Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C881ADB6CB89C9170B1C701A9DF0180681BE81C.cer
File:                     1C881ADB6CB89C9170B1C701A9DF0180681BE81C.cer (raw, json)
Hash identifier:          C+Iwm+Bk/LdkWaWsPYzKMaeyI9gSAQoLhc+RIYBI6IE=
Subject key identifier:   1C:88:1A:DB:6C:B8:9C:91:70:B1:C7:01:A9:DF:01:80:68:1B:E8:1C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6ADDCEB0957F8C0E80CE5090DAACC03EC3CD22D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/1C881ADB6CB89C9170B1C701A9DF0180681BE81C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 22:22:28 +0000
Certificate not after:    Mon 08 Apr 2024 22:27:28 +0000
Subordinate resources:    AS: 267507
                          IP: 201.182.96.0/22
                          IP: 2804:428c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:dd:ce:b0:95:7f:8c:0e:80:ce:50:90:da:ac:c0:3e:c3:cd:22:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 10 22:22:28 2023 GMT
            Not After : Apr  8 22:27:28 2024 GMT
        Subject: CN=1C881ADB6CB89C9170B1C701A9DF0180681BE81C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d9:28:8c:09:ce:9b:14:72:59:38:d5:bd:5f:
                    da:b8:23:02:48:92:ef:f2:7c:8c:bf:72:f5:62:25:
                    42:5b:e7:8b:86:b0:f8:85:df:09:03:e5:13:a4:bf:
                    60:ef:5a:9a:f0:bb:f1:33:6b:3a:b4:46:52:6b:80:
                    91:7a:c8:25:40:d0:84:ab:dd:7f:4c:c6:be:f6:3a:
                    be:16:df:bb:d9:40:f5:c9:1e:9c:f1:2f:cd:3f:08:
                    5f:5d:c7:7c:41:57:f1:79:00:80:ee:4d:45:91:b5:
                    3d:e7:51:4c:8a:61:5a:bf:0a:4e:c7:51:8c:06:f1:
                    ca:77:a5:3d:1c:d9:76:a0:56:57:fd:cf:00:e7:3f:
                    e6:d4:cb:50:a0:34:d9:99:24:52:2f:0f:10:8f:f4:
                    b2:de:95:e8:3e:96:be:c4:38:89:a4:db:74:03:59:
                    52:47:00:c6:36:e8:c2:f5:36:07:59:7c:62:0c:1e:
                    4a:d7:39:64:fc:4d:0b:4b:48:5d:2d:12:52:d7:82:
                    91:31:2a:a4:ee:22:74:bf:ab:b3:69:88:ac:af:6a:
                    50:9b:fa:7c:66:95:42:a0:53:ef:db:36:b7:b8:20:
                    b7:30:00:4f:8c:7b:2b:54:e8:de:c3:a3:de:77:13:
                    7e:15:c2:ad:a0:c6:2e:fe:64:19:fd:60:1f:0d:17:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:88:1A:DB:6C:B8:9C:91:70:B1:C7:01:A9:DF:01:80:68:1B:E8:1C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/1C881ADB6CB89C9170B1C701A9DF0180681BE81C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.96.0/22
                IPv6:
                  2804:428c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267507

    Signature Algorithm: sha256WithRSAEncryption
         6f:0f:f8:26:1c:4a:f0:33:45:c3:b8:b3:38:3c:80:01:19:63:
         71:64:75:fb:43:27:06:5b:37:ff:53:28:f8:1d:fd:44:40:86:
         7b:6c:8c:74:26:5c:12:11:62:41:f8:8f:2e:be:2e:79:2c:03:
         8b:b9:da:5c:07:84:ac:72:21:03:f3:c7:ab:1c:01:f9:41:92:
         1c:dc:63:a1:a6:d7:dd:3f:64:2f:c4:1d:d1:57:f6:b8:a4:4a:
         45:1e:82:f9:31:62:60:b4:c5:7d:75:e1:f4:73:4d:d4:68:61:
         27:76:2d:37:ee:d5:50:27:8f:0d:40:02:60:57:4e:2a:a9:b2:
         7f:a3:f3:f9:d0:dc:08:f5:09:82:fc:70:ec:a3:ef:8a:02:94:
         61:ff:e9:76:f9:f6:15:c5:e2:fa:27:0c:b6:e4:31:0d:92:50:
         46:50:a8:88:0d:2b:0c:fc:51:8d:4d:61:ff:cf:c0:4a:19:8a:
         39:8b:58:dd:83:49:91:25:b5:1c:d0:0f:01:70:38:e9:7d:ce:
         ab:e8:f6:4f:34:37:8c:83:01:f6:58:22:f2:13:5a:68:48:48:
         e1:2e:95:b2:35:e6:f4:06:5e:cd:7b:8d:5b:6f:75:cc:fa:50:
         9b:0c:e5:59:04:7f:26:b4:03:fd:5a:4c:77:1a:7b:c9:d9:39:
         ab:84:be:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:59:05 2025 by rpki-client