Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer
File:                     1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer (raw, json)
Hash identifier:          qgfuA7ZMyznfRvpZ9a7yNv5yfmt5Q+VaVh4T2M+PRQs=
Subject key identifier:   1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1ABCC5CB7161CBE3A944052C0F7BD0AE5337C62B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 15:27:37 +0000
Certificate not after:    Mon 23 Sep 2024 15:32:37 +0000
Subordinate resources:    AS: 61602
                          AS: 265950
                          IP: 164.163.108.0/22
                          IP: 177.124.156.0/22
                          IP: 2804:404c::/32
                          IP: 2804:7004::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bc:c5:cb:71:61:cb:e3:a9:44:05:2c:0f:7b:d0:ae:53:37:c6:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 15:27:37 2023 GMT
            Not After : Sep 23 15:32:37 2024 GMT
        Subject: CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:0b:e3:c7:b8:a5:a4:9c:a5:32:5e:78:a2:
                    36:6a:de:9d:9d:2b:3a:c8:ea:f2:83:bd:e6:97:d9:
                    a9:6e:66:89:f7:76:1c:a1:51:33:5d:34:fa:90:af:
                    de:81:dc:1c:2d:8d:5a:ec:e9:26:3d:a6:36:51:82:
                    e8:c8:ff:e4:9c:50:91:d2:7f:58:68:9d:f6:90:6a:
                    3b:1b:d0:bd:fc:b5:f1:7d:aa:3d:47:84:dc:d1:5c:
                    cd:66:26:97:d8:b8:05:63:82:79:51:a6:c4:3f:c8:
                    c6:39:59:c8:26:82:9f:14:86:d0:d1:13:1f:91:f1:
                    63:b1:df:20:bb:9e:e1:f9:bd:2e:1f:07:22:54:2b:
                    db:ed:4c:41:87:ae:e4:b9:24:6f:00:b3:81:e4:0d:
                    b7:ce:e4:31:db:b7:4c:11:65:dd:aa:cb:22:8b:b7:
                    7d:2b:32:73:ff:99:04:a8:58:17:d6:6f:e5:57:03:
                    89:1b:8a:29:a7:37:18:31:eb:3a:a4:d1:25:b3:88:
                    53:99:f3:0a:0b:32:24:de:36:26:dc:1d:a2:70:d6:
                    00:3f:dd:ac:ac:9e:52:30:d9:9f:ba:21:29:9e:c7:
                    3c:7c:f9:20:a4:d5:10:1a:16:b3:f5:d8:cf:69:32:
                    7c:72:6b:7d:f5:32:c2:31:cb:04:a3:1b:c3:e3:20:
                    04:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.108.0/22
                  177.124.156.0/22
                IPv6:
                  2804:404c::/32
                  2804:7004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61602
                  265950

    Signature Algorithm: sha256WithRSAEncryption
         77:ad:83:1d:07:75:16:88:9c:f4:69:68:84:72:dd:42:74:da:
         ec:52:45:99:66:a9:14:70:cb:91:4c:53:c5:8e:c4:2d:8f:d1:
         0c:73:88:ea:6c:b9:e6:e9:7e:99:66:a1:84:17:f9:44:62:bf:
         fa:26:7e:67:84:6a:56:50:89:10:d1:be:98:c5:f2:98:e8:b0:
         cf:85:5c:a0:db:dc:ce:ea:cc:38:97:53:a2:fb:b0:85:af:ab:
         ea:03:d5:28:2c:01:98:4a:79:57:78:bd:d1:a1:45:32:94:4a:
         25:f4:67:e3:9b:68:f4:5a:ad:49:22:53:1f:0f:ae:eb:21:7d:
         66:7f:50:40:8a:c7:4a:4c:82:eb:82:25:b4:c5:33:ea:dd:88:
         4e:b8:0b:0b:a4:5d:02:37:8d:f3:10:6f:a6:3f:93:72:b3:59:
         f0:e4:c6:17:0b:da:f1:71:d8:ea:6f:95:e7:86:38:b5:8c:d8:
         17:cb:52:2a:9f:dc:84:62:1a:d2:36:21:b5:1a:d2:44:f4:3e:
         e0:6f:4e:1b:dc:24:f2:62:fd:af:82:fd:af:b1:0d:44:5e:c7:
         7d:af:57:23:68:0a:7e:71:f9:83:51:8b:14:5d:19:ff:ff:12:
         68:4d:91:d6:39:c1:1a:7f:9c:79:8e:e2:68:9c:0a:56:8a:ff:
         fc:f9:b1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:47:47 2025 by rpki-client