Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CD6D6A5A94498EE19390A0057BB718874F742770.cer
File:                     CD6D6A5A94498EE19390A0057BB718874F742770.cer (raw, json)
Hash identifier:          gjYbcZOI3GdhZwc1wu6C5LEiMmBoqsN+BK54FE+Ssx8=
Subject key identifier:   CD:6D:6A:5A:94:49:8E:E1:93:90:A0:05:7B:B7:18:87:4F:74:27:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2AA026F4BA49632990DD4E5B7C00B6E2827DF472
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/CD6D6A5A94498EE19390A0057BB718874F742770.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Mar 2023 12:00:56 +0000
Certificate not after:    Thu 29 Feb 2024 12:05:56 +0000
Subordinate resources:    AS: 262530
                          IP: 45.174.164.0/22
                          IP: 170.231.196.0/22
                          IP: 177.67.72.0/21
                          IP: 200.33.88.0/21
                          IP: 2804:9f4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a0:26:f4:ba:49:63:29:90:dd:4e:5b:7c:00:b6:e2:82:7d:f4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  2 12:00:56 2023 GMT
            Not After : Feb 29 12:05:56 2024 GMT
        Subject: CN=CD6D6A5A94498EE19390A0057BB718874F742770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:4d:b4:8f:6c:50:cd:a9:41:89:96:99:c0:
                    7b:d4:69:55:33:2a:0e:a8:c9:55:b9:6d:3a:f8:ec:
                    65:ff:93:c3:a2:91:92:34:35:d2:ef:a6:3c:f7:e8:
                    b2:c8:59:66:d9:a5:de:73:a9:e3:30:fd:34:5e:5d:
                    61:2a:55:d1:51:c6:92:d7:e9:e8:36:1b:af:3d:8b:
                    21:a0:73:dd:b3:cd:51:38:45:f5:e1:a5:61:2d:2b:
                    3c:d5:7d:e8:70:b3:20:a3:4f:10:23:05:00:28:9a:
                    68:50:c1:a7:35:72:65:29:3f:a6:94:f6:8d:7a:9d:
                    c3:23:f6:b6:9b:c1:e7:49:32:e1:bd:43:34:cb:d9:
                    42:99:98:37:a9:46:58:96:e7:ab:de:63:cc:ba:73:
                    e3:8b:98:22:40:34:9d:f7:27:f9:01:ac:c7:61:6a:
                    b8:c1:d8:03:0c:c2:1a:cd:86:3f:29:d1:78:51:e9:
                    66:f1:08:db:32:f2:70:08:4f:24:95:1f:03:7f:47:
                    91:93:46:48:0f:3e:24:48:0f:ef:14:8e:2d:61:c4:
                    4d:cb:9a:20:0b:49:66:60:84:b3:8c:c1:eb:35:65:
                    4a:10:48:9c:34:d2:c5:c2:44:6a:ae:b5:35:31:b5:
                    f4:48:27:5e:5e:73:40:3d:53:1d:58:4d:83:45:54:
                    c6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:6D:6A:5A:94:49:8E:E1:93:90:A0:05:7B:B7:18:87:4F:74:27:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/CD6D6A5A94498EE19390A0057BB718874F742770.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.164.0/22
                  170.231.196.0/22
                  177.67.72.0/21
                  200.33.88.0/21
                IPv6:
                  2804:9f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262530

    Signature Algorithm: sha256WithRSAEncryption
         4d:d9:a3:75:52:99:a6:37:79:c9:09:b0:23:c5:ff:c9:71:e6:
         8f:ca:c9:e7:59:ff:81:d1:08:2b:ec:85:18:88:06:08:39:8d:
         16:27:69:73:38:80:00:40:45:98:f0:4a:d3:6f:d1:f5:8b:67:
         21:ad:31:6a:01:a9:6e:21:64:50:32:4b:9a:36:d3:f5:bc:ae:
         db:19:ec:36:94:e4:58:c9:e1:7b:a1:13:a5:6b:b1:1c:dd:5c:
         fe:f8:7e:51:bf:c0:c3:e1:98:25:ee:35:04:32:da:40:ae:54:
         ed:92:15:90:a0:ca:1d:37:34:db:ea:09:46:82:e4:e0:96:24:
         db:cf:fb:20:61:0a:10:7d:6d:11:18:65:6e:fe:d9:fd:b5:56:
         cb:55:dd:90:f9:1e:14:29:89:0f:a1:bd:6b:53:d7:0d:2f:19:
         54:32:9a:d3:92:04:88:ce:c3:48:dc:69:44:70:b4:4b:0b:7c:
         e9:12:c9:0f:f5:54:9f:11:bf:39:1b:77:51:40:9e:8e:2d:06:
         e1:33:9e:ea:08:61:a1:4b:f9:4f:9b:fc:56:23:e8:49:b3:24:
         86:b3:d7:80:a1:70:7b:26:2f:83:5e:2e:15:5d:02:ac:19:17:
         0b:5e:39:5d:f9:5e:02:7e:81:61:f0:77:59:a3:95:69:b3:9d:
         94:3b:3a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:25:01 2025 by rpki-client