Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0CAC4BA8CAEBB78E4827411992CCE9FE3A0EC33F.cer
File:                     0CAC4BA8CAEBB78E4827411992CCE9FE3A0EC33F.cer (raw, json)
Hash identifier:          04RyRKAaQaLF+qStvgHgGHQnfAv9RSDpmTwRda09kFg=
Subject key identifier:   0C:AC:4B:A8:CA:EB:B7:8E:48:27:41:19:92:CC:E9:FE:3A:0E:C3:3F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4ADF3E08D4C1379C5203B554C9478E12F449EE8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/0CAC4BA8CAEBB78E4827411992CCE9FE3A0EC33F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Mar 2023 12:13:41 +0000
Certificate not after:    Fri 22 Mar 2024 12:18:41 +0000
Subordinate resources:    AS: 271091
                          IP: 179.48.160.0/22
                          IP: 2804:7620::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:df:3e:08:d4:c1:37:9c:52:03:b5:54:c9:47:8e:12:f4:49:ee:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 24 12:13:41 2023 GMT
            Not After : Mar 22 12:18:41 2024 GMT
        Subject: CN=0CAC4BA8CAEBB78E4827411992CCE9FE3A0EC33F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:d3:6e:da:b8:3a:56:01:34:b1:fe:ca:47:
                    0c:12:27:c2:18:94:d0:62:ec:3e:f9:b8:9b:22:f8:
                    85:37:11:34:ca:9b:b4:58:18:47:40:cf:db:bc:b7:
                    37:87:f6:2e:22:21:68:76:73:b1:64:df:50:60:5b:
                    7c:f8:48:46:cc:54:d9:89:3e:17:5a:7f:1f:df:17:
                    a0:3d:75:05:d6:ea:34:3c:75:18:63:ce:f8:f6:db:
                    81:ab:05:a6:a8:e7:88:d2:a6:44:8f:3d:eb:4a:55:
                    4e:c2:f5:c8:3e:c6:b5:0e:d9:a9:32:92:cf:11:e4:
                    ed:bd:d2:06:fb:a4:99:13:c0:82:d5:ff:61:ac:1f:
                    00:4b:30:f4:8c:ec:1b:94:82:cc:40:ad:04:c4:4a:
                    ae:9d:65:94:28:b3:6d:09:4f:d3:1b:49:b1:71:1e:
                    1c:ca:89:76:4e:b6:c1:bd:3a:d3:55:01:6b:d6:ca:
                    b7:30:6d:c9:85:aa:94:e0:f7:bd:3b:e8:9d:b0:66:
                    e7:ae:44:12:93:02:5c:89:82:51:09:f2:ec:cf:5f:
                    ea:a3:c2:52:33:df:9b:90:40:04:4c:e3:58:84:03:
                    a7:b2:e1:90:2e:3a:c0:a2:7c:a8:c6:9e:52:5e:07:
                    d4:6c:76:e8:05:e8:3f:0f:38:13:3f:19:d7:d1:ee:
                    0a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:AC:4B:A8:CA:EB:B7:8E:48:27:41:19:92:CC:E9:FE:3A:0E:C3:3F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/0CAC4BA8CAEBB78E4827411992CCE9FE3A0EC33F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.160.0/22
                IPv6:
                  2804:7620::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271091

    Signature Algorithm: sha256WithRSAEncryption
         5b:12:8f:8a:90:bb:47:4d:88:c2:2e:f9:2d:0f:34:ef:1d:17:
         d5:49:b5:f5:2f:2d:91:77:8d:ca:19:9f:0e:60:c9:dd:e2:3e:
         83:38:0b:08:e0:0e:72:90:d0:f1:e4:4a:a5:09:6d:f0:60:6f:
         aa:3f:54:4f:8d:c0:df:d7:cd:7b:b6:e3:b9:0a:4d:63:75:54:
         87:82:83:d0:b9:51:d0:42:fb:02:d5:43:cb:22:35:89:c1:68:
         d2:bf:cf:cf:95:ae:b5:cc:bb:80:4d:20:66:90:7c:c4:77:e7:
         75:88:20:ad:f4:ce:e0:31:ee:c3:41:59:6b:40:e8:d3:7f:9c:
         80:49:3f:36:38:88:64:15:0e:09:05:7e:55:38:4e:67:eb:b6:
         82:a9:eb:f5:46:ea:09:9e:a6:dd:c6:f6:2f:91:e8:1b:18:62:
         7c:64:93:2f:30:e3:d8:35:9d:38:93:3b:60:e6:16:30:18:b6:
         8c:df:ce:ee:7c:b2:51:52:c9:56:78:f6:2c:05:7c:9a:b6:9f:
         ea:09:72:a7:60:40:a4:3f:0a:64:c9:ea:a2:a1:3b:cf:a1:af:
         d2:63:4f:73:3d:72:33:08:b6:cb:e2:ac:7e:b6:2d:19:1c:00:
         ce:df:b9:5b:86:25:15:8d:84:01:e8:f5:a5:c3:99:d1:18:cc:
         1b:c8:98:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:21 2025 by rpki-client