Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/35A17F819978A69078DA4DF98EC0B003271A57B3.cer
File:                     35A17F819978A69078DA4DF98EC0B003271A57B3.cer (raw, json)
Hash identifier:          fiNwz+GCPbeO4tG4invzMY1Szj6DeTFXf3hXMzMxjWE=
Subject key identifier:   35:A1:7F:81:99:78:A6:90:78:DA:4D:F9:8E:C0:B0:03:27:1A:57:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5176B40259A70BF5F0FB7E771E356389FD4779D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/35A17F819978A69078DA4DF98EC0B003271A57B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 16:59:46 +0000
Certificate not after:    Thu 20 Jul 2023 17:04:46 +0000
Subordinate resources:    AS: 269063
                          IP: 45.179.24.0/22
                          IP: 2804:5ee4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:76:b4:02:59:a7:0b:f5:f0:fb:7e:77:1e:35:63:89:fd:47:79:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 16:59:46 2022 GMT
            Not After : Jul 20 17:04:46 2023 GMT
        Subject: CN=35A17F819978A69078DA4DF98EC0B003271A57B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5e:9d:be:ec:78:28:71:2d:45:cc:b2:a1:0f:
                    a5:88:fc:8e:21:db:24:4d:82:a4:81:3a:0e:32:cc:
                    81:69:69:da:49:68:2b:93:f6:ef:6f:c3:67:86:45:
                    29:7b:cc:40:59:89:65:d1:0d:c7:61:f7:e6:b5:84:
                    80:28:a6:a5:8d:d0:18:be:f6:b0:2f:9e:fb:05:46:
                    05:29:d1:47:e2:9a:45:95:98:f6:aa:11:70:29:c0:
                    d0:be:af:17:ee:ec:7d:ce:5f:a5:a7:ac:5d:7f:15:
                    a5:7e:f3:a7:41:96:40:34:92:c5:2c:d2:23:c7:e7:
                    63:30:58:16:9b:15:ab:aa:04:8b:6c:09:e5:6e:80:
                    73:d1:15:31:45:7c:0b:9e:a2:4d:1f:f2:34:ce:5d:
                    92:3d:39:01:cd:4a:c0:4e:b5:cd:47:a4:27:67:88:
                    e1:32:99:10:17:ee:26:44:35:3b:0b:e6:7b:52:bd:
                    11:74:db:c9:85:50:e0:bf:2a:1d:16:e0:f0:53:16:
                    9a:b7:b4:40:ad:57:de:bc:d2:9b:10:b0:19:e0:0c:
                    76:24:9a:2d:00:11:31:27:42:3e:6d:2c:af:28:4c:
                    64:98:52:7f:7c:9d:28:6a:e1:ce:52:c7:bc:d4:bd:
                    db:bc:5a:62:5e:dd:1b:b8:71:a5:d6:2c:f7:b1:69:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:A1:7F:81:99:78:A6:90:78:DA:4D:F9:8E:C0:B0:03:27:1A:57:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/35A17F819978A69078DA4DF98EC0B003271A57B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.24.0/22
                IPv6:
                  2804:5ee4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269063

    Signature Algorithm: sha256WithRSAEncryption
         41:fc:47:4c:54:20:fe:ac:a4:4c:42:63:f3:92:96:15:e1:6b:
         e2:32:9d:18:da:a2:d5:ad:d2:68:62:87:1b:ed:71:22:b3:2e:
         cc:5f:36:8c:b3:7b:94:c8:9b:05:1b:db:f2:19:60:3e:ec:47:
         55:26:35:1e:59:a9:9e:18:70:ec:39:76:23:97:47:1c:4a:0a:
         e6:33:37:ec:1d:b4:b8:96:7d:30:dc:3a:47:9d:2a:a6:11:92:
         60:c4:b1:80:5a:82:29:ae:b3:84:8c:67:56:3b:26:12:ad:72:
         d1:ca:97:74:72:89:80:79:48:bb:8e:3b:f2:9a:86:ac:78:97:
         48:cf:f6:c9:1b:66:39:8d:c9:2b:1d:2c:e7:c0:fb:1c:6d:7f:
         ab:09:97:4b:44:99:e1:ba:9a:3b:ca:cc:e4:8b:94:fb:b3:e6:
         2b:03:70:e8:48:bd:2e:fc:d5:4d:ac:df:c3:0f:83:97:dc:33:
         dd:5f:3f:5d:f8:70:8c:42:af:f5:03:ca:47:12:f2:e8:93:66:
         ed:e4:86:60:88:00:34:1e:79:82:5c:4f:71:6c:48:23:43:83:
         d1:69:1c:9f:4d:6e:0c:86:13:81:6f:a8:ed:a2:39:9a:3a:82:
         9d:75:ff:9a:0d:89:5e:e8:1e:42:fe:cb:fa:62:39:f3:73:ad:
         dd:8f:70:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:56 2025 by rpki-client