Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/57A337DD2EB6482B8C89FCE3901BF412190C1DFE.cer
File:                     57A337DD2EB6482B8C89FCE3901BF412190C1DFE.cer (raw, json)
Hash identifier:          zyLECdUSeqIZWbf/Z7SiLH1vAvpVF9go/rbHknb04io=
Subject key identifier:   57:A3:37:DD:2E:B6:48:2B:8C:89:FC:E3:90:1B:F4:12:19:0C:1D:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       44408489DA04F8BAEEAEF0A248E362D6023399C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/57A337DD2EB6482B8C89FCE3901BF412190C1DFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jan 2024 14:56:24 +0000
Certificate not after:    Mon 06 Jan 2025 15:01:24 +0000
Subordinate resources:    AS: 271429
                          IP: 45.181.76.0/24
                          IP: 164.163.4.0/24
                          IP: 177.128.174.0/24
                          IP: 2804:7b64::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:40:84:89:da:04:f8:ba:ee:ae:f0:a2:48:e3:62:d6:02:33:99:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  8 14:56:24 2024 GMT
            Not After : Jan  6 15:01:24 2025 GMT
        Subject: CN=57A337DD2EB6482B8C89FCE3901BF412190C1DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:04:ef:70:d8:5d:82:08:58:a4:4a:1e:26:83:
                    5b:d5:1f:3f:8f:42:a0:27:9d:9a:0e:30:0d:d5:e9:
                    63:2f:12:7b:52:f7:79:57:47:3e:28:d8:5b:53:4b:
                    37:bc:f4:09:ff:e9:d8:98:1d:98:71:d5:5c:e8:ec:
                    bb:a7:69:4d:92:5f:e5:ad:da:0d:8c:7a:05:ad:f0:
                    a8:a6:c0:ef:b3:91:88:82:22:e2:3b:df:da:0a:d9:
                    34:57:21:f6:ad:fb:36:bc:29:0b:3d:9f:a0:03:b0:
                    27:e6:14:ba:dd:80:08:b1:a7:4d:b7:2a:20:4e:ae:
                    ca:1c:8b:9e:8a:90:da:c0:90:07:0e:0d:68:28:ed:
                    65:10:6e:79:8c:0d:cf:07:fa:f6:a6:b8:d4:9f:8d:
                    f0:e5:08:73:b4:3e:01:8b:b0:2c:79:e1:80:a7:00:
                    96:2c:7d:de:be:61:1f:04:e6:38:c3:f9:f3:d9:56:
                    7d:c6:63:89:99:c3:25:e2:20:16:da:10:08:7e:94:
                    24:4d:22:c7:42:ed:7b:35:87:ce:2d:cf:63:77:9b:
                    65:2b:ec:16:fc:28:68:28:03:3c:16:dd:da:9f:17:
                    da:d5:0a:b0:de:fd:1c:97:28:36:a6:7f:c5:2e:34:
                    40:09:33:2c:f5:b3:b2:ee:a9:41:82:81:f0:30:3f:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:A3:37:DD:2E:B6:48:2B:8C:89:FC:E3:90:1B:F4:12:19:0C:1D:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/57A337DD2EB6482B8C89FCE3901BF412190C1DFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.76.0/24
                  164.163.4.0/24
                  177.128.174.0/24
                IPv6:
                  2804:7b64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271429

    Signature Algorithm: sha256WithRSAEncryption
         90:5d:13:e8:54:c9:be:5a:1b:cd:57:b5:80:63:82:21:f6:f0:
         db:f3:72:bd:df:45:7a:3e:86:dd:ae:ce:39:a9:c3:ab:e3:6c:
         7c:54:ef:91:e6:d1:5a:c9:ac:e2:29:46:37:64:16:6e:82:60:
         7e:5d:59:b4:14:2e:c8:45:7f:b7:cf:71:0a:60:82:d7:e0:fc:
         64:ac:95:76:50:ee:23:86:bb:47:3a:04:10:c1:1c:af:49:7a:
         11:85:d3:46:26:27:86:72:77:9a:8f:67:3c:1b:5b:e3:cf:2c:
         05:63:fc:50:d8:dc:02:fc:09:6d:0b:74:9e:34:02:c6:49:ca:
         47:08:ef:ef:1b:bd:23:ff:76:a7:20:45:80:0e:11:80:e4:cc:
         8d:c2:d6:e8:1c:11:5b:ee:ea:bf:bb:c0:3f:1c:36:ea:3f:b6:
         d1:f4:94:76:de:36:84:79:6e:7c:28:2a:f5:dd:98:c5:82:b0:
         8e:4c:3b:a6:36:19:0d:94:5b:35:5f:ab:2e:91:b5:57:6f:e7:
         30:7d:68:58:e5:bc:fa:4e:94:5c:aa:c1:08:9d:a3:40:c1:6d:
         d4:0c:ee:83:8d:04:ff:17:e2:da:e3:76:5c:cb:16:b0:6b:84:
         12:22:ac:39:e5:57:de:86:c7:46:4d:c7:c7:28:d9:58:8e:3f:
         ec:33:78:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:05:31 2025 by rpki-client