Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0FCDA88840404F9072B5DE1E775B8A935355A94D.cer
File:                     0FCDA88840404F9072B5DE1E775B8A935355A94D.cer (raw, json)
Hash identifier:          x8BncooWOZi4EQfmLbyTtQjO0sdPLtLHOJwLWwbmozA=
Subject key identifier:   0F:CD:A8:88:40:40:4F:90:72:B5:DE:1E:77:5B:8A:93:53:55:A9:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04C0387A279FAFDC5BB7CF05833FDFC417B5D495
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/0FCDA88840404F9072B5DE1E775B8A935355A94D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Nov 2023 12:38:54 +0000
Certificate not after:    Mon 25 Nov 2024 12:43:54 +0000
Subordinate resources:    AS: 271180
                          IP: 200.125.129.0/24
                          IP: 2804:7778::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c0:38:7a:27:9f:af:dc:5b:b7:cf:05:83:3f:df:c4:17:b5:d4:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 27 12:38:54 2023 GMT
            Not After : Nov 25 12:43:54 2024 GMT
        Subject: CN=0FCDA88840404F9072B5DE1E775B8A935355A94D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:92:9e:9b:b0:0d:6e:61:4e:72:af:73:14:
                    fe:79:d4:53:b9:c6:2e:af:9d:56:8c:8d:f5:a3:5f:
                    bc:11:60:c6:94:ce:50:e1:e3:26:ad:78:d4:74:b3:
                    75:cd:d1:71:a6:5f:87:03:2d:22:7b:96:4d:9e:73:
                    19:fb:c3:ae:65:8a:da:a4:bc:bb:dd:71:c4:1a:9a:
                    fb:73:ba:10:7b:97:56:56:9d:d5:f8:ba:46:29:35:
                    e9:d6:aa:18:df:46:71:29:50:5a:29:03:0e:75:56:
                    ab:01:93:de:24:88:38:52:31:d8:cb:2f:aa:b2:28:
                    fd:13:00:20:4d:15:5d:cc:d1:d8:b4:06:f7:8a:e8:
                    00:2f:1e:8c:cd:2f:80:db:d7:2e:08:74:02:43:4c:
                    87:d8:42:99:d2:03:0a:60:fe:f0:5c:84:74:98:72:
                    52:76:0d:30:bd:e6:b0:fd:e6:6b:84:e0:31:cf:e4:
                    d8:7a:31:4e:da:fc:ce:2a:16:37:d2:63:73:c2:36:
                    a7:53:fb:76:bc:91:39:54:32:1a:2f:0f:28:11:a2:
                    38:53:40:e1:95:60:04:ff:32:62:f0:df:7e:02:30:
                    c2:bc:df:15:49:58:59:83:73:80:94:c0:2c:67:09:
                    ad:dc:7f:ca:13:4d:19:a0:06:4f:40:a6:be:e7:5e:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:CD:A8:88:40:40:4F:90:72:B5:DE:1E:77:5B:8A:93:53:55:A9:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/0FCDA88840404F9072B5DE1E775B8A935355A94D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.129.0/24
                IPv6:
                  2804:7778::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271180

    Signature Algorithm: sha256WithRSAEncryption
         09:28:12:7b:0a:11:ae:03:f8:ad:84:99:7f:4c:2b:69:f7:ab:
         b6:22:b2:0c:bf:31:68:26:1b:f2:f2:6d:1e:6f:b8:de:e6:c7:
         a0:5f:31:d2:89:a1:5b:2b:93:c1:82:6e:b4:c8:18:2c:26:4f:
         75:6c:9e:e7:00:93:d1:65:c0:4d:2c:c8:f4:d7:eb:37:d5:b7:
         04:9a:f7:bc:85:13:3f:a9:e8:30:a0:53:99:63:63:48:69:1e:
         38:86:3a:61:6a:f7:d1:41:78:c4:3a:74:fe:0b:71:b8:82:7a:
         72:3b:6d:1f:b5:ca:08:a3:81:4a:7e:98:a6:20:9d:9d:1d:a9:
         e3:f2:d2:ef:3b:fa:b9:ef:8f:e2:f1:7d:7e:c6:1d:85:c3:67:
         fb:ea:f6:31:7f:14:13:1f:c4:6d:d9:54:df:dc:6e:1b:8e:bb:
         ee:c4:7e:c1:fd:65:c4:04:2b:96:84:f8:04:71:a2:c8:88:c3:
         2b:77:41:6c:36:be:64:23:39:0c:33:f5:d0:a3:a0:ba:38:2a:
         2f:f5:4b:d6:d4:0e:91:e2:d3:e8:e9:f4:77:b5:ae:eb:b9:ed:
         1e:12:66:c3:be:08:08:b3:8e:e2:16:a0:fe:6a:61:a9:89:23:
         c9:7d:4f:24:30:36:85:f8:23:3f:f2:5d:e1:85:cc:06:22:1b:
         73:5b:08:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:20:06 2025 by rpki-client