Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/285F70409CF8A86F3513ED844BCA6FCF446C5DAD.cer
File:                     285F70409CF8A86F3513ED844BCA6FCF446C5DAD.cer (raw, json)
Hash identifier:          6FargX+Gz+ntTXbE9o9aHkI7PzEL/9wbi/LBmzfIH2g=
Subject key identifier:   28:5F:70:40:9C:F8:A8:6F:35:13:ED:84:4B:CA:6F:CF:44:6C:5D:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       461B27BE7990CC34CACCB2BFD9CDD6BA58C568A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/285F70409CF8A86F3513ED844BCA6FCF446C5DAD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 18:49:58 +0000
Certificate not after:    Fri 12 Apr 2024 18:54:58 +0000
Subordinate resources:    AS: 53062
                          IP: 45.7.128.0/22
                          IP: 168.90.168.0/22
                          IP: 170.150.236.0/22
                          IP: 177.36.176.0/20
                          IP: 177.75.160.0/20
                          IP: 177.155.128.0/20
                          IP: 186.211.96.0/20
                          IP: 187.85.144.0/20
                          IP: 2804:3b0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1b:27:be:79:90:cc:34:ca:cc:b2:bf:d9:cd:d6:ba:58:c5:68:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 14 18:49:58 2023 GMT
            Not After : Apr 12 18:54:58 2024 GMT
        Subject: CN=285F70409CF8A86F3513ED844BCA6FCF446C5DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:d5:d6:4b:34:60:9d:6e:79:ab:d8:d4:95:
                    0e:75:f5:dc:6e:6b:85:aa:bd:3d:be:29:7e:33:04:
                    a8:07:c5:eb:72:5b:1f:2f:fc:db:ae:df:72:e8:14:
                    a2:28:6c:ce:4b:a0:c3:72:d0:c1:e7:5e:09:a2:67:
                    a7:fd:76:fd:49:a3:f8:ae:16:2f:50:af:92:38:7f:
                    d6:d3:ca:ed:f4:83:93:b9:fa:a2:3c:22:2f:25:3a:
                    1c:24:a4:d7:2a:30:32:0f:a6:a7:5e:4d:da:78:1c:
                    cd:90:b4:eb:ee:60:8d:dc:37:bc:18:2d:fb:a5:3d:
                    23:92:07:d7:99:15:5a:a6:1f:e3:fe:0f:a0:07:42:
                    12:c3:1c:fc:1b:a8:1f:5c:a5:8b:1a:e9:92:cc:27:
                    89:3d:2a:50:b1:90:13:74:e8:87:ef:c9:97:d1:21:
                    f3:5d:9f:2c:95:30:a5:e6:31:97:3f:37:9a:5f:c7:
                    5f:77:2a:8b:f5:d0:76:11:c5:03:be:40:69:00:63:
                    7e:04:3d:b8:36:8e:71:30:a3:0a:b2:fe:4d:8b:48:
                    12:c4:5d:de:05:7d:2f:8a:63:22:b9:0b:1c:ce:2e:
                    a6:5c:4d:00:48:51:ad:de:38:35:06:43:c6:88:bc:
                    87:c9:91:96:0a:04:61:12:c6:fa:2a:25:ba:ec:40:
                    fd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:5F:70:40:9C:F8:A8:6F:35:13:ED:84:4B:CA:6F:CF:44:6C:5D:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/285F70409CF8A86F3513ED844BCA6FCF446C5DAD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.128.0/22
                  168.90.168.0/22
                  170.150.236.0/22
                  177.36.176.0/20
                  177.75.160.0/20
                  177.155.128.0/20
                  186.211.96.0/20
                  187.85.144.0/20
                IPv6:
                  2804:3b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53062

    Signature Algorithm: sha256WithRSAEncryption
         05:55:84:3e:fa:d2:58:a2:b7:c0:b1:ae:13:3b:0d:f1:f7:7b:
         17:25:f8:e4:28:81:59:b4:7d:26:83:14:bb:d8:2b:43:86:1d:
         95:d4:93:12:3b:c9:7d:c9:5f:46:0e:16:bb:ee:87:a2:a5:b9:
         7c:1c:1e:b4:8f:b8:59:3d:17:2c:c9:e2:05:d0:1a:6c:89:ba:
         75:36:e9:32:24:ed:6d:08:c6:8e:e0:3e:8d:04:d1:cc:e5:60:
         04:c9:5a:3a:aa:d2:21:99:de:28:91:2d:2f:30:ea:a8:0a:45:
         fe:d0:72:39:aa:38:06:2a:31:fe:7d:b7:7d:aa:bc:e6:3d:36:
         7a:67:08:23:20:1c:8b:45:f2:22:cf:d1:02:c3:56:59:cf:e6:
         01:19:9a:72:47:b4:11:17:b0:21:36:83:88:f9:94:96:71:eb:
         a3:89:f4:56:84:a2:43:39:42:b4:58:f5:c5:01:b2:77:5d:5b:
         b9:b1:6e:01:18:2c:5d:97:97:b6:32:9c:7f:33:40:67:7d:11:
         cd:97:29:e7:c9:f6:f7:ca:d1:49:52:0e:1f:30:4a:03:ee:cc:
         53:4f:83:05:f7:3f:ed:0c:4b:f8:79:a6:aa:91:05:8d:20:62:
         34:40:6a:1f:13:1c:6b:26:c0:1d:e0:42:31:b8:6d:9f:37:0e:
         33:8d:1d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:33 2025 by rpki-client