Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/355C6A78825EE283EF5892E1942AE80BDC047FB0.cer
File:                     355C6A78825EE283EF5892E1942AE80BDC047FB0.cer (raw, json)
Hash identifier:          r+aW5vIDBDYHX+eA06s379HUGlnaF7JhXDhgEPVcxF0=
Subject key identifier:   35:5C:6A:78:82:5E:E2:83:EF:58:92:E1:94:2A:E8:0B:DC:04:7F:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51E3D8435AA71BEAA7B73EDA5B382A680EA3631C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/355C6A78825EE283EF5892E1942AE80BDC047FB0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Dec 2021 12:31:30 +0000
Certificate not after:    Mon 26 Dec 2022 12:36:30 +0000
Subordinate resources:    AS: 21574
                          IP: 168.227.200.0/22
                          IP: 186.249.224.0/20
                          IP: 187.1.176.0/20
                          IP: 200.169.0.0/20
                          IP: 2804:23ec::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e3:d8:43:5a:a7:1b:ea:a7:b7:3e:da:5b:38:2a:68:0e:a3:63:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 12:31:30 2021 GMT
            Not After : Dec 26 12:36:30 2022 GMT
        Subject: CN=355C6A78825EE283EF5892E1942AE80BDC047FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9f:2e:eb:b3:0e:28:18:57:ef:27:23:9c:9b:
                    88:6c:97:2d:54:f2:d6:d5:9a:6a:24:b9:92:87:c7:
                    7c:d3:14:32:43:56:a9:38:fb:66:a3:b7:d9:52:cc:
                    b6:4e:4a:0f:c4:94:f7:95:47:28:7b:01:7f:71:72:
                    95:08:68:7a:a1:ab:c0:65:4d:bf:b2:28:52:2b:a5:
                    d8:91:07:0b:e7:76:18:e2:26:10:e2:bb:8e:38:3c:
                    36:b7:25:de:13:ae:b6:35:94:08:9b:63:a6:e8:3e:
                    0a:fd:32:00:46:04:80:86:3f:b4:24:14:d8:57:82:
                    43:68:18:e3:af:42:47:80:8b:cc:4a:43:27:62:4f:
                    e4:be:69:7a:9b:2d:9d:0b:2d:73:e0:c2:69:8d:c2:
                    66:10:20:97:87:31:94:30:33:9a:8d:42:9e:35:40:
                    5d:9a:af:3f:e3:b2:ed:6e:76:f5:55:f9:87:74:1b:
                    11:63:2d:52:19:74:a7:c0:8e:03:dd:2b:11:76:77:
                    47:c5:69:6c:2d:31:ca:25:16:f2:87:4d:94:15:b1:
                    41:ba:be:70:71:ec:6a:5a:0b:6e:a1:ce:b0:f6:7d:
                    d4:fd:75:54:00:4c:69:a8:ef:8a:1d:fd:0b:8b:57:
                    bc:e0:e6:92:33:84:92:6c:d0:6a:a0:c7:a9:0f:12:
                    48:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:5C:6A:78:82:5E:E2:83:EF:58:92:E1:94:2A:E8:0B:DC:04:7F:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/355C6A78825EE283EF5892E1942AE80BDC047FB0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.200.0/22
                  186.249.224.0/20
                  187.1.176.0/20
                  200.169.0.0/20
                IPv6:
                  2804:23ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21574

    Signature Algorithm: sha256WithRSAEncryption
         60:8c:34:94:ab:12:71:0e:a1:ff:7e:09:7c:2f:48:81:30:ee:
         3e:7e:5d:41:4f:97:2a:0f:fd:0e:2b:2a:e7:40:0e:99:3b:fe:
         2b:23:6d:bf:1e:f1:b4:88:f4:74:c1:9e:a2:33:7b:7b:d4:af:
         bd:39:c2:19:4d:c0:6f:ad:ee:22:9b:e0:9c:f4:32:a9:49:89:
         a2:9a:e6:03:4c:5f:61:b4:99:17:19:bc:4d:6d:08:25:76:b1:
         f0:7c:03:e5:ac:a1:91:dc:8a:c2:fe:a2:cb:b2:68:db:41:f5:
         4d:95:9c:82:46:b6:b8:ec:85:05:14:df:63:0f:17:b7:26:c5:
         70:db:bb:1b:5c:5f:9f:1a:ea:1b:c8:3f:b4:2e:d3:df:a1:e9:
         e6:be:98:5f:82:7c:54:07:35:0b:0e:7e:93:36:e6:d0:49:5d:
         cc:98:37:06:9d:7a:28:7c:b0:93:43:54:55:ee:c2:37:f8:2e:
         06:43:ec:12:03:88:9e:4f:ca:26:53:2e:02:91:88:7a:86:1e:
         ab:b2:50:0a:d3:1f:dc:18:06:85:78:13:d1:b9:c8:a3:8e:75:
         3d:0d:5a:af:c5:eb:e3:1f:ff:e7:b8:d6:55:6d:79:0d:78:b0:
         ba:6b:73:99:30:7c:c0:80:33:fa:cb:43:71:3f:67:be:c6:b7:
         55:94:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 01:24:25 2025 by rpki-client