Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EB9F42FBB74870995F0EB2DA847B30D132AADCF3.cer
File:                     EB9F42FBB74870995F0EB2DA847B30D132AADCF3.cer (raw, json)
Hash identifier:          A4abz7UDeEHYgHfJ3rfRqeb9G60Bc+xAz3714qYFxdQ=
Subject key identifier:   EB:9F:42:FB:B7:48:70:99:5F:0E:B2:DA:84:7B:30:D1:32:AA:DC:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       225D26861CDFA800E1F2D12B6B3E5BEEA3F56EF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/EB9F42FBB74870995F0EB2DA847B30D132AADCF3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jan 2022 19:52:49 +0000
Certificate not after:    Tue 17 Jan 2023 19:57:49 +0000
Subordinate resources:    AS: 61842
                          IP: 201.131.172.0/22
                          IP: 2804:1a2c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5d:26:86:1c:df:a8:00:e1:f2:d1:2b:6b:3e:5b:ee:a3:f5:6e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 19:52:49 2022 GMT
            Not After : Jan 17 19:57:49 2023 GMT
        Subject: CN=EB9F42FBB74870995F0EB2DA847B30D132AADCF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:24:85:5a:51:14:36:d0:ed:f3:81:34:ca:84:
                    51:1a:97:5c:ec:17:ce:72:75:93:6a:eb:94:55:7b:
                    ce:5e:36:be:99:45:65:90:8e:03:8c:7d:c6:99:ad:
                    92:b5:c5:85:67:78:61:49:90:d6:ca:b4:b1:77:bc:
                    d2:e7:3d:2e:f6:8b:22:91:38:fa:f2:86:28:32:e3:
                    41:aa:d1:49:6c:b5:bd:58:0e:8f:e8:29:79:a3:ab:
                    ee:be:cb:57:94:46:99:83:8b:70:1c:b9:82:b8:19:
                    79:60:bc:ee:55:8f:23:ae:61:bb:0a:4b:6d:3a:5e:
                    e1:6f:97:c3:c6:47:b7:25:dc:96:94:e2:2a:51:5d:
                    9c:01:e9:c7:20:99:45:75:18:bb:2c:0a:e9:64:89:
                    51:15:0b:38:81:db:5f:a0:7c:d1:05:7d:6f:66:dc:
                    5c:70:cd:2b:d0:f2:0d:ee:b3:49:2d:4f:f4:20:d7:
                    85:56:6f:8d:59:95:5f:88:f1:5d:f1:72:bb:25:76:
                    02:a6:48:9f:04:a4:c7:81:70:61:a0:c1:ac:a7:b2:
                    0e:10:f9:ed:bc:ce:af:94:f1:ac:47:08:f6:58:31:
                    42:1b:bc:6c:39:13:9c:d4:e0:6e:ee:78:5d:df:76:
                    13:95:c1:0d:e0:e5:1c:11:04:9b:9a:ca:db:4c:55:
                    3d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:9F:42:FB:B7:48:70:99:5F:0E:B2:DA:84:7B:30:D1:32:AA:DC:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/EB9F42FBB74870995F0EB2DA847B30D132AADCF3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.172.0/22
                IPv6:
                  2804:1a2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61842

    Signature Algorithm: sha256WithRSAEncryption
         55:b3:09:9a:64:63:a3:8c:3e:ef:22:8a:40:e9:31:7c:e0:21:
         7c:60:02:d0:49:b2:ed:8a:27:24:29:8f:80:0f:ea:3d:51:b9:
         bd:55:13:02:4c:4f:4e:b0:45:a4:96:99:21:ee:65:50:e2:4c:
         fa:d5:77:b5:94:25:b0:16:30:c9:82:1c:48:a6:76:aa:9a:87:
         ba:7e:97:57:15:52:65:b4:37:c5:fb:be:65:e4:96:09:9e:96:
         ff:65:95:23:73:03:3a:8c:a5:86:b8:65:47:7e:5c:42:87:57:
         5d:11:45:29:21:43:83:9d:25:70:7d:3f:97:11:99:6e:c4:9a:
         55:63:b7:5b:f3:5c:2e:0e:81:d6:ee:dc:0f:b7:90:13:54:5f:
         ed:4a:26:7d:c8:ec:ac:d5:0c:be:03:68:db:56:86:b4:e6:d0:
         24:13:9c:aa:aa:aa:cf:a8:5e:97:57:a7:dc:6a:2e:90:d4:79:
         91:fc:bb:f0:13:64:5e:ad:55:c5:11:df:74:c8:f6:13:b9:85:
         e9:3e:5d:b6:be:a2:2e:a5:a8:74:30:1d:7a:58:00:6e:ef:e1:
         01:a2:3a:26:6d:21:33:6a:b2:50:45:6c:54:1a:a9:ce:e6:b4:
         e2:72:e5:49:61:64:05:e1:3a:43:04:99:00:3f:a8:71:23:2b:
         d0:23:75:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:12:33 2025 by rpki-client