Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/23358AA8CCFE573197707E6DFF2FEE7E8C03F8CD.cer
File:                     23358AA8CCFE573197707E6DFF2FEE7E8C03F8CD.cer (raw, json)
Hash identifier:          onOCGjPFjCJ+GQGA561LDu7R6zAr/Hon1+/Z/hw4M+g=
Subject key identifier:   23:35:8A:A8:CC:FE:57:31:97:70:7E:6D:FF:2F:EE:7E:8C:03:F8:CD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D9FA163BE9BFA729FED7DCB7F3B5354708C317D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/23358AA8CCFE573197707E6DFF2FEE7E8C03F8CD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 18:44:24 +0000
Certificate not after:    Wed 18 Sep 2024 18:49:24 +0000
Subordinate resources:    AS: 268746
                          IP: 45.171.228.0/22
                          IP: 2804:5a10::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9f:a1:63:be:9b:fa:72:9f:ed:7d:cb:7f:3b:53:54:70:8c:31:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 18:44:24 2023 GMT
            Not After : Sep 18 18:49:24 2024 GMT
        Subject: CN=23358AA8CCFE573197707E6DFF2FEE7E8C03F8CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:53:c0:d5:e8:29:c4:cc:47:79:1b:f9:55:
                    da:49:43:cf:92:a8:a0:bd:74:90:67:3f:46:f3:ed:
                    05:10:9a:a7:ec:a3:2e:67:d7:4e:90:9f:af:5e:46:
                    57:68:fa:c5:76:79:52:e1:51:91:09:5a:90:48:06:
                    ff:dd:ef:05:3d:5e:9b:89:9f:d5:fd:52:2a:f1:c3:
                    48:ce:07:94:39:1b:2b:e1:12:88:a5:3b:92:68:40:
                    3f:02:84:93:2f:23:f4:ea:4a:4b:d1:94:21:05:f5:
                    66:19:c2:93:f1:1b:d6:dc:62:77:88:71:8b:ff:26:
                    82:0e:6d:a7:a5:f2:74:49:b9:35:37:d3:d3:a9:ce:
                    b3:1d:06:c3:b8:e7:9f:09:f9:5c:6c:89:59:7c:21:
                    7a:c6:d7:91:b8:2d:6e:b9:d6:1e:17:39:4c:de:ec:
                    b2:51:21:8e:a4:2a:0b:da:2a:41:36:03:ee:ac:b5:
                    95:f1:15:87:43:06:a4:7a:f0:f8:d6:ad:ee:e0:05:
                    f4:96:00:a3:d5:3f:2a:35:4e:55:35:27:26:f3:e4:
                    da:4e:8d:81:67:a1:82:54:e2:a3:15:69:42:4f:65:
                    bf:49:e4:f9:90:a0:24:12:69:be:d7:b7:da:c0:6a:
                    48:9e:08:75:5b:0e:c7:37:ca:dd:ba:2f:02:ff:26:
                    03:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:35:8A:A8:CC:FE:57:31:97:70:7E:6D:FF:2F:EE:7E:8C:03:F8:CD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/23358AA8CCFE573197707E6DFF2FEE7E8C03F8CD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.228.0/22
                IPv6:
                  2804:5a10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268746

    Signature Algorithm: sha256WithRSAEncryption
         ad:22:eb:3c:73:82:08:a0:44:27:60:d9:f9:01:0e:8a:61:a8:
         14:00:e3:1e:ba:23:85:67:d4:5d:50:1c:d1:05:51:9c:08:62:
         87:e1:de:a7:19:61:72:b5:dd:f2:e8:c3:3d:ee:a1:ed:7a:09:
         3e:f3:4d:86:b4:41:16:2c:f1:82:c4:17:88:7b:ca:72:df:27:
         da:4e:23:59:96:ee:cb:17:35:b1:4d:47:15:61:5a:db:a8:b2:
         ea:e6:a1:0c:59:4a:7e:b5:d4:9d:5c:2b:cf:eb:cc:a7:3f:8b:
         d7:3a:4a:6b:6c:cb:e7:c6:33:57:8a:54:37:cb:de:13:df:db:
         3d:d9:75:b3:12:ac:68:68:5d:53:b5:fc:20:74:a8:d3:ed:77:
         f9:2e:da:c8:bb:15:b9:cd:e1:87:35:59:c6:48:88:44:b9:0d:
         47:96:80:f4:b5:de:48:b2:28:74:9a:12:08:0a:bc:d5:4a:f4:
         29:b9:3d:50:c6:33:94:e9:ba:c5:cb:96:71:9a:9a:52:2d:8e:
         f5:ed:bb:6c:04:6e:a4:8f:6f:d9:c3:37:b9:d0:ef:67:35:05:
         ae:52:74:ee:fb:84:68:ea:83:79:77:df:59:8d:f0:47:fc:67:
         19:61:97:fa:14:0e:a1:ff:72:ac:f4:30:63:09:3f:02:fe:36:
         30:53:88:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:25 2025 by rpki-client