Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/51842747F56E225B7BC340E292FA8A1A30A25FC6.cer
File:                     51842747F56E225B7BC340E292FA8A1A30A25FC6.cer (raw, json)
Hash identifier:          QLt5UnxbXAqdQJLuiW0UxxdnYCiagTLXngoRZsyfOkc=
Subject key identifier:   51:84:27:47:F5:6E:22:5B:7B:C3:40:E2:92:FA:8A:1A:30:A2:5F:C6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A8DDC5373EA349235B1711210D04795F09BC650
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/51842747F56E225B7BC340E292FA8A1A30A25FC6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 12:16:55 +0000
Certificate not after:    Thu 12 Sep 2024 12:21:55 +0000
Subordinate resources:    AS: 269130
                          IP: 45.180.40.0/22
                          IP: 2804:5fe4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8d:dc:53:73:ea:34:92:35:b1:71:12:10:d0:47:95:f0:9b:c6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 12:16:55 2023 GMT
            Not After : Sep 12 12:21:55 2024 GMT
        Subject: CN=51842747F56E225B7BC340E292FA8A1A30A25FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:2f:c3:9a:d1:07:e1:1c:a3:f7:68:95:95:
                    82:66:13:7b:d0:97:d9:53:6d:5c:0d:24:8d:bd:17:
                    cf:49:3a:95:19:8d:62:c1:7e:bd:6d:de:a4:59:a3:
                    ee:9b:85:c0:0c:d1:10:c6:c6:1d:06:32:c1:95:80:
                    ad:6f:1f:6a:cc:8c:9e:7f:3a:c5:c5:83:48:6a:d3:
                    7e:7e:d1:74:05:02:29:9b:06:5b:94:a9:cc:34:0e:
                    bf:ac:1d:33:2d:e3:8f:4b:5f:df:bc:48:90:cd:99:
                    37:88:45:ca:63:a7:7e:d5:45:d2:b4:33:22:76:22:
                    0a:d0:23:92:2d:ff:2a:81:6c:b3:0b:1a:51:d0:99:
                    a1:59:63:b6:48:69:14:de:cb:4c:58:0c:39:27:b4:
                    4e:16:b3:17:43:de:9c:c5:29:63:52:59:8d:72:d1:
                    8f:36:fb:92:56:9d:1e:11:82:ee:58:40:99:ad:90:
                    64:98:9d:71:59:a8:78:fd:c4:8a:7a:e7:e7:8a:89:
                    95:16:90:75:99:8d:cc:0c:fa:bf:1f:10:85:5c:38:
                    5b:ce:b2:46:03:64:43:f1:5c:1d:b5:da:c4:69:4f:
                    a3:4d:9c:2d:1b:07:7d:5e:01:e3:09:8d:87:6f:44:
                    76:78:bc:97:86:05:36:65:36:35:78:18:2a:8d:8a:
                    fd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:84:27:47:F5:6E:22:5B:7B:C3:40:E2:92:FA:8A:1A:30:A2:5F:C6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/51842747F56E225B7BC340E292FA8A1A30A25FC6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.40.0/22
                IPv6:
                  2804:5fe4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269130

    Signature Algorithm: sha256WithRSAEncryption
         2c:d5:b3:fe:4f:5a:cf:8c:d6:a3:08:7d:f9:dc:27:d4:5f:aa:
         15:bb:2b:9f:30:1a:06:5c:d2:e8:e9:25:ed:a6:c0:77:4d:2d:
         13:fe:a6:ae:92:ec:3d:fb:e7:7d:2d:45:37:af:fa:29:5a:e3:
         f6:86:13:94:e5:42:62:45:7c:95:f0:16:93:5a:62:0c:16:6c:
         27:9e:b8:ad:7a:64:4a:f9:08:94:b0:fa:77:0d:74:79:3c:95:
         ce:88:b2:87:19:d2:60:fe:54:f0:56:c0:73:cf:ac:99:80:f1:
         1d:88:a1:38:e7:f1:2e:a2:4b:77:83:85:75:03:30:22:09:3f:
         98:fe:01:9a:7b:8a:a8:19:1b:ac:e5:48:3c:16:d3:eb:e3:75:
         66:82:2b:fe:e3:63:0b:2f:10:b5:94:63:f6:21:56:d0:f8:c3:
         1a:a5:15:39:63:a1:d7:6f:b6:97:71:ec:22:09:ce:1b:9f:54:
         6b:06:d4:cd:51:b3:b0:21:9c:da:7e:17:83:8e:ba:a5:fc:50:
         fc:70:87:b7:4f:1b:d7:7b:d8:96:97:6b:3a:ee:c7:9a:4e:f2:
         e7:d2:18:c2:99:5c:d6:83:1c:6a:c0:8f:52:6f:06:23:59:da:
         32:24:ea:02:ff:68:d3:dd:d5:48:61:aa:21:bd:09:d8:d5:f2:
         db:21:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:28:56 2025 by rpki-client