Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9.cer
File:                     5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9.cer (raw, json)
Hash identifier:          xc+1O2rq2YADvVMNlzJ41fia1e3f6b0SWT+O+m4DgKY=
Subject key identifier:   5C:B2:44:51:0F:FB:A9:59:99:26:5D:A2:2D:6A:8E:7F:9D:0A:8E:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       048234975C1EA70ECB993F5594B0B00248A30A89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/0/5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Jul 2022 10:23:10 +0000
Certificate not after:    Tue 25 Jul 2023 10:28:10 +0000
Subordinate resources:    AS: 266915
                          IP: 45.225.12.0/22
                          IP: 2804:4544::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:82:34:97:5c:1e:a7:0e:cb:99:3f:55:94:b0:b0:02:48:a3:0a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 26 10:23:10 2022 GMT
            Not After : Jul 25 10:28:10 2023 GMT
        Subject: CN=5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:38:be:96:53:c9:55:84:80:46:f9:9d:18:
                    89:43:19:4e:6b:59:5d:39:e5:f7:1b:e4:c4:fe:ae:
                    64:2a:db:6f:9e:15:64:e9:5a:1d:63:e6:86:c8:f0:
                    e0:e1:2d:96:64:2d:d3:09:04:2f:0b:29:08:e5:86:
                    4a:38:53:ca:9a:01:37:b8:48:1e:86:7f:06:89:c1:
                    49:96:c2:d1:5d:26:b8:38:46:06:43:d7:b3:8f:68:
                    1b:57:15:1c:5b:85:70:48:9f:1d:ae:80:c6:b0:99:
                    b5:c7:5d:7f:e2:b5:9b:e7:cb:ff:50:09:a1:65:82:
                    01:1c:76:c8:ef:cc:a1:a5:f7:92:a8:5b:ca:8d:fb:
                    e7:98:4b:d9:f8:7c:ea:cc:bc:70:8f:3c:d2:f8:21:
                    c1:04:b0:9d:46:c7:27:ac:3a:fc:42:5e:6d:af:3b:
                    3b:65:44:c9:97:e5:bc:51:29:28:bb:31:72:af:7a:
                    11:61:ed:fa:20:69:22:d8:61:e1:31:7f:e6:70:99:
                    25:e9:3d:65:32:25:af:a9:b7:2b:ea:1d:3a:ad:bf:
                    8d:57:eb:2d:eb:31:c4:fa:46:82:e4:0a:b6:86:d6:
                    c0:99:2e:57:b1:fb:39:46:df:a9:1f:c9:b3:a9:a0:
                    53:18:83:fc:5e:ed:f9:ac:3f:e0:4c:23:57:93:bb:
                    6b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:B2:44:51:0F:FB:A9:59:99:26:5D:A2:2D:6A:8E:7F:9D:0A:8E:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/0/5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.12.0/22
                IPv6:
                  2804:4544::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266915

    Signature Algorithm: sha256WithRSAEncryption
         6b:14:42:4c:b0:cf:f3:b3:d4:94:8c:d7:9a:47:77:63:58:be:
         ea:13:02:f7:d7:cd:1e:a6:c0:02:94:4e:8b:d3:59:ad:1d:f2:
         c1:cc:75:fe:de:3a:46:1a:74:db:09:64:ef:68:75:2d:7e:4a:
         d2:99:a0:fe:ae:9f:b2:19:d5:85:00:aa:4e:f2:71:ef:39:5b:
         dd:cd:40:6b:28:2e:b5:3f:8d:cc:c0:43:98:e3:a2:e3:29:dd:
         22:e9:cf:ba:2d:23:62:bc:20:11:1a:91:2e:e2:dc:b4:db:37:
         6e:1e:04:fc:96:53:0d:c3:fa:cd:16:10:18:c7:57:f8:7c:a6:
         f1:2e:44:40:37:86:b4:af:02:35:35:45:ea:fa:7a:bd:36:20:
         51:04:f3:0b:1f:1e:66:aa:41:1e:08:8e:a4:10:ed:07:c9:4e:
         6d:cb:5c:aa:fb:c7:01:e6:08:5e:01:98:0d:60:6b:48:c1:00:
         57:51:78:46:ca:2d:27:8a:9d:98:6b:9b:6b:e1:6c:75:d3:55:
         c4:ed:08:60:3b:6c:87:1c:aa:72:93:93:94:62:12:33:2c:14:
         b6:bf:a9:4f:93:7a:1d:07:36:fd:43:27:35:3d:29:90:31:d8:
         70:cd:f1:f9:14:dc:23:74:9a:d4:b9:f1:97:0e:82:ba:1f:6a:
         49:bd:f0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:21:59 2025 by rpki-client