Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/52C2D2D95550402788E9A3D1C56D0CD1B1FAE260.cer
File:                     52C2D2D95550402788E9A3D1C56D0CD1B1FAE260.cer (raw, json)
Hash identifier:          wVdiMXvRob9KbFrBMjaG+M/793wWfg6Q7DgEMqGr57g=
Subject key identifier:   52:C2:D2:D9:55:50:40:27:88:E9:A3:D1:C5:6D:0C:D1:B1:FA:E2:60
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6465459F765C82ADA90BE30A029F7AB2B424EACF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/75wUFrAD3LVx8fJBG91kx158Cui9WbJ2Wj6DfH9EqNde/0/52C2D2D95550402788E9A3D1C56D0CD1B1FAE260.mft
caRepository:             rsync://rpki-repo.registro.br/repo/75wUFrAD3LVx8fJBG91kx158Cui9WbJ2Wj6DfH9EqNde/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Dec 2022 15:50:50 +0000
Certificate not after:    Mon 11 Dec 2023 15:55:50 +0000
Subordinate resources:    AS: 272665
                          IP: 2804:86c4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:65:45:9f:76:5c:82:ad:a9:0b:e3:0a:02:9f:7a:b2:b4:24:ea:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 12 15:50:50 2022 GMT
            Not After : Dec 11 15:55:50 2023 GMT
        Subject: CN=52C2D2D95550402788E9A3D1C56D0CD1B1FAE260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:08:1d:57:17:a7:e9:59:70:f3:a2:61:26:
                    ca:49:37:59:34:3f:a9:76:2a:9f:82:40:ab:26:80:
                    e5:cd:ed:d7:90:b4:a9:8c:31:f7:d1:df:5d:97:49:
                    ed:b9:db:12:3d:30:8b:3d:a1:bb:eb:57:f6:f9:7a:
                    f6:03:96:c4:7b:4d:8e:30:fd:b4:cf:5a:70:e5:44:
                    29:50:06:7a:6b:80:16:17:2f:87:b6:fa:af:db:59:
                    73:09:d5:26:85:71:42:79:60:a2:f2:3b:34:b7:3e:
                    cc:70:1f:96:68:a0:e9:ee:07:82:b0:69:2f:85:74:
                    00:cf:dd:c3:3d:34:d1:29:c9:ec:5e:53:fa:92:55:
                    f9:3a:d4:62:00:be:93:fe:2d:40:aa:1a:14:20:c4:
                    14:b3:ce:fb:61:fa:f2:3e:9d:15:bc:a2:01:2b:bc:
                    a5:99:fa:72:d8:99:4d:65:85:9f:4d:ba:b2:7e:6e:
                    01:87:33:71:45:b8:54:35:3e:4b:a5:fa:1b:b9:d9:
                    60:97:0c:b0:46:08:bd:ab:38:b4:79:81:9e:a6:c2:
                    1e:34:cb:f2:27:63:44:ee:11:2e:f3:4d:e9:62:20:
                    7f:f7:55:f6:21:59:2b:d4:b1:0f:d5:11:f2:1a:ca:
                    4f:12:26:b2:14:f4:7f:28:70:aa:de:bd:30:8a:6e:
                    91:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:C2:D2:D9:55:50:40:27:88:E9:A3:D1:C5:6D:0C:D1:B1:FA:E2:60
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/75wUFrAD3LVx8fJBG91kx158Cui9WbJ2Wj6DfH9EqNde/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/75wUFrAD3LVx8fJBG91kx158Cui9WbJ2Wj6DfH9EqNde/0/52C2D2D95550402788E9A3D1C56D0CD1B1FAE260.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272665

    Signature Algorithm: sha256WithRSAEncryption
         90:6e:a2:2a:0c:1f:81:f0:70:f5:fe:73:8b:4c:52:6f:01:6c:
         4d:2d:07:5e:d3:db:40:de:7e:f2:64:dd:71:30:e0:e2:32:b7:
         53:61:4f:f8:64:0b:07:a0:68:69:fb:88:96:3c:ec:e5:a7:0a:
         dd:76:3e:46:71:a0:4c:11:87:23:a7:17:db:42:1c:27:51:f3:
         4e:03:e8:f0:46:7b:ac:25:2a:f1:12:ef:8f:c9:92:e9:a2:c9:
         d0:e9:bf:77:37:69:9c:0b:6f:fa:77:14:01:9d:a8:92:a3:de:
         92:80:12:65:98:09:25:72:52:ab:71:46:48:a4:a5:33:d6:7e:
         ac:c7:20:4a:1e:16:95:87:8b:ff:2a:8a:a6:59:38:47:ee:9c:
         3e:df:27:c7:57:0a:c3:33:39:41:c9:00:1d:ba:6e:8a:fb:d8:
         b0:86:7f:4b:43:04:02:db:e3:cf:1a:b8:9a:68:fb:5b:c9:86:
         f2:c4:b5:e4:b5:fe:c0:56:d7:12:74:4e:7f:94:f4:62:7e:1b:
         27:63:15:09:54:b3:c3:22:27:ed:57:d9:53:8d:0f:a3:0b:72:
         8e:fe:65:bf:76:dc:b6:4c:e8:fb:0c:24:db:9a:c4:11:bb:da:
         74:de:9d:df:64:c2:94:c5:80:5e:33:3b:53:eb:51:d4:ab:0f:
         6b:3d:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:43:52 2025 by rpki-client