Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/124670631864DC8EBFAC80DD7900F6827B97FE6D.cer
File:                     124670631864DC8EBFAC80DD7900F6827B97FE6D.cer (raw, json)
Hash identifier:          mEm6T86OCh0i2Etcf6c11UwGY3bMnF/a+Y152NW0mq8=
Subject key identifier:   12:46:70:63:18:64:DC:8E:BF:AC:80:DD:79:00:F6:82:7B:97:FE:6D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7417B6F641A9C8D55FA72D563F5E85FB5AB1E395
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5zQFUkkPm5skNgfG4Mb5obtq9SDj9PtnpEj4w4dJ9MD5/0/124670631864DC8EBFAC80DD7900F6827B97FE6D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5zQFUkkPm5skNgfG4Mb5obtq9SDj9PtnpEj4w4dJ9MD5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 17 Jun 2023 02:48:43 +0000
Certificate not after:    Sat 15 Jun 2024 02:53:43 +0000
Subordinate resources:    AS: 267933
                          IP: 45.165.220.0/22
                          IP: 2804:5568::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:17:b6:f6:41:a9:c8:d5:5f:a7:2d:56:3f:5e:85:fb:5a:b1:e3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 17 02:48:43 2023 GMT
            Not After : Jun 15 02:53:43 2024 GMT
        Subject: CN=124670631864DC8EBFAC80DD7900F6827B97FE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:e4:bd:ec:29:d2:f4:00:d7:91:60:c9:43:
                    79:f4:2e:4d:b7:6d:db:4a:9d:fd:da:69:5f:b1:4b:
                    d1:36:74:bf:77:53:af:23:a8:f4:2e:cb:7e:c7:32:
                    66:fc:df:c3:7b:39:e3:7a:4b:39:98:31:c2:6a:b9:
                    f4:02:72:e6:dd:6b:35:f2:5c:fa:09:13:c6:3a:2b:
                    1c:43:23:1c:f5:ab:f6:9e:c7:da:a1:10:7e:07:4b:
                    ff:e7:2b:75:70:11:3a:03:d0:e9:6d:81:ff:95:52:
                    f6:2a:a3:7c:92:1d:07:75:41:ed:e3:e9:a7:6b:37:
                    70:80:42:b3:a0:4f:de:cb:09:73:bb:47:82:d3:6a:
                    41:a2:e1:0e:a1:71:22:e6:01:13:9d:02:67:43:48:
                    84:ea:46:1c:c6:4a:9c:d4:30:bc:db:96:79:28:58:
                    40:4c:bd:c5:21:ff:90:e2:93:07:8c:69:71:c4:38:
                    a5:95:4f:40:c0:cb:a3:e3:41:7a:79:1a:13:93:d3:
                    fd:6a:bf:ad:ba:7f:d6:ad:8f:2c:6c:1a:23:33:25:
                    f4:b0:f1:1e:47:a9:80:43:87:6f:16:af:b7:fb:13:
                    16:5e:94:11:82:ca:9a:40:ed:75:0b:29:d4:a6:e2:
                    1f:97:18:e3:84:09:5f:72:11:28:9b:e8:f5:9e:75:
                    de:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:46:70:63:18:64:DC:8E:BF:AC:80:DD:79:00:F6:82:7B:97:FE:6D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5zQFUkkPm5skNgfG4Mb5obtq9SDj9PtnpEj4w4dJ9MD5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5zQFUkkPm5skNgfG4Mb5obtq9SDj9PtnpEj4w4dJ9MD5/0/124670631864DC8EBFAC80DD7900F6827B97FE6D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.220.0/22
                IPv6:
                  2804:5568::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267933

    Signature Algorithm: sha256WithRSAEncryption
         82:8f:84:86:17:04:9c:eb:f3:85:98:d5:cc:98:0c:bf:44:2a:
         27:5d:0a:e5:ab:22:5f:7f:50:24:df:77:b7:75:ae:50:39:81:
         8d:dd:f6:4c:ee:dc:d0:f7:77:ed:a1:66:69:12:a1:06:c2:68:
         f8:97:f0:57:cf:3f:2c:86:4a:b1:35:6d:46:ec:1f:2d:b3:34:
         bd:a0:45:a1:06:73:b2:f0:33:15:12:df:53:b8:b3:2d:e0:61:
         d3:06:5a:68:09:78:c4:e9:28:96:dc:fc:cb:30:a9:8e:34:76:
         d2:76:5f:ba:a2:15:a6:5a:39:c3:c2:11:fe:6c:84:7f:10:b6:
         3a:7f:dd:66:8a:97:0e:0a:0e:d3:7e:c9:24:f0:71:6c:ad:61:
         f0:d1:c7:4e:0f:ff:f5:5b:ca:11:ac:69:17:0e:e6:b4:27:e0:
         6b:93:db:6c:c3:ae:aa:ee:f5:d7:56:98:4e:5d:33:91:52:ae:
         52:e4:70:b5:b0:6e:8e:f1:b5:7b:17:d5:09:93:f3:60:b6:1e:
         d3:99:b3:25:ae:52:85:0d:d2:17:35:90:af:f8:3d:9a:00:ad:
         fb:7b:52:5f:00:3d:da:f5:cb:a0:a0:94:1d:6b:34:80:b4:d9:
         d7:e0:12:f2:11:08:d7:91:54:24:f2:bf:92:5b:90:92:54:93:
         1c:ad:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:56:20 2025 by rpki-client