Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/454FDCE36062C253DB2123E704D7041FA8A84619.cer
File:                     454FDCE36062C253DB2123E704D7041FA8A84619.cer (raw, json)
Hash identifier:          jZQCerqIqxomFzr5hq+dpNFnQSQ4CL3GCTWYEZOA8YI=
Subject key identifier:   45:4F:DC:E3:60:62:C2:53:DB:21:23:E7:04:D7:04:1F:A8:A8:46:19
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F44FF7E4CA9EE62A568A3BE6274726F4AA24853
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/454FDCE36062C253DB2123E704D7041FA8A84619.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 14:15:47 +0000
Certificate not after:    Wed 10 Apr 2024 14:20:47 +0000
Subordinate resources:    AS: 267995
                          IP: 45.167.48.0/22
                          IP: 2804:5664::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:44:ff:7e:4c:a9:ee:62:a5:68:a3:be:62:74:72:6f:4a:a2:48:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 14:15:47 2023 GMT
            Not After : Apr 10 14:20:47 2024 GMT
        Subject: CN=454FDCE36062C253DB2123E704D7041FA8A84619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e4:17:bc:de:39:0b:64:18:8e:7d:05:86:a3:
                    6b:be:26:d9:a5:56:13:8c:32:74:23:11:4b:6d:45:
                    e0:c6:ce:f2:89:b9:43:93:82:58:a9:d3:68:4d:4e:
                    4f:5c:49:01:19:c8:d4:05:2d:39:75:57:da:b4:ef:
                    bb:06:5c:4a:f9:60:96:56:a0:7c:65:3b:19:bc:ca:
                    d7:a5:4b:e7:30:66:8d:d2:7d:d9:fe:06:a9:ad:9f:
                    7b:9c:b1:0f:4c:d9:86:b0:ff:f8:ea:39:de:98:56:
                    7c:57:29:4e:d1:ee:ca:8a:b3:25:52:fe:80:83:cf:
                    0c:2f:17:98:d6:13:11:e9:13:83:42:37:99:50:44:
                    b8:07:bd:ae:c1:2c:17:b9:90:e3:28:ae:b1:14:3a:
                    3d:8b:6b:61:83:8b:50:1c:8c:a4:16:73:96:22:90:
                    89:3f:b0:65:27:c8:30:78:42:a2:ce:8c:83:30:a7:
                    a5:f3:4f:2b:28:6b:4d:a0:5e:86:02:ad:81:0e:4b:
                    43:b6:a4:99:34:ef:eb:9f:fa:d9:a5:64:50:62:83:
                    f0:de:91:9b:53:5b:ce:3a:9c:32:52:5c:88:7d:3a:
                    cc:c3:03:1b:0d:58:51:38:78:f2:35:f4:13:6a:49:
                    23:87:32:ef:00:60:0f:39:62:75:6d:f8:46:f1:c5:
                    37:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:4F:DC:E3:60:62:C2:53:DB:21:23:E7:04:D7:04:1F:A8:A8:46:19
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/454FDCE36062C253DB2123E704D7041FA8A84619.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.48.0/22
                IPv6:
                  2804:5664::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267995

    Signature Algorithm: sha256WithRSAEncryption
         4d:1f:e0:5f:06:97:a9:88:ab:90:d8:c2:e1:ef:1f:b7:14:a9:
         9b:de:f5:c7:41:65:a2:9f:d1:63:85:e3:e5:07:38:13:76:e3:
         7d:9c:2d:4d:83:c2:be:04:25:c7:bb:d1:ff:aa:b2:79:38:e1:
         37:64:5b:a3:d5:09:4a:17:98:09:39:aa:1f:3f:e9:30:a5:20:
         5e:13:b1:d6:8e:06:8a:6a:59:20:be:7f:7c:5a:1a:44:c9:2c:
         c7:6f:0c:2a:e9:5b:32:b0:50:76:e7:45:28:2e:c2:36:45:09:
         5f:a6:8f:25:59:c7:7b:94:c0:02:aa:b8:1b:22:c4:d8:ea:01:
         3a:ab:49:61:49:0c:83:85:40:de:89:e5:a6:71:60:c0:c4:11:
         ef:ff:f2:87:fa:ce:64:dc:c0:c3:35:89:66:3e:bb:3f:0d:0d:
         42:f4:e5:43:c1:d2:4a:6c:36:70:ba:94:84:dd:3b:94:82:b1:
         99:77:d0:da:4b:ce:2a:e7:a5:88:71:70:6d:ed:c3:7a:c8:9e:
         33:f3:41:69:22:1f:ae:10:d1:be:8b:77:2a:88:fb:8e:c3:84:
         7d:05:71:74:11:d5:79:ba:16:09:a0:90:4b:fa:56:35:e5:22:
         6e:bd:4e:5a:eb:98:3d:f2:21:ce:06:24:fb:da:f2:e0:35:08:
         ba:9d:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:40 2025 by rpki-client