Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4334AE73C75D6CEBFACB6CBE89A979919ADD4DF2.cer
File:                     4334AE73C75D6CEBFACB6CBE89A979919ADD4DF2.cer (raw, json)
Hash identifier:          XAIQD8uFCsCXC3n9Xq2KNfj6x1ePs+iX7cLPMoFy/6E=
Subject key identifier:   43:34:AE:73:C7:5D:6C:EB:FA:CB:6C:BE:89:A9:79:91:9A:DD:4D:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3CA5275BA2B73FB84C1FA8E11BB16D085B64A8E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/4334AE73C75D6CEBFACB6CBE89A979919ADD4DF2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Aug 2023 13:36:50 +0000
Certificate not after:    Mon 19 Aug 2024 13:41:50 +0000
Subordinate resources:    AS: 270793
                          IP: 201.159.160.0/22
                          IP: 2804:7180::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a5:27:5b:a2:b7:3f:b8:4c:1f:a8:e1:1b:b1:6d:08:5b:64:a8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 21 13:36:50 2023 GMT
            Not After : Aug 19 13:41:50 2024 GMT
        Subject: CN=4334AE73C75D6CEBFACB6CBE89A979919ADD4DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:d1:d6:23:14:10:c8:0a:bc:46:d0:87:78:
                    4c:62:9d:ca:48:84:03:af:6d:f3:c0:78:96:a3:0c:
                    c8:24:58:f4:e7:70:e1:7c:27:20:91:4a:98:ae:81:
                    89:fc:47:8b:56:56:5d:82:d9:48:57:42:77:e7:48:
                    fe:4b:42:da:5f:4c:ed:df:4e:bd:8d:be:5a:a0:43:
                    f3:70:22:43:4b:f0:28:3e:b2:8a:f2:cb:5f:1f:cc:
                    aa:7e:4f:54:02:48:95:16:07:f1:bc:17:1e:5f:de:
                    82:ec:a8:ce:0f:be:9e:c6:b3:e0:66:fc:cb:a0:1a:
                    1f:df:bb:f4:03:0c:34:cd:55:15:b4:68:7a:1c:a9:
                    c4:db:56:5e:08:0a:73:91:85:6f:0f:56:97:f4:9b:
                    77:9c:7a:25:80:cd:12:ae:d0:7e:ac:05:fa:e8:01:
                    d8:43:22:bc:d9:db:3b:4e:11:ae:d3:c2:8f:46:40:
                    f3:f3:b1:53:de:23:f4:de:64:27:70:8f:06:fc:53:
                    48:ee:2e:aa:9f:41:eb:c8:e5:89:04:14:65:f9:bb:
                    c0:40:ee:29:f6:9d:69:92:21:8a:a5:84:d0:79:f7:
                    aa:71:a5:93:b4:5e:41:21:ed:c6:4d:90:d9:46:4e:
                    c4:ab:c0:f7:29:0e:5d:95:c4:96:b3:4d:13:4e:e2:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:34:AE:73:C7:5D:6C:EB:FA:CB:6C:BE:89:A9:79:91:9A:DD:4D:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/4334AE73C75D6CEBFACB6CBE89A979919ADD4DF2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.160.0/22
                IPv6:
                  2804:7180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270793

    Signature Algorithm: sha256WithRSAEncryption
         60:61:69:54:39:c5:76:39:d3:89:73:b4:1e:12:c5:0e:01:08:
         a9:cb:67:a7:ae:d2:04:b6:1b:44:d1:87:e9:da:f7:5a:2e:cd:
         e1:87:d1:26:1b:3d:a4:fa:1b:6a:fb:02:52:10:8d:d5:9c:51:
         52:f3:29:0a:de:32:cb:e2:37:ee:3b:1b:1a:d7:ca:8f:7b:09:
         d5:7c:32:f4:a2:29:f3:81:11:f5:87:66:66:ae:43:e9:d1:dc:
         56:3f:db:c0:e5:47:be:46:3c:02:90:02:a2:5e:a3:99:0a:b1:
         60:3b:5b:4d:ad:08:45:39:5d:d6:7e:dc:21:a0:d2:0e:b4:0c:
         f7:80:22:9a:14:db:46:05:a0:46:8e:a3:4d:9b:e4:ca:c6:fe:
         18:b8:d5:d5:9b:0c:7a:d8:82:e0:b2:e5:1b:34:8d:4d:e0:77:
         bc:2e:e1:62:80:62:1a:5b:2a:5a:27:9a:f4:6a:ac:88:0b:31:
         b4:8e:9e:17:b2:45:0d:2b:30:b7:c5:a5:a7:9d:d3:cd:04:e4:
         c6:c5:3e:23:4d:64:b5:28:98:fa:15:83:c1:fe:86:46:e6:80:
         4d:3d:5c:7e:18:d1:c3:74:bc:f4:e8:bf:ca:cd:c7:1e:c1:5f:
         eb:7f:47:10:d1:99:48:e6:37:d4:55:47:a0:d0:11:a9:a8:8a:
         2b:ff:49:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:22:05 2025 by rpki-client