Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.cer
File:                     0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.cer (raw, json)
Hash identifier:          TG/KSt6RITyW5mBbeF/mIiD4qn8gxW0A8LGHg1V5ooQ=
Subject key identifier:   0D:63:88:E3:8C:34:7D:3C:53:C9:4D:B9:3B:30:EE:0F:A0:C1:8A:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B9C652C242CAE41A6656C917C5AF0D6CA55039F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.mft
caRepository:             rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Dec 2023 20:18:17 +0000
Certificate not after:    Mon 02 Dec 2024 20:23:17 +0000
Subordinate resources:    AS: 273616
                          IP: 2804:89a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9c:65:2c:24:2c:ae:41:a6:65:6c:91:7c:5a:f0:d6:ca:55:03:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  4 20:18:17 2023 GMT
            Not After : Dec  2 20:23:17 2024 GMT
        Subject: CN=0D6388E38C347D3C53C94DB93B30EE0FA0C18A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:42:66:5b:93:56:de:87:aa:5e:06:08:ce:
                    02:25:61:10:38:81:d4:ee:80:88:d4:34:eb:27:e1:
                    f5:0e:5a:1f:5c:8c:49:bb:66:7a:3e:b9:b3:19:10:
                    62:63:dc:0a:99:36:58:a8:b2:b2:4e:e8:7b:3c:c2:
                    72:38:4b:1b:18:3e:e7:ce:da:43:a4:2b:c5:29:80:
                    0f:fd:01:07:d9:be:ff:69:94:f4:34:ca:2a:2b:73:
                    d6:15:9c:34:e3:3c:c1:6c:7a:38:f6:ff:10:43:20:
                    e3:3e:4a:5d:27:20:ad:5f:7d:50:78:c8:76:42:9d:
                    85:1d:69:d4:56:54:ab:eb:31:d6:22:d1:34:bf:a5:
                    a4:f9:8e:cb:61:af:6b:7b:45:56:8b:42:42:b0:18:
                    94:0d:60:3f:00:10:23:52:a2:af:df:4d:71:fe:d8:
                    c4:ba:ca:99:68:b2:46:d7:80:90:be:c2:54:be:c8:
                    7f:47:6e:9d:cc:b6:c6:c2:a9:be:8c:75:68:a6:30:
                    f6:38:52:64:39:54:a6:e5:e7:51:28:dc:cb:06:83:
                    aa:1a:02:20:0e:d5:92:ef:a3:f6:67:e3:b7:03:60:
                    31:d0:0a:1a:a6:1c:ac:51:7a:4b:33:31:31:2d:be:
                    61:94:a5:fe:51:ba:b5:39:d7:d1:c1:63:61:03:84:
                    62:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:63:88:E3:8C:34:7D:3C:53:C9:4D:B9:3B:30:EE:0F:A0:C1:8A:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:89a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273616

    Signature Algorithm: sha256WithRSAEncryption
         0f:ca:ab:76:63:b2:c9:37:ab:35:aa:54:36:99:00:27:13:8d:
         ae:57:e5:11:2f:db:ca:91:5b:d1:49:60:63:3e:0c:c6:10:6c:
         c7:25:50:7f:48:4a:5a:3a:0b:f9:38:be:7f:d5:9e:26:4b:b0:
         04:81:af:47:f1:14:1a:fc:c8:0b:65:11:6a:1a:b8:ef:57:ba:
         44:b9:01:03:ca:fb:e7:c0:e0:3b:43:91:dd:5e:82:79:91:fe:
         e8:b1:6f:5b:3a:4c:0b:06:bf:95:ee:ab:6f:b0:fd:50:3e:62:
         c8:6b:f5:6b:b1:a9:dd:ce:d5:2d:1e:2d:18:90:58:6a:80:b5:
         67:02:a8:50:ba:09:71:25:66:b9:a6:54:66:7e:93:c6:ec:39:
         fb:89:77:d1:e0:a6:4e:6d:66:79:3a:17:0c:43:8f:77:e6:5c:
         c0:34:61:70:4e:29:78:10:91:70:02:b8:40:69:d0:94:56:6d:
         c5:8f:e9:41:e9:32:66:20:ea:65:a8:51:86:2c:77:db:43:2b:
         9d:c5:d3:31:5e:2d:f2:14:47:c1:bc:2f:b1:7f:30:8e:47:96:
         9b:e6:fe:32:7d:0f:26:07:b7:14:b1:9d:b0:17:c6:7d:db:f5:
         01:3d:72:cb:67:a1:e1:ff:80:09:11:c7:5d:38:90:c9:16:fa:
         4c:a9:a1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:09:21 2025 by rpki-client