E51056B4E895071086E8CDA4D70221565AF04.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 14:56:19 +0000
Certificate not after:    Thu 18 Jul 2024 15:01:19 +0000
Subordinate resources:    AS: 265300
                          IP: 168.121.68.0/22
                          IP: 200.106.132.0/22
                          IP: 200.125.176.0/22
                          IP: 2804:2dbc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:43:c4:e3:32:fb:32:ee:8a:15:eb:c5:9e:a7:49:91:c4:6d:9c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 14:56:19 2023 GMT
            Not After : Jul 18 15:01:19 2024 GMT
        Subject: CN=8D4E51056B4E895071086E8CDA4D70221565AF04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3e:d8:8d:23:da:d4:81:a6:a6:a2:a1:78:85:
                    cd:f8:26:b2:4e:ba:46:37:70:f5:30:c2:34:80:62:
                    8f:d7:6b:f5:81:5d:e7:a5:72:d7:5b:6d:5a:cb:dd:
                    65:6c:21:21:ad:16:f1:ae:60:ce:7d:be:6f:00:73:
                    4c:30:2a:28:e4:ef:66:a6:1b:95:58:02:38:1e:5a:
                    7f:be:91:94:45:a8:0b:53:be:7a:6d:88:04:a2:82:
                    53:97:4b:f7:ab:e1:1c:e4:4f:f7:44:44:84:c8:66:
                    6d:c0:39:b5:64:3f:c4:dc:b4:8a:d5:10:1a:5e:20:
                    4d:44:a7:34:f7:6c:69:24:6f:3f:7c:83:4f:07:d7:
                    8c:ce:2f:4c:04:2c:3e:65:28:7e:af:eb:dd:24:87:
                    41:cc:ca:d9:18:8e:e4:d7:00:32:20:4b:57:ca:dc:
                    97:20:7a:7a:ed:31:ae:de:25:66:bd:40:4b:6c:b3:
                    70:d2:5c:65:54:bf:d4:ed:02:5e:30:f4:b2:70:0c:
                    0a:29:f8:40:4f:2c:f9:20:31:21:f6:05:92:e4:81:
                    c2:f9:63:15:f3:da:cc:e1:6f:37:9d:07:56:1a:dd:
                    95:58:45:a4:f9:3d:a3:77:85:95:80:cf:66:76:ed:
                    73:ac:05:64:18:2f:b7:04:b9:da:69:ac:d2:c3:64:
                    e2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:4E:51:05:6B:4E:89:50:71:08:6E:8C:DA:4D:70:22:15:65:AF:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/8D4E51056B4E895071086E8CDA4D70221565AF04.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22
                  200.106.132.0/22
                  200.125.176.0/22
                IPv6:
                  2804:2dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265300

    Signature Algorithm: sha256WithRSAEncryption
         4c:32:ed:6e:e7:40:c8:ca:29:62:0b:de:d1:83:d3:24:68:47:
         45:94:12:5b:47:a7:33:70:c5:46:d9:cb:2a:e5:e4:8d:b0:20:
         6d:07:b5:a3:0e:1b:fa:59:d2:9c:49:2b:6f:b0:24:17:95:2e:
         4f:80:a0:f4:73:15:08:9b:b5:77:a1:69:75:f3:31:fc:03:27:
         4a:3c:60:26:4a:bd:b2:7d:e9:09:fe:3b:23:5f:a6:f0:83:5d:
         39:2e:bb:49:6b:80:53:a6:cb:3e:18:16:be:40:63:37:3d:59:
         47:08:d4:91:15:b5:f2:c3:f3:27:68:28:5b:48:f3:1e:a8:f1:
         fd:81:41:d3:65:68:29:18:42:0d:7d:1a:2a:84:8a:3c:ec:eb:
         57:62:a4:94:e2:b4:91:a3:98:5e:a3:a2:be:cb:bf:94:8f:8d:
         7f:24:3e:f7:07:9a:13:6b:15:44:aa:50:f4:ab:3f:ee:cd:1c:
         b3:81:0c:61:e6:e2:8c:19:f9:b0:4e:97:2b:52:1c:39:77:4a:
         26:47:34:49:22:47:39:8b:83:d6:84:4f:06:c2:03:11:50:8d:
         e3:5c:84:39:45:b3:9f:f3:3d:8c:5b:38:d6:85:e5:53:0f:1c:
         25:0a:f8:30:8e:94:59:f6:cc:78:02:bb:4c:d1:67:b9:8c:10:
         24:52:14:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:39:05 2025 by rpki-client