Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/33E32580E3CD6089472B3FFCF091488D761AF65F.cer
File:                     33E32580E3CD6089472B3FFCF091488D761AF65F.cer (raw, json)
Hash identifier:          HdzX/bPXHQ5Ngs1psk+yGeZ3QoEzTN2Pge2K2jI7pYE=
Subject key identifier:   33:E3:25:80:E3:CD:60:89:47:2B:3F:FC:F0:91:48:8D:76:1A:F6:5F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       61856360A45674AE9C428F9A4B3665CB82CE726A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/33E32580E3CD6089472B3FFCF091488D761AF65F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 19:27:03 +0000
Certificate not after:    Tue 28 May 2024 19:32:03 +0000
Subordinate resources:    AS: 266207
                          IP: 170.80.36.0/22
                          IP: 216.98.208.0/22
                          IP: 2804:3c60::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:85:63:60:a4:56:74:ae:9c:42:8f:9a:4b:36:65:cb:82:ce:72:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 19:27:03 2023 GMT
            Not After : May 28 19:32:03 2024 GMT
        Subject: CN=33E32580E3CD6089472B3FFCF091488D761AF65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:2d:86:fb:21:84:22:a2:96:91:9c:1c:ed:
                    03:3f:2b:99:06:1c:4d:e6:9e:bc:a9:7f:a4:bf:6a:
                    07:54:a7:9f:67:7a:ca:27:49:da:e3:0e:99:f9:cb:
                    1d:77:59:2a:16:38:b1:86:73:f0:8c:2c:9c:8c:60:
                    8c:2a:f0:59:bd:fd:1b:ee:67:01:b7:df:1d:d3:03:
                    2d:94:b1:c0:c6:23:93:bf:e3:e8:da:ea:60:fb:b3:
                    d7:ef:d1:ad:a0:eb:7a:30:de:ba:eb:45:59:a2:d3:
                    3b:17:e3:7b:d3:97:f0:e3:2e:ea:70:29:92:ef:60:
                    2d:ba:d7:1b:4a:ee:b2:ff:39:b5:ea:cd:31:ae:6e:
                    3f:d3:a1:11:f1:fa:e8:da:8c:6d:aa:6b:96:86:f8:
                    fa:fe:aa:5f:53:2a:b1:d1:ab:d4:f3:77:86:c5:a6:
                    49:7c:b8:30:e3:08:a8:4f:67:32:f2:7f:47:86:f6:
                    10:3e:de:ae:6a:a9:29:74:ac:42:34:ce:b4:c7:05:
                    da:53:9c:4b:e8:50:9b:f8:0e:6b:24:8d:62:03:da:
                    40:47:4e:b3:aa:5c:9b:bb:92:eb:21:d2:dd:47:45:
                    07:7d:35:fe:ec:37:c8:7e:cc:8c:90:2a:92:9e:56:
                    1b:73:47:c6:a1:b6:e8:80:eb:e6:d3:b8:7f:a6:14:
                    2c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:E3:25:80:E3:CD:60:89:47:2B:3F:FC:F0:91:48:8D:76:1A:F6:5F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/33E32580E3CD6089472B3FFCF091488D761AF65F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.36.0/22
                  216.98.208.0/22
                IPv6:
                  2804:3c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266207

    Signature Algorithm: sha256WithRSAEncryption
         41:f1:92:81:24:cb:8b:18:27:35:28:0f:9a:26:cb:67:a0:fb:
         17:91:7d:79:fc:53:d4:89:c3:eb:ad:76:66:9c:bb:cf:fd:6d:
         29:3d:60:47:08:a8:f4:1d:4e:3d:27:82:6a:af:84:e0:21:11:
         12:bd:66:3d:17:dd:0f:c3:2c:02:43:8d:e9:a9:c7:96:26:4d:
         66:f8:70:e0:e1:b2:7f:db:86:19:a0:6a:6d:93:eb:11:35:1b:
         c4:37:af:28:4d:76:be:a9:3a:f3:21:3b:c8:4a:bf:39:69:ff:
         c0:23:ae:5f:f5:4f:21:01:0d:bd:07:d3:13:db:07:06:94:f3:
         4d:4f:6d:87:e6:89:b0:9e:79:8f:40:f7:29:0e:2c:23:77:c7:
         52:9c:9d:38:5b:92:20:55:62:f6:7f:cd:f9:59:dc:10:a8:bc:
         e9:bc:2a:0c:50:94:5f:6d:cf:b8:d8:b9:4a:36:d6:d4:d0:ef:
         2b:3f:90:f6:8c:33:da:49:a3:5b:7e:30:6b:79:67:72:26:0f:
         cf:8f:75:4c:15:29:f2:ca:1f:f9:b6:49:c1:68:7d:e7:2a:19:
         4b:88:40:d7:a6:a5:b3:61:48:e6:cd:72:4b:39:b6:f9:ce:07:
         ab:55:0c:09:39:c1:94:c9:b3:87:d9:d2:92:ce:ae:bf:4b:d6:
         ca:2b:3e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:44:18 2025 by rpki-client