Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D30B5C80D5A1CBE4D5FE90B0449BC8A4689B6185.cer
File:                     D30B5C80D5A1CBE4D5FE90B0449BC8A4689B6185.cer (raw, json)
Hash identifier:          RGlT+lDtMPmoWQm2ArJyCpqXVhWcbzEM09A/R7mDg7Y=
Subject key identifier:   D3:0B:5C:80:D5:A1:CB:E4:D5:FE:90:B0:44:9B:C8:A4:68:9B:61:85
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       70FABBFF99F44D20D72C5A239D4D18BDC5134191
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/D30B5C80D5A1CBE4D5FE90B0449BC8A4689B6185.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Mar 2023 20:36:41 +0000
Certificate not after:    Thu 29 Feb 2024 20:41:41 +0000
Subordinate resources:    AS: 52674
                          IP: 131.161.40.0/22
                          IP: 168.227.236.0/22
                          IP: 177.67.88.0/22
                          IP: 2804:1d40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fa:bb:ff:99:f4:4d:20:d7:2c:5a:23:9d:4d:18:bd:c5:13:41:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  2 20:36:41 2023 GMT
            Not After : Feb 29 20:41:41 2024 GMT
        Subject: CN=D30B5C80D5A1CBE4D5FE90B0449BC8A4689B6185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:27:ee:ee:42:73:ab:37:02:2d:6a:ed:9d:
                    2e:87:4e:db:3f:dc:62:1f:2f:9b:70:8b:db:bb:88:
                    b4:d5:bf:6b:f0:03:6f:9e:f8:c4:24:71:4d:ff:b5:
                    db:4f:2e:4e:65:6d:fc:2b:d9:95:39:e2:48:9c:ea:
                    46:e2:d7:64:e4:dd:4f:5c:79:15:a2:2f:39:f0:99:
                    f8:07:8d:8b:d2:ff:e4:aa:a9:17:08:30:d3:a8:bb:
                    75:ae:cd:5d:8a:3d:40:28:79:49:51:b0:dd:e1:b2:
                    47:b2:03:da:b1:40:eb:79:ac:27:56:5f:19:c9:fb:
                    09:d9:1c:15:72:de:8f:02:a8:e4:ea:c8:98:90:f6:
                    96:a0:c4:80:04:42:b3:5f:6d:a5:d1:c5:50:ea:c1:
                    b9:d5:b0:84:a0:dc:8e:85:71:61:76:39:e7:ef:e3:
                    7a:de:f6:bc:25:0c:35:87:44:4b:9d:d7:a5:9b:ef:
                    0a:e8:39:0a:22:b2:ef:3d:9a:cb:0b:7a:7a:eb:68:
                    1d:59:df:d5:c1:01:09:16:f8:66:c7:d8:46:d9:82:
                    b5:9f:6b:41:18:cb:b2:7a:66:09:33:9d:c6:7c:da:
                    32:39:e9:4f:93:88:e7:f6:3b:f5:88:c2:19:6b:6f:
                    8f:eb:25:3d:12:c5:4a:26:af:79:16:19:27:39:9f:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:0B:5C:80:D5:A1:CB:E4:D5:FE:90:B0:44:9B:C8:A4:68:9B:61:85
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/D30B5C80D5A1CBE4D5FE90B0449BC8A4689B6185.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.40.0/22
                  168.227.236.0/22
                  177.67.88.0/22
                IPv6:
                  2804:1d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52674

    Signature Algorithm: sha256WithRSAEncryption
         b2:8f:af:0b:01:74:a8:bc:7a:d0:b9:8e:b8:98:9e:e1:07:76:
         ed:f4:3d:d6:cc:c2:a7:99:1a:a9:32:fc:31:61:fc:43:68:fa:
         b8:ff:07:6c:37:dd:4d:19:4e:b7:a8:e7:f2:f2:c9:4c:d0:6f:
         60:eb:89:9f:bd:18:f2:26:7d:88:16:1a:ce:89:70:b8:30:c8:
         07:a4:6e:b3:e9:29:51:88:ef:84:67:b5:de:ce:6c:93:40:db:
         6e:2d:ac:45:99:51:2c:72:1e:ab:1d:9a:9c:56:03:42:f0:df:
         65:6a:97:7e:18:b9:b7:2a:3f:d5:69:6d:0b:05:14:fd:3d:35:
         59:71:14:63:6b:91:63:9f:8b:40:76:92:7c:5d:73:09:41:fa:
         f2:c9:6e:80:af:10:25:e8:4c:bd:21:6c:ea:4a:2e:95:4e:e2:
         4b:90:e2:20:a4:54:c6:f4:81:98:de:c2:31:44:4c:69:ee:5f:
         fb:ec:cb:cc:72:4b:ce:ff:bd:70:19:c3:a8:1f:55:fd:66:90:
         8c:64:99:27:2d:91:d9:78:7d:c4:6d:de:dd:47:95:06:64:49:
         4d:ea:10:3d:f2:24:82:93:27:ad:8f:ad:4f:a9:df:c3:c6:32:
         a4:1c:3a:63:78:c9:aa:91:ac:5b:1a:7b:0d:84:99:41:fd:78:
         13:27:5c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 15:51:39 2025 by rpki-client