Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/55345C8D21D44B9660857308EC3771BC139B74CA.cer
File:                     55345C8D21D44B9660857308EC3771BC139B74CA.cer (raw, json)
Hash identifier:          Ui840Qw9Zbf4NTU//TM+ei03z4NZDXDpiNYS9DHeqGE=
Subject key identifier:   55:34:5C:8D:21:D4:4B:96:60:85:73:08:EC:37:71:BC:13:9B:74:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F1D60D77398B077201936DBD85533FF1994FBD0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/55345C8D21D44B9660857308EC3771BC139B74CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Feb 2024 14:38:51 +0000
Certificate not after:    Fri 31 Jan 2025 14:43:51 +0000
Subordinate resources:    AS: 268556
                          IP: 45.163.172.0/22
                          IP: 2804:5300::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1d:60:d7:73:98:b0:77:20:19:36:db:d8:55:33:ff:19:94:fb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  2 14:38:51 2024 GMT
            Not After : Jan 31 14:43:51 2025 GMT
        Subject: CN=55345C8D21D44B9660857308EC3771BC139B74CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:21:ef:42:d5:69:6a:9a:8c:bf:da:af:67:
                    52:93:7a:cd:74:43:b1:5a:8e:0e:a1:57:20:ab:e7:
                    10:af:b5:34:b7:d9:b9:a5:20:5f:07:c3:18:18:ee:
                    61:01:b7:29:d6:56:dd:d2:4e:ea:b6:87:40:93:9a:
                    6b:d6:6e:b0:57:d0:0c:86:e2:f3:69:4b:a5:a1:04:
                    be:d6:48:b4:0a:cd:c9:50:fa:c9:fb:67:df:87:4f:
                    58:0c:0c:0a:34:69:ca:34:a2:22:53:ac:21:65:6d:
                    a4:65:4d:77:c6:e9:46:22:db:b4:25:c4:a0:e8:54:
                    be:88:a7:ed:b7:3f:40:f5:0a:fc:95:04:04:ef:29:
                    45:b7:3b:1a:1a:6f:f5:b3:99:40:4b:ea:d5:8f:5a:
                    98:81:7f:88:da:6e:27:2a:b1:af:7e:51:4e:e0:21:
                    f8:7d:e3:5e:a8:26:e2:41:96:64:42:35:32:a7:90:
                    f9:99:e9:63:d1:87:8b:87:6e:c4:b6:f5:d7:eb:dc:
                    fb:2e:5d:fc:cc:e3:66:c8:b1:30:46:58:36:73:82:
                    90:d1:20:17:0e:e5:31:ba:04:a3:b2:34:b5:0b:3e:
                    ab:1c:ad:84:88:56:d0:d2:dd:91:66:ef:ad:1a:ee:
                    a0:2e:ee:c1:c4:29:d2:d5:cc:0c:cf:77:ef:ce:b0:
                    63:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:34:5C:8D:21:D4:4B:96:60:85:73:08:EC:37:71:BC:13:9B:74:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/55345C8D21D44B9660857308EC3771BC139B74CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.172.0/22
                IPv6:
                  2804:5300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268556

    Signature Algorithm: sha256WithRSAEncryption
         45:0b:d2:bb:a9:a8:20:db:45:d8:7d:62:c5:b2:89:2c:fa:fb:
         ec:58:2e:5e:bf:e0:84:6e:ef:56:84:80:31:e6:ff:4c:2c:22:
         eb:00:43:2a:31:29:17:c9:5f:f9:ca:17:74:2e:a3:d4:d5:45:
         6e:42:b7:37:6e:d8:e3:5e:26:ec:30:5e:af:31:2d:e6:69:a1:
         21:f3:94:91:e0:ee:d5:45:f1:29:af:df:e2:93:fb:2b:4c:e0:
         42:9b:ca:8a:98:e8:5e:f9:58:fe:2c:d5:5b:39:2d:28:74:8a:
         a3:30:f9:06:47:b9:65:df:e8:6f:f8:c0:a6:75:c7:e0:98:0f:
         40:7c:23:a5:05:1c:fb:84:dd:1f:8f:b1:07:b3:8e:04:4b:e7:
         9b:cd:50:0a:54:0b:1d:9e:17:47:72:e9:ca:58:c4:48:29:45:
         dc:71:0a:0e:02:b4:76:ed:01:62:37:dd:f6:95:0f:aa:eb:24:
         19:4d:b5:ea:05:6b:75:71:71:e0:69:64:72:4e:8e:1b:a6:b5:
         d1:89:1d:87:f3:e8:53:6d:24:70:68:09:6d:41:99:3c:b2:26:
         00:4e:f0:39:ca:d6:9f:db:87:73:59:c0:98:96:d7:5d:28:d1:
         e0:23:6f:cf:90:c5:01:0e:33:d4:2c:d8:81:a3:6a:fa:da:fe:
         88:70:52:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:55 2025 by rpki-client