Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/05C0A3C2A3AE9DDE7CFA0F480118BA61CC2C641E.cer
File:                     05C0A3C2A3AE9DDE7CFA0F480118BA61CC2C641E.cer (raw, json)
Hash identifier:          tgW+LXxaba42NJr0zHKjf1iVjU32kNq6CEQdc0JmqeM=
Subject key identifier:   05:C0:A3:C2:A3:AE:9D:DE:7C:FA:0F:48:01:18:BA:61:CC:2C:64:1E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2A28A4097F749626FF89A12C7C3A6973BE031662
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/05C0A3C2A3AE9DDE7CFA0F480118BA61CC2C641E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 04:59:24 +0000
Certificate not after:    Tue 03 Sep 2024 05:04:24 +0000
Subordinate resources:    AS: 264195
                          IP: 138.97.196.0/22
                          IP: 2804:2400::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:28:a4:09:7f:74:96:26:ff:89:a1:2c:7c:3a:69:73:be:03:16:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 04:59:24 2023 GMT
            Not After : Sep  3 05:04:24 2024 GMT
        Subject: CN=05C0A3C2A3AE9DDE7CFA0F480118BA61CC2C641E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:1d:b4:45:02:12:fa:0a:a2:40:67:36:aa:
                    d8:01:f7:b2:44:e0:4f:99:4c:5e:8b:b9:c4:f0:da:
                    a4:d4:58:69:b3:5a:07:a2:e3:67:1f:a6:cc:f0:d6:
                    85:d0:03:d2:a6:9b:ed:2c:60:08:41:3f:83:98:36:
                    7e:39:ff:65:22:f1:23:36:37:86:03:20:3b:e3:14:
                    1b:f9:8c:57:a0:fe:b4:4c:e1:26:69:94:a4:af:71:
                    52:c5:0e:44:62:a8:d0:b3:a8:63:87:82:eb:d7:26:
                    7c:04:93:be:c3:76:5e:d7:92:5c:5f:a5:03:5b:8c:
                    71:b7:4c:cb:83:dc:68:22:e1:cd:c6:f4:ed:3d:b5:
                    5a:de:d8:cd:42:de:73:4d:8c:31:6d:80:e3:49:e7:
                    df:37:77:52:20:e8:8d:51:9b:a8:29:cf:19:dc:37:
                    7b:4a:67:e4:b9:2d:ef:80:5d:8d:3f:a3:a5:ed:a0:
                    c2:7e:f1:e3:2f:d6:1d:89:f3:77:35:df:32:31:6b:
                    8b:f5:86:00:9c:a4:cc:52:4f:f1:54:0f:02:00:98:
                    56:ba:5e:76:92:e6:ef:aa:78:8e:6d:00:9d:ce:96:
                    0e:f7:6a:bd:bd:90:f4:01:da:b2:76:dd:95:6f:c9:
                    77:62:3e:09:6a:7d:43:62:2a:83:a1:ff:8e:6b:af:
                    9b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:C0:A3:C2:A3:AE:9D:DE:7C:FA:0F:48:01:18:BA:61:CC:2C:64:1E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/05C0A3C2A3AE9DDE7CFA0F480118BA61CC2C641E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.196.0/22
                IPv6:
                  2804:2400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264195

    Signature Algorithm: sha256WithRSAEncryption
         3f:e4:24:7f:2d:4b:3d:f0:3a:80:1a:80:2c:99:4d:56:27:ed:
         c9:db:08:d7:15:12:6f:81:47:d4:31:bb:6c:01:90:bb:fa:11:
         6a:84:a1:a9:bd:9d:8f:d9:c8:f8:5b:4b:4d:ae:97:2f:b9:60:
         ff:3e:1f:80:c4:e2:7e:cc:d3:97:d2:b8:22:e3:e1:10:45:46:
         70:f8:2a:2b:9e:78:89:d1:60:90:00:68:75:cf:c7:f1:a3:a6:
         ff:3f:c3:72:2d:15:68:27:9e:34:d9:0c:cb:8c:0a:02:28:bf:
         7d:8c:42:2f:e0:8e:1e:89:d9:e4:36:5e:56:51:a0:67:45:30:
         19:b6:57:5a:b2:8d:e7:89:8d:21:dd:b8:e4:bd:a9:00:4e:45:
         0e:d7:f2:74:4d:8f:fd:2d:79:5e:95:82:cb:97:e4:a1:a8:2e:
         9d:51:1b:46:4a:34:2b:b2:c2:d0:4c:3a:7e:d0:ff:9f:fd:82:
         e1:7f:cb:32:47:d7:14:70:47:b2:13:eb:1c:9c:5f:34:5f:14:
         6d:45:66:21:ac:b8:bd:ca:fa:bc:53:f7:d7:02:6d:6c:ff:f0:
         15:40:4d:66:81:a6:be:1d:14:83:fc:31:85:85:27:aa:3a:36:
         6e:e6:96:2d:3f:04:0c:f5:42:82:cf:43:ac:15:2b:ff:a0:8c:
         b7:61:f4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:34 2025 by rpki-client