Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9A21CE55B65292D277C007D94213E9C08F546BA0.cer
File:                     9A21CE55B65292D277C007D94213E9C08F546BA0.cer (raw, json)
Hash identifier:          rvk3KHl9lH8nJkFakhqqwrGI/fTAq6hOzXAoxldG65I=
Subject key identifier:   9A:21:CE:55:B6:52:92:D2:77:C0:07:D9:42:13:E9:C0:8F:54:6B:A0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       596FDAFDD43DA11864DDCC11AFF0967059B707D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/1/9A21CE55B65292D277C007D94213E9C08F546BA0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Aug 2022 18:25:15 +0000
Certificate not after:    Wed 16 Aug 2023 18:30:15 +0000
Subordinate resources:    AS: 28292
                          IP: 177.54.48.0/20
                          IP: 179.127.80.0/20
                          IP: 189.28.176.0/20
                          IP: 189.124.112.0/20
                          IP: 2001:12a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6f:da:fd:d4:3d:a1:18:64:dd:cc:11:af:f0:96:70:59:b7:07:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 17 18:25:15 2022 GMT
            Not After : Aug 16 18:30:15 2023 GMT
        Subject: CN=9A21CE55B65292D277C007D94213E9C08F546BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:06:7a:63:0c:e2:65:ab:84:a7:be:80:87:30:
                    4c:11:9e:9f:11:93:fd:3c:30:9d:52:21:d5:44:e2:
                    1b:fa:f3:71:87:6d:8c:93:c3:a6:7e:a0:7f:f2:2e:
                    9f:b9:42:87:1b:54:81:07:6a:77:e9:2a:93:8b:6b:
                    d3:1b:01:20:33:ef:3d:d0:a4:68:8e:85:58:66:26:
                    50:93:fa:68:48:89:ee:ea:29:5a:02:33:13:75:4e:
                    55:2c:b0:6c:13:23:c6:3d:7f:07:c4:6c:ea:53:14:
                    cf:21:c8:b1:81:84:ac:0b:de:42:32:b0:8a:87:c6:
                    58:4e:c2:df:93:eb:7f:ce:a3:b2:d2:b3:10:bd:07:
                    ea:1c:8e:8b:92:15:ae:31:82:9a:e7:5c:9e:b9:0b:
                    9d:7e:26:b5:d8:54:45:41:26:b1:8c:55:d8:b3:90:
                    60:41:46:cd:81:c2:37:61:87:c3:25:9c:73:b7:a6:
                    f7:70:b1:8f:4c:e3:3f:f0:68:62:2c:57:65:69:10:
                    68:b7:e5:b3:dd:16:29:b9:ad:d1:e1:a1:58:43:21:
                    70:5d:81:b6:d3:81:fa:10:d6:c5:b8:3f:af:1b:c6:
                    ee:66:7b:07:91:85:c1:47:19:b1:2e:fc:fe:46:a5:
                    06:79:de:75:11:91:f8:5d:ad:04:66:83:8d:e1:f0:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:21:CE:55:B6:52:92:D2:77:C0:07:D9:42:13:E9:C0:8F:54:6B:A0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/1/9A21CE55B65292D277C007D94213E9C08F546BA0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.48.0/20
                  179.127.80.0/20
                  189.28.176.0/20
                  189.124.112.0/20
                IPv6:
                  2001:12a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28292

    Signature Algorithm: sha256WithRSAEncryption
         a0:21:9b:c0:b1:3a:62:fb:f5:a6:1f:e9:c4:f1:1e:cc:e5:5d:
         37:8e:ff:ed:9c:88:e4:b0:8c:72:65:e8:4b:a7:52:12:4d:13:
         49:84:42:4c:3a:30:53:7f:8e:69:25:73:f9:fa:5e:ba:48:db:
         35:26:54:d7:63:1c:fe:b2:0d:71:2d:bc:fb:00:0a:06:c2:fb:
         ef:7d:d8:67:44:97:b0:d0:68:53:a2:d1:d3:71:5b:9c:fa:89:
         0a:b7:ab:bd:26:70:17:41:8c:de:67:7f:c2:a9:13:7e:78:12:
         da:b0:e5:0a:f6:e7:f0:81:99:35:bd:57:2e:3e:9f:a3:25:f0:
         34:43:75:4d:f3:41:c0:74:99:7a:2c:ba:fb:05:dd:9a:c6:61:
         8d:80:69:f9:98:6d:97:db:7e:4a:ae:e8:f6:20:1a:f2:2e:8c:
         10:8e:c1:ae:7f:a1:38:90:dc:72:e7:7f:ff:fe:cf:34:7e:3a:
         0a:5f:f5:95:a2:78:87:55:e7:a4:3c:c8:90:dc:e2:c2:f4:41:
         5d:85:29:82:96:20:9e:ae:f5:5d:7d:be:e8:4a:ed:38:30:51:
         af:3f:eb:2a:96:82:f0:8f:7b:44:c1:e5:ac:52:e6:09:fe:79:
         4c:48:cd:90:12:28:93:eb:73:26:31:34:19:29:58:0f:af:62:
         8a:d1:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 15:30:21 2025 by rpki-client