Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0D25379FA56476863A5B6C86B29DC8B024DA53AD.cer
File:                     0D25379FA56476863A5B6C86B29DC8B024DA53AD.cer (raw, json)
Hash identifier:          Pk6pUt6gFh2odHG6E1EJ0Cjcku/1WZ4EmYPNC4JCq3g=
Subject key identifier:   0D:25:37:9F:A5:64:76:86:3A:5B:6C:86:B2:9D:C8:B0:24:DA:53:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0175C5B700EE47F9BBACC460397E3F27264AB3B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/0D25379FA56476863A5B6C86B29DC8B024DA53AD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Aug 2022 15:50:12 +0000
Certificate not after:    Tue 01 Aug 2023 15:55:12 +0000
Subordinate resources:    AS: 269320
                          IP: 45.184.64.0/22
                          IP: 2804:62d0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:75:c5:b7:00:ee:47:f9:bb:ac:c4:60:39:7e:3f:27:26:4a:b3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  2 15:50:12 2022 GMT
            Not After : Aug  1 15:55:12 2023 GMT
        Subject: CN=0D25379FA56476863A5B6C86B29DC8B024DA53AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:ba:41:90:40:42:17:48:1c:e8:ec:fa:33:
                    84:6c:5b:73:4f:c8:76:a9:5e:9e:6a:7c:0f:40:5b:
                    ed:8a:20:54:c0:a8:ea:d4:dc:da:72:a5:e0:64:2b:
                    0b:aa:ac:bd:02:bf:12:e8:11:f0:e3:d9:38:f6:4f:
                    e9:c1:27:8b:ba:ff:aa:6a:6e:c6:99:7e:c1:c9:57:
                    ec:fc:b9:ab:59:cf:07:51:47:63:eb:de:ee:b8:41:
                    3f:1f:39:bb:7d:0a:cd:7f:c2:a3:6d:06:a8:16:a4:
                    a9:cd:ab:46:29:58:9d:84:c9:aa:40:9a:b1:fe:62:
                    ba:13:c6:d3:78:3e:5c:3d:ac:b4:b4:9a:ce:9d:68:
                    c1:20:48:47:fa:84:37:95:b4:34:09:e4:e6:8c:22:
                    67:c3:8c:e2:9e:78:19:89:07:2b:1f:84:2b:c8:ec:
                    21:fc:08:9b:c4:82:9d:95:ec:26:18:b1:e2:0c:ed:
                    1c:16:98:a7:11:66:ee:45:a0:9b:b1:5a:d2:25:29:
                    34:fe:bc:55:ae:f4:17:45:da:25:71:b2:99:c8:12:
                    9e:4c:eb:30:fe:cd:b3:da:75:ca:7a:e3:91:fa:ff:
                    ca:17:fd:9f:62:00:f0:bd:9c:59:22:25:7a:9e:f6:
                    21:e8:7c:3b:81:59:f0:ca:07:60:77:fa:b7:77:98:
                    6e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:25:37:9F:A5:64:76:86:3A:5B:6C:86:B2:9D:C8:B0:24:DA:53:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/0D25379FA56476863A5B6C86B29DC8B024DA53AD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.64.0/22
                IPv6:
                  2804:62d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269320

    Signature Algorithm: sha256WithRSAEncryption
         82:57:50:84:9e:4f:3f:c2:22:80:7f:e5:e6:01:8e:b0:ff:5b:
         48:ed:e2:65:c2:b0:74:c5:86:1f:3e:5a:90:a9:34:b2:3b:eb:
         95:fc:ad:bf:01:52:70:55:a0:8c:39:6f:18:93:a6:ac:a0:b9:
         30:6e:db:82:c4:6c:c5:9d:1f:61:62:2c:c8:c0:90:a2:47:1a:
         75:2b:87:d8:d3:b3:34:44:6d:25:78:f7:5e:6b:f6:c4:d0:de:
         9c:3b:79:ac:05:17:f6:70:14:e8:35:57:5f:48:6a:53:c0:73:
         2b:7e:22:a5:0d:7a:5b:5d:da:5e:a8:34:07:bf:a0:ac:c0:8c:
         a9:a7:4a:fb:8e:90:d8:54:b3:5f:59:68:f5:5f:ee:8f:ec:9f:
         bc:bd:7b:9d:58:77:f4:ac:a5:f0:cc:25:71:67:72:05:32:88:
         1b:b0:c3:33:6c:48:ca:db:ca:f4:53:7b:09:62:92:e4:1d:93:
         88:92:50:ad:be:a6:d4:a3:54:14:c9:9b:71:57:bb:be:b7:a8:
         e2:a3:d6:75:96:bc:f6:2f:4c:1a:d1:a7:f7:8d:17:71:18:3c:
         6e:49:95:be:0d:79:43:10:a9:42:be:68:59:34:98:77:35:a4:
         9b:24:92:8c:2d:00:0f:1c:54:c3:d8:d3:bd:5f:36:70:22:fb:
         e9:89:af:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:56 2025 by rpki-client