Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.cer
File:                     458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.cer (raw, json)
Hash identifier:          al7dlBcjJ5fI+vXscfYz9kHr9xPMy/L0btG33E1u3Wk=
Subject key identifier:   45:8B:0D:FA:16:A8:C6:30:CA:CC:3A:E2:F4:E4:CA:B2:34:C0:92:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       446904E4FD3AA063F3E68D016191CF96912C1222
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Feb 2023 13:55:30 +0000
Certificate not after:    Thu 01 Feb 2024 14:00:30 +0000
Subordinate resources:    AS: 263998
                          IP: 143.0.84.0/22
                          IP: 170.245.200.0/22
                          IP: 2804:291c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:69:04:e4:fd:3a:a0:63:f3:e6:8d:01:61:91:cf:96:91:2c:12:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  2 13:55:30 2023 GMT
            Not After : Feb  1 14:00:30 2024 GMT
        Subject: CN=458B0DFA16A8C630CACC3AE2F4E4CAB234C09299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:9e:ac:84:95:11:cd:92:3a:1d:85:64:b5:
                    4c:39:68:b2:11:92:2c:33:f5:e9:74:43:06:26:ca:
                    6a:64:ca:d4:03:32:8f:e9:87:e0:ba:01:f9:14:e3:
                    e0:3d:4a:dc:d7:55:26:07:d6:ae:31:b7:17:3b:0f:
                    61:c8:b6:8a:bb:7f:d6:c5:b1:a6:c2:2e:00:10:ee:
                    e6:21:d7:a3:d1:c4:be:ab:66:52:00:6b:80:56:0c:
                    81:6f:24:30:74:a7:2c:fb:fb:26:32:27:f6:5c:fe:
                    43:00:c7:26:17:fe:ac:fb:7f:bd:94:30:13:6c:1b:
                    be:04:e1:bd:5b:c5:bd:ae:9e:f2:6e:66:dc:d7:5a:
                    bd:9f:22:df:a3:3e:62:f0:35:69:c8:37:3e:df:04:
                    92:67:f2:5b:9e:c8:c9:ed:fe:5c:1c:38:4e:5f:83:
                    fd:e4:94:f7:f6:0e:9e:d0:63:81:18:53:94:89:84:
                    d8:8e:9e:62:3b:a9:a1:22:f8:5f:20:0e:c9:9b:39:
                    44:7e:5d:d6:d8:25:c0:d6:4c:73:4f:72:a1:5d:01:
                    66:ba:36:c7:5e:04:83:71:7a:1c:e4:19:09:49:6e:
                    8d:03:71:be:61:5d:05:dc:8a:27:03:a7:f1:2e:75:
                    05:92:73:ed:f3:f2:7a:14:93:58:83:ac:89:2b:f6:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:8B:0D:FA:16:A8:C6:30:CA:CC:3A:E2:F4:E4:CA:B2:34:C0:92:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.84.0/22
                  170.245.200.0/22
                IPv6:
                  2804:291c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263998

    Signature Algorithm: sha256WithRSAEncryption
         46:34:bb:c0:c3:82:33:71:06:d5:28:ce:2e:5f:78:06:a5:b4:
         6b:0e:ed:92:ab:55:e8:29:b6:96:0e:15:52:ed:7b:2d:50:57:
         9e:38:67:22:b5:16:4f:9b:9c:51:e7:a5:e5:b2:1a:86:d4:99:
         9b:78:a5:14:2b:79:04:de:44:50:ad:98:91:07:52:77:16:40:
         da:d4:33:b7:fe:5b:a2:5b:c1:fe:b0:aa:d3:93:37:75:ae:bf:
         90:c7:31:84:b9:86:80:ef:65:f8:1d:0b:7e:4f:9b:af:ff:fc:
         4b:c4:4b:b1:50:06:09:8f:df:85:cf:41:8d:d4:c5:38:40:e9:
         d1:50:2d:11:5c:ed:00:87:7e:0e:7a:4f:5d:73:41:0c:b2:35:
         dc:e1:e7:fe:da:cf:ee:b5:c1:5f:20:f4:50:d8:77:c6:c2:54:
         f3:9c:1b:1a:f7:8a:b3:90:bc:40:bd:6c:6e:05:be:d7:6e:c6:
         40:05:dd:f4:b9:77:0f:eb:b3:c9:f0:09:c7:0c:91:66:3c:e8:
         55:92:9b:0b:b8:0e:38:17:99:9b:87:e0:cc:43:c1:7a:dc:60:
         8a:2b:6b:d8:22:2e:34:3d:d0:17:e1:28:07:8c:81:89:6c:a2:
         05:1d:fd:4b:0d:62:71:5b:cf:d4:08:c0:36:b4:5a:05:c7:4a:
         64:a5:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:20 2025 by rpki-client