Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/00AA5522B7E3B9CE022698EAEB6D0CF1051BF337.cer
File:                     00AA5522B7E3B9CE022698EAEB6D0CF1051BF337.cer (raw, json)
Hash identifier:          fXWlnWJ8ZDmvT4eBGLvsM6UH+D6nzSs1JaF+vkQPcyw=
Subject key identifier:   00:AA:55:22:B7:E3:B9:CE:02:26:98:EA:EB:6D:0C:F1:05:1B:F3:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       15FA6C7E9C5414E295F8A72C7818BF9F90C70E23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/00AA5522B7E3B9CE022698EAEB6D0CF1051BF337.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Feb 2023 23:12:44 +0000
Certificate not after:    Sat 17 Feb 2024 23:17:44 +0000
Subordinate resources:    AS: 265126
                          IP: 143.208.124.0/22
                          IP: 170.84.216.0/22
                          IP: 2804:2af0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fa:6c:7e:9c:54:14:e2:95:f8:a7:2c:78:18:bf:9f:90:c7:0e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 18 23:12:44 2023 GMT
            Not After : Feb 17 23:17:44 2024 GMT
        Subject: CN=00AA5522B7E3B9CE022698EAEB6D0CF1051BF337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b1:eb:39:1e:7c:fa:62:17:1d:5a:23:a4:b6:
                    22:38:f4:c6:85:72:a1:12:4f:49:33:af:54:ca:c8:
                    20:15:88:7e:9a:cf:a0:9d:62:80:7d:bd:2c:32:ef:
                    88:81:ba:f3:e0:c3:7d:bf:8c:fb:ea:c3:60:9b:82:
                    61:e8:57:91:0b:ab:ac:08:d6:36:30:e7:af:80:e0:
                    28:7a:26:3e:16:e2:a4:54:14:bb:7e:56:8b:13:e5:
                    da:5b:29:ec:8c:38:80:e7:c5:a0:c7:80:a6:ed:9d:
                    68:c3:ca:a9:e4:2e:68:49:23:8c:67:33:49:d1:95:
                    8c:a5:c1:4a:d8:47:05:b1:aa:28:13:67:19:f0:c7:
                    38:76:7a:19:69:c5:1d:f6:19:84:0a:4c:b3:f8:f2:
                    35:72:c1:37:e1:aa:2e:82:35:1a:4f:b4:c9:82:31:
                    de:73:f8:54:a9:71:47:c9:6c:b2:7c:33:27:19:9f:
                    e5:7b:e9:f3:7c:ee:3f:2b:04:25:fb:02:fc:2a:4d:
                    98:2d:14:d6:51:72:d0:0e:20:66:c3:57:9b:2f:cd:
                    35:5c:f6:e3:96:0e:00:7d:e2:e9:94:af:a0:00:cc:
                    a9:26:06:f2:b5:77:f7:4b:3f:c0:c0:9a:06:18:ea:
                    1a:67:14:79:ca:7b:12:6f:1b:6b:61:cc:b5:3b:33:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:AA:55:22:B7:E3:B9:CE:02:26:98:EA:EB:6D:0C:F1:05:1B:F3:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/00AA5522B7E3B9CE022698EAEB6D0CF1051BF337.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.124.0/22
                  170.84.216.0/22
                IPv6:
                  2804:2af0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265126

    Signature Algorithm: sha256WithRSAEncryption
         1b:a1:f0:29:a7:0a:23:ef:d1:4a:a1:50:54:9b:d3:b3:41:a1:
         1c:e8:0c:02:e5:33:cb:b6:37:d1:4d:97:46:62:fd:8f:fc:9a:
         37:1a:cc:6e:4a:35:06:1d:bc:e1:1c:a6:43:74:bf:a4:89:74:
         5c:ee:90:9e:44:93:54:ef:f0:45:06:b5:2b:2c:04:08:3a:b4:
         61:58:0b:63:a2:16:ac:73:2c:05:c1:aa:1e:85:62:9b:a7:48:
         3d:56:ec:02:91:04:e7:82:5e:df:4a:ab:05:cd:96:7b:b5:0e:
         97:1e:e5:88:0a:13:12:b6:95:f2:8e:75:55:00:47:2c:da:81:
         31:c4:52:ad:49:70:58:a7:d9:e7:2c:69:0a:29:79:fa:b1:b3:
         25:b1:e3:0c:0b:3a:9e:dd:c7:af:2e:0a:fc:50:0e:78:6c:f4:
         cd:77:a6:d5:ff:b9:c1:01:3c:d6:27:21:0e:5b:0e:5f:56:d2:
         cc:28:55:34:dc:c7:ca:94:f8:42:d3:02:20:27:9f:87:d4:5f:
         d2:c5:f7:0c:21:3b:55:e4:23:da:28:bf:65:31:59:c3:34:66:
         09:10:29:fe:79:6d:b6:26:d1:fc:10:19:19:fd:58:11:66:56:
         f8:94:e4:ad:73:5f:d5:dc:70:e2:18:c7:42:64:04:ab:6e:58:
         82:9a:cb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:51:01 2025 by rpki-client