Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1CFDA235DDB3686865DF5323375DC9670B22BEBE.cer
File:                     1CFDA235DDB3686865DF5323375DC9670B22BEBE.cer (raw, json)
Hash identifier:          ClK/jJ9GqctbmofeOHMH4L6mHTHZxg9/VAdXNvdSrbo=
Subject key identifier:   1C:FD:A2:35:DD:B3:68:68:65:DF:53:23:37:5D:C9:67:0B:22:BE:BE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E424E13AD22FD392805235B0D119308DA8ED8D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/1CFDA235DDB3686865DF5323375DC9670B22BEBE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Jun 2023 16:22:36 +0000
Certificate not after:    Wed 05 Jun 2024 16:27:36 +0000
Subordinate resources:    AS: 265263
                          IP: 168.90.32.0/22
                          IP: 2804:2d20::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:42:4e:13:ad:22:fd:39:28:05:23:5b:0d:11:93:08:da:8e:d8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  7 16:22:36 2023 GMT
            Not After : Jun  5 16:27:36 2024 GMT
        Subject: CN=1CFDA235DDB3686865DF5323375DC9670B22BEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:68:dc:4f:d8:bd:2a:cb:d9:af:0e:1b:bf:83:
                    fa:6c:2f:d2:0c:82:08:46:bd:04:5e:5d:73:d7:21:
                    18:e2:7e:f0:ed:24:9a:59:4c:b1:7d:c1:99:07:34:
                    45:e1:ca:d6:fd:7e:40:1b:28:53:53:72:ad:be:31:
                    be:f2:0e:00:e4:1a:f6:5c:93:cf:e2:30:c1:d9:e0:
                    f1:64:39:2c:f8:24:b7:8b:a0:d0:48:1d:1b:cd:85:
                    2d:e0:80:a1:e5:3a:65:48:85:f4:e0:27:5f:8c:c7:
                    e9:7c:83:41:db:6c:99:25:6d:74:10:3b:13:5e:55:
                    21:bd:8b:49:a7:a4:1d:ec:57:82:ae:f1:e3:cb:0e:
                    9b:c0:76:62:bc:af:87:44:fb:d6:75:36:d6:34:06:
                    bf:1c:91:23:57:01:d9:f4:ad:81:3d:c2:52:8d:dd:
                    72:12:2c:29:cc:b1:29:6c:1d:e0:a2:c4:17:f0:63:
                    87:f2:2d:e1:f7:f2:d6:63:42:02:ed:a9:d2:a1:69:
                    d4:4f:a6:25:05:29:a4:6f:ca:92:ae:62:6c:46:6f:
                    9c:01:80:54:a2:4a:3c:b2:b4:1e:fa:91:99:a1:e6:
                    f6:c8:f8:e0:b2:38:7b:95:a0:d3:c1:bb:98:61:c1:
                    d4:71:6d:f7:f4:b6:57:4b:73:cd:e3:26:e7:b4:40:
                    48:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:FD:A2:35:DD:B3:68:68:65:DF:53:23:37:5D:C9:67:0B:22:BE:BE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/1CFDA235DDB3686865DF5323375DC9670B22BEBE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.32.0/22
                IPv6:
                  2804:2d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265263

    Signature Algorithm: sha256WithRSAEncryption
         55:73:ae:26:ca:2b:0b:28:bb:45:c0:b1:32:51:21:d4:d7:e6:
         21:44:f4:87:cf:f5:b5:73:05:1c:71:a1:0e:eb:a6:69:28:c4:
         e4:ae:a4:d1:d9:84:6f:5e:bd:e1:df:20:a4:ee:92:ce:4c:db:
         03:e3:c4:ae:f4:2c:bb:4b:b0:74:05:f9:e6:13:89:72:69:d9:
         28:ee:3a:e5:3c:cf:98:ac:66:ca:59:e1:fc:61:50:1f:3f:d8:
         06:f1:35:e5:73:a0:b3:5f:eb:a9:0e:26:11:7f:2c:58:fb:b6:
         81:e4:b3:fd:ef:38:31:10:19:6d:e6:14:36:8e:43:36:f4:69:
         39:a8:7a:fe:3a:05:06:11:f7:9f:1b:d8:39:1f:94:4c:77:db:
         ba:2f:83:d8:94:ac:6f:c0:39:d2:8d:86:5c:8b:c2:f6:3a:73:
         ec:86:26:c3:f8:95:67:b3:34:7b:61:1e:8f:a0:b6:65:71:5a:
         e7:92:ed:c8:56:f2:72:fb:8f:94:bc:87:a1:59:52:f9:60:ad:
         76:6e:69:80:f7:31:8b:77:40:c3:3a:05:c8:bf:7c:05:10:8a:
         15:d9:c7:b1:d4:ba:b6:62:ab:ce:5b:a1:69:a2:36:67:e6:60:
         88:bb:4f:6c:db:93:a2:47:2a:2a:65:56:01:69:17:df:67:d2:
         c1:d1:32:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:15 2025 by rpki-client