Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0E568A521D9BB239CE1691093572B8FCA9B6DA87.cer
File:                     0E568A521D9BB239CE1691093572B8FCA9B6DA87.cer (raw, json)
Hash identifier:          0qFADMUJRZ8EsdwtukstqRWX0HR52F614BBX214MgQk=
Subject key identifier:   0E:56:8A:52:1D:9B:B2:39:CE:16:91:09:35:72:B8:FC:A9:B6:DA:87
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       253CEB6A2CC7A8724D0F196FB917A34A1D7F131D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/0E568A521D9BB239CE1691093572B8FCA9B6DA87.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Dec 2021 17:59:41 +0000
Certificate not after:    Mon 26 Dec 2022 18:04:41 +0000
Subordinate resources:    AS: 266353
                          IP: 170.239.140.0/22
                          IP: 2804:3684::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3c:eb:6a:2c:c7:a8:72:4d:0f:19:6f:b9:17:a3:4a:1d:7f:13:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 17:59:41 2021 GMT
            Not After : Dec 26 18:04:41 2022 GMT
        Subject: CN=0E568A521D9BB239CE1691093572B8FCA9B6DA87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:70:44:10:bd:97:86:6b:a9:a6:a5:de:6d:
                    a3:61:22:a0:2a:1c:f2:d6:76:0d:33:59:f8:21:59:
                    a3:60:49:27:a0:76:5d:ae:3d:d9:fa:89:a3:19:4f:
                    9f:2a:cb:10:c5:ea:fc:81:94:4a:c4:d7:31:79:23:
                    17:93:d6:b6:22:77:9e:62:eb:d2:08:fd:01:de:4b:
                    d8:78:e2:3d:d4:43:77:f4:af:37:29:0b:5c:7b:8c:
                    32:21:0d:99:c9:98:e9:54:2a:8a:a5:ae:61:a7:59:
                    59:4e:4c:bb:2c:eb:9f:29:3c:41:fb:7d:f9:0c:e0:
                    f9:dc:36:24:ef:95:c8:c4:1c:bc:03:aa:cb:82:87:
                    ca:a3:aa:b8:ab:86:5d:41:b6:42:3c:82:6f:9b:c8:
                    7e:26:63:20:26:d6:57:9e:5e:20:94:fa:52:6d:da:
                    8e:7f:ee:02:94:c3:c5:2c:1b:7c:28:b7:6d:4c:07:
                    c7:e1:27:2a:d0:23:81:88:14:14:1d:09:41:ce:ef:
                    58:d3:30:5b:aa:b1:d9:c5:5b:af:37:db:c3:a2:84:
                    fd:b4:2a:58:b6:0d:f5:7a:75:cb:e4:a6:54:77:7b:
                    e1:3e:6e:84:51:0d:ca:cd:90:04:46:ef:6f:00:89:
                    cc:a0:1f:9f:46:d8:58:59:cd:41:77:bd:4f:60:16:
                    3e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:56:8A:52:1D:9B:B2:39:CE:16:91:09:35:72:B8:FC:A9:B6:DA:87
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/0E568A521D9BB239CE1691093572B8FCA9B6DA87.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.140.0/22
                IPv6:
                  2804:3684::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266353

    Signature Algorithm: sha256WithRSAEncryption
         89:6c:da:fe:ed:34:92:4b:bf:d0:96:56:72:04:9c:54:40:d2:
         49:e5:95:d4:c9:20:9d:bf:ed:75:21:73:ec:75:ef:33:c3:c4:
         a5:62:19:56:e7:6d:ed:33:df:a5:90:d9:12:e6:dd:04:0e:df:
         49:4d:e4:46:58:6d:83:e3:98:e4:27:a8:a5:7f:d5:43:6f:13:
         08:e9:42:c7:80:41:6e:f6:f6:a9:91:a9:66:7a:3a:22:b3:94:
         3b:20:c4:8b:24:7f:89:59:e1:8c:c2:86:d8:fb:54:83:03:38:
         6c:b4:98:e3:8f:ed:20:1a:19:b2:a9:41:fd:74:50:bf:9b:ef:
         df:52:0b:fe:f3:8a:c7:11:be:38:bd:b7:ae:10:40:46:fb:5c:
         5a:de:e3:5a:28:69:fe:12:d0:d1:b1:1c:e7:ea:5d:cb:24:e3:
         fc:b7:e4:62:24:46:fe:bd:2f:92:13:42:d2:13:93:66:36:2f:
         12:1e:df:3c:1a:94:85:2c:39:2a:74:67:d4:75:25:28:5a:32:
         27:5b:74:72:f1:2c:f4:55:a1:ed:de:fb:0d:2f:a1:8e:2b:88:
         34:74:c7:55:eb:bf:0b:50:88:45:45:5d:4e:01:e9:dd:17:45:
         c1:76:d3:2d:e7:43:ec:2a:6e:73:97:8d:87:09:a3:f1:18:63:
         f4:e2:aa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:39:38 2025 by rpki-client