Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/47D3D6E9883325AF990C7C06F8014F1287B1E84D.cer
File:                     47D3D6E9883325AF990C7C06F8014F1287B1E84D.cer (raw, json)
Hash identifier:          ZSttNZKOIp9ottK6DoBnCCtr/t37wXyXumpGq3ogZR8=
Subject key identifier:   47:D3:D6:E9:88:33:25:AF:99:0C:7C:06:F8:01:4F:12:87:B1:E8:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5F2ECF4E5B9ADD3DC4BE4462AEC91B33105ED074
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/47D3D6E9883325AF990C7C06F8014F1287B1E84D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 17:06:51 +0000
Certificate not after:    Tue 05 Nov 2024 17:11:51 +0000
Subordinate resources:    AS: 268925
                          IP: 45.176.4.0/22
                          IP: 2804:5cb4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2e:cf:4e:5b:9a:dd:3d:c4:be:44:62:ae:c9:1b:33:10:5e:d0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 17:06:51 2023 GMT
            Not After : Nov  5 17:11:51 2024 GMT
        Subject: CN=47D3D6E9883325AF990C7C06F8014F1287B1E84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:ce:5f:c9:0e:40:40:d1:f7:9a:70:14:d1:
                    70:c5:af:55:07:58:4a:89:aa:6e:24:9a:d8:cb:92:
                    47:ba:96:ec:d4:3d:a7:0c:d8:29:a5:6d:29:54:74:
                    5a:36:a4:1b:15:9c:4b:ea:0d:c2:0b:99:b1:e8:ac:
                    f7:8c:db:d5:c2:47:65:31:20:53:c5:0a:31:8f:9e:
                    23:80:93:01:25:98:27:39:fa:1f:f1:09:13:03:44:
                    36:3e:e5:f1:0e:0b:d0:44:57:1a:9d:64:b7:3a:5d:
                    b5:2a:05:ab:29:43:42:b1:fa:ea:38:c6:18:db:05:
                    80:ab:f5:95:22:3a:a5:bd:08:25:ed:17:ee:23:51:
                    b7:4b:41:4f:85:19:87:b1:5c:06:e7:53:b6:ca:58:
                    31:76:7d:51:dd:f8:34:fd:24:b6:b2:a3:f5:e2:78:
                    f9:a3:93:19:1f:e5:3e:2e:26:fa:72:07:e0:5b:b7:
                    7c:de:11:d6:6e:a8:54:85:86:0b:9e:9a:3b:8d:3e:
                    7b:c7:e8:53:d1:27:7e:a0:7f:f0:e0:0a:7f:56:30:
                    e7:a9:2d:74:67:e8:b2:e3:4e:ca:b4:43:50:16:06:
                    74:76:4e:23:21:c1:56:fe:a2:e7:a0:34:22:cb:08:
                    32:f1:1c:a8:b6:9c:22:1b:79:33:76:b2:fe:ea:75:
                    50:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:D3:D6:E9:88:33:25:AF:99:0C:7C:06:F8:01:4F:12:87:B1:E8:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/47D3D6E9883325AF990C7C06F8014F1287B1E84D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.4.0/22
                IPv6:
                  2804:5cb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268925

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:13:34:9f:78:a2:06:ca:99:5c:83:69:b1:44:6a:1b:5d:
         f8:cf:e4:bd:56:b9:54:b4:5a:67:bc:88:a6:89:fb:db:9b:9f:
         f9:92:18:23:29:3d:e0:d8:5a:95:e2:15:60:62:1e:75:1d:cb:
         64:9e:cd:52:3b:57:0c:4c:08:6f:65:bb:dd:89:4a:8a:fb:f7:
         15:04:21:96:6a:28:e2:7e:d1:81:9d:0c:46:07:b4:7c:6a:d7:
         a8:ac:db:f3:2b:7e:1c:55:14:a8:4c:a7:49:b7:27:14:be:df:
         65:be:b0:c2:56:71:9a:89:20:09:7f:83:ae:28:6c:81:d9:f6:
         dc:64:27:44:b3:99:5d:91:29:ef:d8:0c:4b:e9:36:02:ca:c3:
         e2:a4:d4:fa:b3:59:90:c7:7c:1b:76:fd:59:ae:78:c5:c4:94:
         85:2d:ca:93:ef:24:63:4f:42:dc:71:95:bd:37:4f:7a:74:3c:
         cc:91:ca:c2:9e:ec:a2:b9:70:03:66:da:3e:4c:ce:b0:ee:45:
         c2:0c:40:4d:97:b7:3b:28:44:dd:47:70:9d:aa:16:a1:1d:3a:
         e6:f7:50:b3:f6:28:84:74:c3:42:26:3c:d1:48:b9:04:77:65:
         a2:bf:0d:cd:12:c3:f2:ac:c0:b8:a7:f9:61:d2:84:dd:d1:80:
         dc:cf:94:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:41 2025 by rpki-client