Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1FFCB61E9C7855B5572E02CAEC134C00CBECA484.cer
File:                     1FFCB61E9C7855B5572E02CAEC134C00CBECA484.cer (raw, json)
Hash identifier:          EtAn4M/tEE7XI/ZILy4fUY1zPVLGUCZYVA7L+E/s4sY=
Subject key identifier:   1F:FC:B6:1E:9C:78:55:B5:57:2E:02:CA:EC:13:4C:00:CB:EC:A4:84
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7759FFEDD7CA9B61C44BE13D0184AAF268345AC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/1FFCB61E9C7855B5572E02CAEC134C00CBECA484.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Jan 2023 10:22:06 +0000
Certificate not after:    Mon 15 Jan 2024 10:27:06 +0000
Subordinate resources:    AS: 270758
                          IP: 200.39.144.0/22
                          IP: 2804:70f4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:59:ff:ed:d7:ca:9b:61:c4:4b:e1:3d:01:84:aa:f2:68:34:5a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 16 10:22:06 2023 GMT
            Not After : Jan 15 10:27:06 2024 GMT
        Subject: CN=1FFCB61E9C7855B5572E02CAEC134C00CBECA484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:b7:76:a3:87:a4:b0:59:0b:7e:32:2e:b7:
                    e3:d2:44:43:0f:92:54:94:37:7f:47:1e:c9:af:87:
                    64:c8:c4:44:86:96:ec:c8:07:0a:ea:55:ef:3a:82:
                    b6:02:69:fc:bc:29:89:7a:d2:2f:d2:65:b1:d7:ea:
                    c6:7e:39:0d:06:aa:fc:ef:58:98:1a:5f:b3:6c:ba:
                    7f:7b:2f:7b:29:64:76:9f:d1:c2:e5:30:6a:02:67:
                    86:93:bc:54:bf:04:5b:d3:df:6c:f8:f0:b0:dd:eb:
                    63:b3:05:93:c4:4e:bb:de:72:16:b8:88:9f:97:07:
                    df:4e:2d:5b:d1:59:28:3b:14:be:5f:12:7d:3b:e3:
                    a7:b7:cb:4e:e9:0e:97:4c:76:68:40:6d:26:b7:eb:
                    11:00:1d:97:eb:c6:9c:2d:02:2d:6b:2f:61:36:70:
                    25:22:16:09:44:d0:a6:9e:52:40:7b:10:24:5d:36:
                    ab:a7:22:43:13:14:a6:cf:30:b1:31:3f:19:20:19:
                    58:d2:ea:76:f2:6b:27:82:96:1e:5d:f4:eb:4d:24:
                    ec:37:ae:1f:67:b6:9b:2b:f3:36:be:38:d1:55:e2:
                    8b:7a:18:d8:56:d2:ed:bf:ed:27:25:ed:0d:69:9d:
                    46:6d:7d:c7:48:06:c3:c2:6a:10:a5:94:26:c0:32:
                    b4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:FC:B6:1E:9C:78:55:B5:57:2E:02:CA:EC:13:4C:00:CB:EC:A4:84
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/1FFCB61E9C7855B5572E02CAEC134C00CBECA484.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.144.0/22
                IPv6:
                  2804:70f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270758

    Signature Algorithm: sha256WithRSAEncryption
         62:15:ef:08:0a:8e:d8:35:f7:4e:00:28:78:cb:34:0a:a4:25:
         39:24:25:43:42:61:51:0d:2f:b4:e2:84:02:c3:d9:1f:63:36:
         ef:09:db:b8:05:9e:26:ef:90:07:90:bf:76:44:b5:fd:50:44:
         a1:63:bf:d6:dc:76:44:40:d0:d2:9e:af:40:6f:ea:6f:08:48:
         51:8a:3f:db:91:b1:d3:d2:50:8f:f9:b2:a4:8e:39:75:ed:66:
         28:75:da:bb:16:dd:92:fa:82:fe:a3:8d:db:51:a5:1c:5e:58:
         fe:a1:70:25:47:0d:9a:25:9f:64:72:c7:f7:20:50:be:b0:7a:
         7a:b8:a4:79:68:25:29:01:31:fb:4b:eb:1f:38:61:13:ba:f8:
         14:9b:36:84:9a:4c:f4:21:02:e8:af:b8:35:d9:d8:f0:16:66:
         9b:bd:65:59:c8:88:4c:45:fa:58:46:67:d2:bc:13:b5:5d:f7:
         b5:1e:27:3c:2b:87:6a:ae:b1:60:84:a0:21:1b:27:25:90:d4:
         fa:45:b1:c4:2f:e8:32:aa:28:4c:ab:33:89:71:f2:61:2b:f8:
         2c:f8:55:98:a6:67:2f:2a:3d:26:59:a0:15:38:eb:2c:55:db:
         fb:59:cf:cc:1e:43:c8:c5:2f:58:28:a2:14:cb:28:c7:43:93:
         c6:ea:ee:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:21:34 2025 by rpki-client