Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/042A3E7DEAD7C0AFE927D6C84ADB69D575419B27.cer
File:                     042A3E7DEAD7C0AFE927D6C84ADB69D575419B27.cer (raw, json)
Hash identifier:          HCKRSg4+dlva7n+VgnZ/DYZzEdXCAqmYG23tiS1devw=
Subject key identifier:   04:2A:3E:7D:EA:D7:C0:AF:E9:27:D6:C8:4A:DB:69:D5:75:41:9B:27
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32FEAFA0541707D5A2258A2C43E00770EC5F213C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/042A3E7DEAD7C0AFE927D6C84ADB69D575419B27.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 22:51:02 +0000
Certificate not after:    Tue 17 Dec 2024 22:56:02 +0000
Subordinate resources:    AS: 271051
                          IP: 200.9.104.0/22
                          IP: 2804:7580::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:fe:af:a0:54:17:07:d5:a2:25:8a:2c:43:e0:07:70:ec:5f:21:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 22:51:02 2023 GMT
            Not After : Dec 17 22:56:02 2024 GMT
        Subject: CN=042A3E7DEAD7C0AFE927D6C84ADB69D575419B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0a:30:40:5a:8b:bf:67:c0:dc:e0:5f:83:a2:
                    b8:41:91:91:86:db:4a:aa:f5:e7:f7:6c:cc:d6:fa:
                    06:5d:a1:95:d0:b5:82:f5:1f:1a:74:9b:d6:01:f3:
                    30:b8:a1:44:b9:75:07:f5:66:e0:dc:be:80:a5:a4:
                    9f:6e:aa:59:cc:b9:a9:93:4b:8d:17:24:89:98:05:
                    00:42:d8:73:32:34:52:2f:ff:28:70:67:1d:31:f9:
                    97:28:ea:e3:1e:82:77:c4:77:6a:dc:30:2f:96:20:
                    2b:16:4b:2b:b8:ce:69:9a:a2:66:24:ae:8f:fb:41:
                    0d:ab:81:75:9a:df:ae:36:21:b1:e0:fd:70:2d:75:
                    18:a7:49:b7:23:23:de:b0:7c:69:e3:28:88:7e:4e:
                    21:6b:d9:8c:63:a3:bd:3c:fb:61:0e:4c:05:6e:64:
                    4b:6f:ae:a9:ee:55:87:ac:70:e6:a4:b0:74:94:e4:
                    ef:5c:ce:43:19:89:02:dc:40:4d:04:8e:fa:68:48:
                    6e:d2:cf:8b:ad:4a:d3:ed:df:e4:66:7a:05:b7:0c:
                    95:1e:2b:05:ba:33:18:ab:09:8d:88:9e:b9:2a:73:
                    74:87:e0:f2:84:79:76:90:85:e6:8d:fd:dd:42:da:
                    d9:ea:69:a8:30:93:91:df:3c:30:38:b2:0b:ab:fd:
                    59:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:2A:3E:7D:EA:D7:C0:AF:E9:27:D6:C8:4A:DB:69:D5:75:41:9B:27
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/042A3E7DEAD7C0AFE927D6C84ADB69D575419B27.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.104.0/22
                IPv6:
                  2804:7580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271051

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:08:21:ce:dc:2a:c5:7b:2f:43:2e:d8:13:fb:10:6d:41:
         ef:97:96:d7:41:95:34:3b:b1:ac:ec:63:07:8a:3a:e2:0c:78:
         c7:12:69:63:9a:74:ba:be:96:8b:23:a4:4b:72:d5:f3:d8:51:
         28:d6:4b:d5:a3:90:a5:6e:38:91:9c:99:aa:55:18:17:7c:4c:
         62:4b:c4:6f:d1:5e:95:a3:54:9c:56:e6:59:39:cc:87:ab:5a:
         88:bb:0b:a4:ba:86:f7:e5:46:1d:23:53:ba:53:cc:a1:3a:ba:
         9f:87:0a:7a:86:e0:71:69:11:0b:24:8e:ae:e8:86:26:68:cc:
         41:0d:d2:b8:95:e6:3e:93:3e:f7:7d:2e:b7:6a:e8:ed:07:ae:
         54:dc:bd:73:f4:c2:3a:f9:7d:5c:48:f3:b4:69:3b:79:8e:88:
         c2:d9:c6:b5:de:11:fd:8b:82:2f:e5:67:d0:22:e0:f9:ca:26:
         38:10:0d:3d:a0:7a:23:c5:da:f9:b0:da:f3:fc:d8:00:13:7d:
         27:8c:b1:f9:01:21:cf:1e:0e:68:eb:b9:4a:bb:1d:a6:ad:81:
         bc:7a:0d:5c:29:c5:6c:63:be:f2:33:83:a5:53:47:a4:2d:0a:
         81:7a:d4:8d:79:28:90:9c:91:39:0d:2f:42:4d:b7:d6:7c:c1:
         1e:f1:93:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 01:34:57 2025 by rpki-client