Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/28F54719B112720FF4FB4AFF158EE7998769D4C2.cer
File:                     28F54719B112720FF4FB4AFF158EE7998769D4C2.cer (raw, json)
Hash identifier:          FElFj3kJf7lEJfjcCtetIWXwNkxXVdmSUIWWTsKvb3Q=
Subject key identifier:   28:F5:47:19:B1:12:72:0F:F4:FB:4A:FF:15:8E:E7:99:87:69:D4:C2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       19FFDB65FCB3D7A7AC1814504B36D22EF39DE4A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/28F54719B112720FF4FB4AFF158EE7998769D4C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Aug 2022 14:03:55 +0000
Certificate not after:    Thu 24 Aug 2023 14:08:55 +0000
Subordinate resources:    AS: 269025
                          IP: 45.178.128.0/22
                          IP: 2804:5e50::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ff:db:65:fc:b3:d7:a7:ac:18:14:50:4b:36:d2:2e:f3:9d:e4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 25 14:03:55 2022 GMT
            Not After : Aug 24 14:08:55 2023 GMT
        Subject: CN=28F54719B112720FF4FB4AFF158EE7998769D4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:6c:69:b8:b3:d2:58:d3:94:bc:7f:b7:f0:
                    81:ae:dc:df:85:60:e3:e9:92:7a:68:58:37:f3:8e:
                    49:db:91:6a:0b:dc:9c:e8:90:10:b4:01:7b:f6:8e:
                    2b:12:3a:18:09:c3:03:fa:8a:a4:7a:a2:5b:fe:76:
                    d4:01:70:60:12:9f:f6:28:c2:09:51:53:3d:69:97:
                    95:02:fe:17:66:2f:74:1a:ad:21:a4:7d:12:1a:b3:
                    1d:ea:f3:8f:ac:e9:20:b1:ef:2d:90:2a:9d:ef:dc:
                    48:b6:32:46:d9:33:50:64:26:a0:af:21:48:86:8d:
                    ca:63:92:63:0a:4d:5e:b5:e2:df:37:b9:58:13:59:
                    c2:64:ad:7b:84:63:00:47:a5:66:76:54:29:24:49:
                    f4:8f:18:da:bb:2a:ef:b4:ab:93:97:08:ad:21:fd:
                    92:6e:9d:77:04:25:0f:86:97:a8:c2:33:60:91:80:
                    2d:74:81:a8:bd:be:9b:37:76:5c:2d:7b:35:c5:d1:
                    9b:5b:b1:80:79:de:26:af:eb:cf:69:d3:35:39:bc:
                    ca:3b:ca:b7:71:11:44:e5:da:39:81:1d:e1:8a:ef:
                    13:97:89:55:1e:2d:b7:c3:4d:12:dd:d5:b2:c6:c9:
                    09:aa:0b:b5:9b:d7:21:94:c5:6f:7b:89:2a:5c:f7:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:F5:47:19:B1:12:72:0F:F4:FB:4A:FF:15:8E:E7:99:87:69:D4:C2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/28F54719B112720FF4FB4AFF158EE7998769D4C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.128.0/22
                IPv6:
                  2804:5e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269025

    Signature Algorithm: sha256WithRSAEncryption
         6a:c8:0c:66:bc:21:49:34:e7:31:81:74:a9:90:47:60:8b:91:
         50:c6:63:33:ad:54:cf:c6:76:c7:d5:c6:ae:32:df:a0:90:0d:
         b7:c8:a4:6b:86:9c:b8:2c:5e:9d:a9:5d:69:b1:ac:8c:e3:16:
         e8:8f:5e:05:4b:fc:32:8a:d8:e3:d5:07:9e:ee:03:59:93:fc:
         c3:ff:34:4c:0f:1b:ab:d4:ff:00:68:02:b4:c4:45:e8:63:04:
         45:1a:85:d4:ae:67:54:4a:76:18:5d:83:20:8c:1b:fb:7e:36:
         f1:b2:51:65:62:da:9f:fb:77:bf:10:73:95:9c:3c:45:4f:2f:
         41:58:82:b6:03:47:aa:2c:37:c6:8f:e5:ad:02:30:cd:91:e6:
         26:d3:da:02:1f:6f:d2:92:3d:2f:d4:77:07:05:ff:3a:b7:99:
         ef:db:1d:1d:83:56:c5:6e:c4:73:ae:e1:e7:f5:e6:e2:9b:c4:
         f3:0d:82:94:8a:97:4c:28:a8:4c:74:37:4b:67:99:29:78:e9:
         a1:1b:b5:b8:38:4d:a2:6d:3f:25:57:62:5d:d8:ee:f0:45:f3:
         d3:86:43:6b:84:2f:7a:bb:bf:60:bf:d4:5a:b5:54:37:31:b6:
         c3:bb:94:a5:e9:d3:2b:47:93:84:91:7b:ca:7a:9a:5a:36:5b:
         8e:0d:86:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:39:16 2025 by rpki-client