Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D.cer
File:                     D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D.cer (raw, json)
Hash identifier:          hksj0GNaQv5RUE6Ur7LQApQX5XIkMTrXWEiDlujuENs=
Subject key identifier:   D1:09:3B:85:DB:CF:9D:C2:34:1A:82:B6:E6:D2:BA:0D:0C:B0:F9:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       03DAF0C774D59AFFD2F94DA31E3994DFEE4608FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/0/D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Nov 2022 17:47:51 +0000
Certificate not after:    Tue 31 Oct 2023 17:52:51 +0000
Subordinate resources:    AS: 52639
                          IP: 168.195.112.0/22
                          IP: 179.96.176.0/21
                          IP: 2804:d90::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:da:f0:c7:74:d5:9a:ff:d2:f9:4d:a3:1e:39:94:df:ee:46:08:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  1 17:47:51 2022 GMT
            Not After : Oct 31 17:52:51 2023 GMT
        Subject: CN=D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2d:6f:30:a5:68:81:85:e2:21:96:91:f0:be:
                    74:fa:80:93:06:21:07:d5:ef:cc:eb:9b:09:65:54:
                    69:bb:2c:38:00:32:95:f4:7e:63:3b:17:c7:38:de:
                    62:c3:99:53:65:3d:da:dd:ae:07:49:cb:d0:6d:ba:
                    73:17:90:10:48:94:2b:ec:8a:9d:3c:b8:8f:78:bc:
                    92:68:9a:29:08:fb:ba:6f:01:ee:2d:ce:37:2c:e3:
                    07:e3:a9:87:89:58:b7:c7:47:49:a5:3c:85:45:b6:
                    d0:4b:b4:b9:1d:74:a5:a0:e4:ab:cd:85:0d:bc:07:
                    72:94:fc:9c:9a:80:13:c5:9c:91:48:34:cd:ed:b8:
                    6b:6e:f3:48:38:d3:8a:08:91:e0:17:45:f0:8c:3b:
                    cd:11:7e:c2:03:fa:25:48:8e:b5:bd:e8:50:91:82:
                    a2:c3:e2:62:66:7b:43:47:26:b8:c5:8f:1f:6e:76:
                    7f:bc:dc:b2:66:5f:87:f1:8e:a8:7d:dd:d7:f5:ed:
                    cc:48:ea:ab:56:54:5c:e8:ef:ff:bc:33:63:fd:9e:
                    7c:2f:bb:12:09:76:ec:dd:20:6f:66:e6:18:f5:a3:
                    cf:44:62:de:2a:5c:85:d0:15:40:73:f2:fe:de:60:
                    08:49:46:69:5a:4a:0e:d3:6b:b3:32:5f:82:9c:ca:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:09:3B:85:DB:CF:9D:C2:34:1A:82:B6:E6:D2:BA:0D:0C:B0:F9:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/0/D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.112.0/22
                  179.96.176.0/21
                IPv6:
                  2804:d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52639

    Signature Algorithm: sha256WithRSAEncryption
         33:92:66:6e:6d:0c:62:bd:57:07:fa:0d:9f:bf:44:eb:2d:ea:
         4c:43:1a:04:a0:c3:a0:dc:2c:eb:7b:ab:3a:aa:ea:45:cd:89:
         db:f3:e5:51:e7:5a:76:b4:6a:5a:da:3c:21:75:bc:45:1f:ca:
         0a:76:3b:9b:8d:26:e2:d0:3e:45:4a:94:2b:9d:7a:c0:00:47:
         d3:58:6d:aa:4d:7d:b2:d3:84:01:f3:19:c0:f7:d6:bc:71:6b:
         9e:48:74:e6:b2:1d:a9:7f:30:d8:70:16:93:eb:47:f4:70:5f:
         35:8d:e7:83:53:4e:4b:24:7e:58:90:c6:18:95:2e:67:06:8b:
         9d:19:1d:76:5f:1e:38:9f:04:f0:49:8d:a1:12:36:48:3c:a8:
         26:5b:a8:b6:26:c1:cf:51:10:4b:87:a9:af:52:4a:98:5f:0b:
         2f:d7:8f:4a:e3:bc:27:15:9f:ef:dd:9b:82:09:f2:e1:85:92:
         a0:3f:84:3d:45:58:1e:9a:2c:bc:4a:4e:49:f7:9d:e5:a0:b0:
         da:2e:78:30:03:fc:2b:3c:bd:17:54:67:b5:41:0c:cc:65:13:
         c5:c7:62:d8:2f:03:cd:de:e2:4e:88:57:18:12:0b:e3:bd:4d:
         b5:dd:67:7c:7e:4b:92:bf:61:d7:52:08:5b:b4:5f:a5:71:a5:
         41:96:d2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:59:57 2025 by rpki-client