Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.cer
File:                     25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.cer (raw, json)
Hash identifier:          ncgI/aGIqUtJEYghIay6DofIcF21M8wOt/88YURefTk=
Subject key identifier:   25:C4:5D:74:DF:12:39:BC:71:DF:AE:D0:BF:4D:FF:A1:92:E3:8C:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16CC7B7CE48B9352BDEA0260F210E74F5259BAEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Jan 2023 02:31:29 +0000
Certificate not after:    Fri 26 Jan 2024 02:36:29 +0000
Subordinate resources:    AS: 273659
                          IP: 2804:8a48::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cc:7b:7c:e4:8b:93:52:bd:ea:02:60:f2:10:e7:4f:52:59:ba:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 27 02:31:29 2023 GMT
            Not After : Jan 26 02:36:29 2024 GMT
        Subject: CN=25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:05:36:be:06:e2:22:fd:7c:9e:ce:ba:7e:
                    52:8a:87:3e:f8:8a:5f:9f:b9:c2:07:1d:d9:94:c8:
                    7b:ce:c4:8e:b1:b8:58:84:b2:b2:9e:1b:eb:17:12:
                    69:cd:ca:7d:6b:e3:fc:87:4b:ca:5a:34:9a:c0:ed:
                    7a:a7:72:b6:ab:34:c8:0e:f3:b0:36:dc:2e:39:52:
                    1f:d6:91:e3:a9:f2:aa:0f:d6:ee:02:98:de:5d:e6:
                    6d:03:5e:f1:b3:7d:43:7a:d9:3c:e7:f9:4d:1a:b4:
                    4d:48:0f:0e:16:fa:96:e0:26:07:45:7e:2e:e8:4d:
                    e2:f5:2a:ae:a3:e3:89:6d:06:39:10:8d:31:ad:90:
                    44:1c:00:be:cb:65:07:5c:9d:aa:5c:74:66:38:44:
                    fa:e1:91:8e:b2:55:94:8c:8d:24:72:59:49:6b:22:
                    a6:7d:59:64:6e:a1:1a:60:b1:5f:31:1f:22:c9:d0:
                    d7:6f:e3:63:f8:ab:04:d6:2b:24:1d:1b:3a:fe:43:
                    2f:1d:71:39:51:74:9f:20:47:f4:df:3a:7a:ae:c0:
                    f4:a6:61:27:be:b9:43:8e:95:c1:71:3f:23:f2:4b:
                    3d:b1:56:09:ea:c4:dc:8e:36:74:9e:bb:b4:0c:34:
                    a1:74:82:87:28:1e:ad:4c:66:ab:28:9e:f8:b9:6e:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:C4:5D:74:DF:12:39:BC:71:DF:AE:D0:BF:4D:FF:A1:92:E3:8C:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273659

    Signature Algorithm: sha256WithRSAEncryption
         87:57:8b:2b:77:cf:95:ac:44:be:1c:17:ee:6b:b4:f3:ce:33:
         5b:15:6d:71:98:5b:41:d4:9b:5d:30:a3:d5:4f:ea:13:3c:e4:
         fb:c2:89:e4:0a:f3:b1:f1:96:3d:e3:9f:06:ee:16:2d:32:66:
         2a:2e:dc:49:96:0a:5f:9f:18:e3:e1:92:96:dd:23:6e:8e:a1:
         f5:91:61:ae:4c:cf:15:5e:ea:b3:0d:44:0d:45:87:ea:0d:95:
         df:ef:1b:ed:48:ea:f5:4c:92:22:4d:9c:f5:4f:0c:e3:9b:7d:
         59:48:d9:5b:1a:f8:b7:7b:d5:11:d3:f6:3b:30:1e:11:a3:78:
         9d:44:95:fb:9c:77:c2:46:d8:09:9f:f6:b7:33:5e:77:8a:c6:
         c7:06:e8:a8:6e:59:db:8c:62:d6:85:0c:9a:06:45:92:53:a5:
         7e:89:88:a7:41:a6:08:86:9a:5e:86:77:93:dc:0a:39:d2:81:
         81:24:31:3d:52:7a:a5:ad:3b:d4:8c:3e:72:e9:82:cc:dd:44:
         32:8f:ee:27:fe:00:11:da:2e:80:9c:36:d4:95:a3:01:c3:26:
         a3:19:d0:96:e9:b0:c5:7a:56:ca:3d:d4:85:23:34:bb:58:8b:
         5d:19:d4:1e:ed:1e:84:5e:6a:8f:1e:29:b2:c0:df:88:ad:84:
         eb:64:a8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:33 2025 by rpki-client