Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5342CDE82F76028189732D69D699BB167013A089.cer
File:                     5342CDE82F76028189732D69D699BB167013A089.cer (raw, json)
Hash identifier:          7/XcyCkTLmVqgXx6QJ9HBaU2T12//IIo+sOh/u+NqaQ=
Subject key identifier:   53:42:CD:E8:2F:76:02:81:89:73:2D:69:D6:99:BB:16:70:13:A0:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38F650173ED518DDAC671707BEAC786DB24AB4FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/5342CDE82F76028189732D69D699BB167013A089.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 18:09:13 +0000
Certificate not after:    Mon 16 Sep 2024 18:14:13 +0000
Subordinate resources:    AS: 268927
                          IP: 45.176.28.0/22
                          IP: 2804:5cbc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f6:50:17:3e:d5:18:dd:ac:67:17:07:be:ac:78:6d:b2:4a:b4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 18:09:13 2023 GMT
            Not After : Sep 16 18:14:13 2024 GMT
        Subject: CN=5342CDE82F76028189732D69D699BB167013A089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:3f:a0:de:7e:6d:1c:8f:16:99:a3:9a:71:
                    9f:0c:d1:dd:4e:43:f6:8f:0e:22:8b:eb:dd:c3:b8:
                    47:5f:6b:e3:db:55:33:6a:1c:48:e6:fd:d6:6c:0c:
                    c3:f1:d1:2e:ea:93:0b:75:e3:d0:8f:b7:01:4c:0e:
                    06:ee:8f:4e:1f:23:43:51:4c:b3:b7:d0:87:4a:71:
                    2b:c9:84:6d:55:2e:a4:78:0f:e6:d9:37:c3:91:62:
                    2f:3a:c2:ef:ff:3d:68:fd:44:28:36:d2:db:76:47:
                    7b:f5:1c:e6:15:0d:6e:9e:45:23:15:4d:fc:1c:ba:
                    9d:ae:26:da:a8:fa:60:7e:cb:75:1c:1f:ce:04:22:
                    67:68:08:a8:dd:f2:b5:03:a0:5a:e8:f9:69:7c:6b:
                    1c:a8:7d:0f:e9:4f:e1:20:90:18:c1:8a:24:8b:04:
                    1d:e9:ef:7d:53:50:84:cf:38:39:0d:9a:6d:5b:ef:
                    ab:56:19:22:e3:ac:ac:8b:f6:2f:23:cc:b5:6c:1e:
                    11:18:8c:51:6a:3d:16:f1:3a:04:7a:6e:4b:b5:ed:
                    61:69:af:f4:0c:61:f3:bf:e3:69:80:01:da:4a:c4:
                    bd:a5:4a:70:33:1e:f7:30:61:e8:f2:6c:c7:a8:88:
                    78:1a:14:6c:53:b6:e5:6a:54:41:63:86:16:76:a4:
                    74:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:42:CD:E8:2F:76:02:81:89:73:2D:69:D6:99:BB:16:70:13:A0:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/5342CDE82F76028189732D69D699BB167013A089.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.28.0/22
                IPv6:
                  2804:5cbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268927

    Signature Algorithm: sha256WithRSAEncryption
         5c:74:c6:97:d1:85:76:6c:ba:ae:85:55:7d:9d:64:5d:e5:57:
         9c:d9:7e:3a:a3:d5:9b:b8:5a:bc:2b:f1:b5:cd:92:00:bf:b3:
         b7:59:94:82:cf:49:cf:a6:d7:77:56:f0:f8:e2:1a:af:78:03:
         17:8d:c7:53:2c:b9:d0:6b:7a:07:f0:48:fd:f3:e1:08:a2:79:
         41:1c:4f:f7:3e:4e:3d:3a:e7:38:56:23:53:30:2d:05:0b:10:
         39:f7:5d:36:9a:39:23:a6:a6:22:45:a1:cd:9e:46:75:ff:79:
         ad:c3:60:09:bf:3a:85:e5:2b:db:d9:16:df:8d:0a:bf:74:86:
         e1:6d:fb:8e:30:8d:74:80:23:bd:83:f7:2e:c4:32:8a:bc:34:
         e5:df:69:88:ba:9d:c3:74:28:df:3b:08:1c:9d:a5:78:28:34:
         14:4d:5d:bb:43:26:ac:e8:22:06:af:96:a8:34:fe:80:f7:77:
         a2:fd:93:b1:e1:fc:29:18:bb:7e:51:44:e1:d1:a5:4d:ae:b2:
         9d:f1:cc:d8:93:0f:46:e1:76:ad:e0:a0:1a:bb:aa:04:7e:0a:
         d2:5d:93:11:b8:ec:a7:00:04:34:8e:19:6c:e5:b4:94:78:f2:
         ca:f7:21:fd:54:e5:51:d3:d2:71:11:98:a1:ca:f0:3f:cf:bc:
         d8:b0:92:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:38:52 2025 by rpki-client