Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5D14D1558C9CAC9E4FB135A78D67ADE0628CBDFD.cer
File:                     5D14D1558C9CAC9E4FB135A78D67ADE0628CBDFD.cer (raw, json)
Hash identifier:          Rb5Z/w0vy+V8mCRpeGqy0fwMOQmNedp1LvDeveWnACI=
Subject key identifier:   5D:14:D1:55:8C:9C:AC:9E:4F:B1:35:A7:8D:67:AD:E0:62:8C:BD:FD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A5998F72C60D17AD6F8FB23B54D33D42CF67415
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/5D14D1558C9CAC9E4FB135A78D67ADE0628CBDFD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 17:35:27 +0000
Certificate not after:    Mon 10 Mar 2025 17:40:27 +0000
Subordinate resources:    AS: 61868
                          IP: 45.226.192.0/22
                          IP: 131.0.32.0/22
                          IP: 2804:1a90::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:59:98:f7:2c:60:d1:7a:d6:f8:fb:23:b5:4d:33:d4:2c:f6:74:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 17:35:27 2024 GMT
            Not After : Mar 10 17:40:27 2025 GMT
        Subject: CN=5D14D1558C9CAC9E4FB135A78D67ADE0628CBDFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:e4:51:3e:a3:25:98:86:41:9c:6d:12:5e:
                    08:cc:fc:cf:8f:52:bb:22:e4:58:65:82:4b:72:d7:
                    30:60:c3:49:8e:1f:44:36:34:13:f1:f4:3b:60:c3:
                    ea:5e:8f:12:14:1b:b1:c0:60:56:f6:96:b5:1f:c7:
                    73:bd:55:9a:20:a0:0f:85:0b:7b:a1:8e:1a:24:de:
                    07:da:86:62:1b:6c:78:d1:b3:43:f7:65:af:c0:95:
                    10:0d:ad:d2:c5:57:97:28:86:43:bc:11:8a:3a:75:
                    e0:00:9f:60:84:a2:54:5c:cf:69:14:1d:73:62:60:
                    2e:38:9b:01:b4:15:ef:44:b8:2f:24:05:12:70:c1:
                    6b:f7:f6:c9:37:4d:c0:6e:04:34:8a:ec:68:52:52:
                    23:b1:26:75:aa:d7:3f:41:eb:16:ed:33:e2:85:17:
                    6a:b6:69:e1:7e:c0:c4:03:91:f4:b0:19:5c:fa:88:
                    75:6c:8f:6d:5d:d2:12:5c:3e:27:4a:80:41:34:c4:
                    47:e0:8f:3a:83:c0:c3:4a:f9:fd:78:23:c2:40:28:
                    bb:b4:7e:49:be:06:ae:a9:e1:f6:11:ee:76:eb:ec:
                    cb:38:9c:a2:33:81:9f:01:51:9c:af:3f:51:64:1e:
                    77:9a:f0:14:76:87:0c:7a:53:3e:7a:b8:fe:3c:72:
                    e4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:14:D1:55:8C:9C:AC:9E:4F:B1:35:A7:8D:67:AD:E0:62:8C:BD:FD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/5D14D1558C9CAC9E4FB135A78D67ADE0628CBDFD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.192.0/22
                  131.0.32.0/22
                IPv6:
                  2804:1a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61868

    Signature Algorithm: sha256WithRSAEncryption
         6c:1a:46:7c:b8:90:ab:67:f0:0e:6c:7a:1c:43:d4:64:c1:1b:
         61:b9:08:b3:45:4d:8e:88:ed:3c:ed:c6:06:96:da:ad:8b:dc:
         2c:71:3f:17:7b:01:49:f6:fd:41:af:53:8f:e1:93:d6:89:cb:
         36:04:15:65:8f:ea:9d:14:8b:d1:3d:0f:1e:ab:29:21:34:5b:
         36:4d:a2:d1:ef:2a:eb:74:8e:43:82:da:e7:e5:8b:9a:15:69:
         3a:51:e1:04:c6:3e:0d:59:03:fa:dd:70:ef:cd:e5:3e:26:e7:
         11:e5:88:00:63:89:16:5a:35:44:e9:24:1a:6f:e1:7f:74:4a:
         b4:08:a8:a3:fb:27:2f:bd:1e:8e:a9:64:79:a7:3c:cb:34:4d:
         58:f0:98:52:7c:d3:0e:e1:b8:18:23:09:d3:73:29:04:96:23:
         59:d4:dd:71:21:9e:c2:0d:82:7a:a1:78:09:fb:38:81:73:82:
         8d:4a:8c:09:f7:98:7a:a9:e2:f9:04:65:a3:33:2c:12:dd:57:
         88:27:8e:30:c6:6e:4e:dc:12:dc:e3:52:5d:a4:0c:e9:eb:3b:
         92:76:d7:b8:36:65:df:b5:79:f1:d2:2a:8b:42:72:ed:0b:03:
         4c:49:41:92:e9:5d:b9:ad:b3:dd:07:c6:da:0a:45:59:08:4a:
         19:0f:c6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:13:52 2025 by rpki-client