Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/25FDEA4FC76B6ED9A0E2C7040120618B55F5410A.cer
File:                     25FDEA4FC76B6ED9A0E2C7040120618B55F5410A.cer (raw, json)
Hash identifier:          CZ4qUmRkXNYZoQ+7TLakupqUIaA9Mxkd8v+AcsybzM0=
Subject key identifier:   25:FD:EA:4F:C7:6B:6E:D9:A0:E2:C7:04:01:20:61:8B:55:F5:41:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       64731C7A7D73051E402FBB80CD5E713012845EB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/25FDEA4FC76B6ED9A0E2C7040120618B55F5410A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 18:40:36 +0000
Certificate not after:    Mon 20 May 2024 18:45:36 +0000
Subordinate resources:    AS: 265224
                          IP: 167.250.216.0/22
                          IP: 170.239.40.0/22
                          IP: 2804:2c84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:73:1c:7a:7d:73:05:1e:40:2f:bb:80:cd:5e:71:30:12:84:5e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 22 18:40:36 2023 GMT
            Not After : May 20 18:45:36 2024 GMT
        Subject: CN=25FDEA4FC76B6ED9A0E2C7040120618B55F5410A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:5a:ad:ea:f9:9d:2e:4c:48:70:b0:c5:5b:
                    25:a4:fe:64:45:eb:90:94:9d:1f:e2:6e:97:90:40:
                    51:31:a7:7d:bd:1c:48:e4:15:72:cb:77:86:12:b5:
                    08:43:1b:11:a1:15:1a:23:dd:1c:e1:cb:39:0d:6c:
                    8e:ac:91:f1:59:4a:b9:04:57:f6:71:0a:fa:8c:bf:
                    ca:0d:07:74:16:01:d4:ce:f8:e9:07:09:a6:70:c5:
                    1a:b5:80:97:bc:a7:b4:b0:53:ef:90:7e:67:b7:34:
                    9c:b7:3f:77:9b:2f:e6:80:f3:2f:61:3b:c7:e1:8d:
                    e3:3d:f3:b0:56:9b:ab:8c:8b:d0:bb:db:8c:1d:b6:
                    a5:e6:c1:4a:f4:e1:66:b2:23:23:b0:f3:6f:7a:5e:
                    a2:25:da:91:2d:f3:6f:da:63:f7:dd:8b:e3:32:59:
                    cf:44:c8:69:ce:77:f2:60:f3:63:5f:19:e4:59:0c:
                    5f:bb:19:b0:82:19:17:4a:87:7c:dd:51:60:07:59:
                    ad:4f:e7:04:28:a1:f3:5c:ab:14:79:b6:27:0f:3f:
                    d1:74:71:d7:e8:ef:0e:f8:47:ac:cc:2b:e9:cf:ae:
                    32:72:b9:b5:c6:83:b4:12:d6:66:2f:58:41:89:0f:
                    8e:30:8f:2d:0a:3d:ee:b7:ca:a9:0f:18:fa:96:47:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:FD:EA:4F:C7:6B:6E:D9:A0:E2:C7:04:01:20:61:8B:55:F5:41:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/25FDEA4FC76B6ED9A0E2C7040120618B55F5410A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.216.0/22
                  170.239.40.0/22
                IPv6:
                  2804:2c84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265224

    Signature Algorithm: sha256WithRSAEncryption
         2f:41:5e:54:27:7d:76:74:7d:94:4a:85:d6:ce:10:b0:fd:e1:
         ec:d6:87:0f:c0:95:ba:ed:01:6b:a7:ac:15:3c:92:c6:ff:be:
         1b:ed:30:8d:11:46:6b:8d:59:f5:0b:51:cf:f0:78:6d:3a:52:
         c4:c0:58:a8:6b:7f:36:90:31:42:42:67:33:27:22:61:1f:fe:
         8a:a7:35:fb:b2:06:b6:46:ef:af:e6:40:30:80:6d:ab:87:cf:
         ee:53:f7:4d:6a:3c:a3:08:12:d1:79:56:8a:35:70:38:b6:3e:
         a7:04:53:76:46:39:c0:fe:39:a6:2d:51:8f:45:d7:fe:86:de:
         8b:56:40:f9:44:00:f9:9f:3a:84:23:7f:0d:c0:f6:ea:ab:af:
         73:5e:d4:0a:eb:8d:20:16:62:21:2d:75:f2:fb:eb:46:f3:38:
         d4:d6:64:74:35:9d:b6:d4:14:70:0c:79:d4:d4:db:ec:79:44:
         3c:3c:a7:af:cf:4a:d4:27:a3:98:d4:74:66:49:84:1f:49:8f:
         55:ca:db:96:d8:6d:c8:9f:98:90:37:0f:b2:0e:61:27:5b:66:
         98:0d:af:4a:8b:ad:fe:3e:ea:c6:c0:86:d9:5b:35:d5:66:eb:
         b1:0c:5e:99:9f:75:81:e0:53:4a:b1:31:61:25:8c:be:99:b8:
         a1:50:b8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org