Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.cer
File:                     5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.cer (raw, json)
Hash identifier:          UD7pbhx6HLWHPYtYAHEy+Ej/sJAK9NaOjtcntYjlHHU=
Subject key identifier:   5D:18:FA:4A:88:E7:A1:9A:02:E0:6C:D3:48:D6:BD:F2:63:B8:8E:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       61E2E26E38FD4FE111A14A1F520A1263593F6BDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 13:39:56 +0000
Certificate not after:    Wed 18 Dec 2024 13:44:56 +0000
Subordinate resources:    AS: 263900
                          IP: 138.204.148.0/22
                          IP: 2804:276c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e2:e2:6e:38:fd:4f:e1:11:a1:4a:1f:52:0a:12:63:59:3f:6b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 13:39:56 2023 GMT
            Not After : Dec 18 13:44:56 2024 GMT
        Subject: CN=5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:51:16:c4:7b:65:06:b7:f3:61:9c:c7:2e:00:
                    f7:1a:5a:78:e6:81:59:fd:ab:47:a8:f8:fa:f8:30:
                    3e:a6:3c:84:80:4d:a5:68:f9:6b:12:e7:22:9e:e1:
                    ad:ea:90:e9:a5:69:0e:f1:2a:0f:57:48:bc:d7:d2:
                    0b:7e:b7:68:31:8a:bf:da:8a:5c:cc:ce:a3:f8:25:
                    ad:7b:52:ef:29:68:c6:57:d9:14:8e:34:04:7f:fd:
                    bf:c4:69:35:7e:2c:75:da:77:fa:69:79:f3:bb:5e:
                    f1:89:46:e6:30:75:35:61:b9:dc:0c:03:50:2d:7e:
                    46:46:8e:cd:fc:86:d1:6f:59:5a:d4:1c:00:dc:9b:
                    86:2f:63:df:00:2c:45:81:20:b7:2a:27:5f:ea:86:
                    e8:cb:15:b7:56:58:6f:81:79:5a:b0:c7:25:3e:6f:
                    a5:e3:7e:11:23:ce:a9:46:a2:22:5e:44:69:0a:12:
                    9f:64:c2:de:29:82:c5:30:17:4e:cd:e5:f3:99:93:
                    df:6b:a6:a4:03:23:d2:c9:11:e1:61:a2:29:cf:d2:
                    06:62:fd:bb:d8:96:b7:25:72:e8:a9:d9:09:aa:b5:
                    59:9c:63:66:21:b6:f8:b7:9d:62:f9:6a:ae:9c:79:
                    c7:ed:00:bc:41:ae:70:30:b4:79:db:4c:5d:67:88:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:18:FA:4A:88:E7:A1:9A:02:E0:6C:D3:48:D6:BD:F2:63:B8:8E:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.148.0/22
                IPv6:
                  2804:276c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263900

    Signature Algorithm: sha256WithRSAEncryption
         4a:cf:0f:b9:df:56:b8:2b:f9:18:e3:fe:60:72:5d:5e:6a:50:
         bf:2f:68:6c:b6:a1:ab:8d:98:b6:d4:b6:fb:ef:f8:8b:a3:06:
         37:6d:cf:76:09:94:63:33:4a:af:de:9d:cd:c5:c3:96:2c:73:
         1a:4c:7a:75:aa:93:b4:48:ac:da:0f:2e:21:90:6e:6e:b8:00:
         a1:0f:ad:4d:0d:52:62:18:98:8b:a2:4b:e4:77:b0:08:de:13:
         ef:e8:fc:e3:f8:24:b3:0f:39:f0:d3:8d:23:ae:06:87:98:2c:
         67:9e:dc:b7:36:5c:cb:ab:5f:2d:ba:73:2a:97:ee:79:fb:94:
         82:e2:84:a9:0f:4d:60:a0:6a:8f:7e:12:3e:34:e5:11:71:5f:
         3d:2f:e9:fb:a2:50:6b:24:3b:84:4c:5b:0e:a2:78:c6:cf:79:
         fb:a5:51:9d:13:07:53:95:84:9d:7a:3e:ed:82:4c:de:2f:ee:
         fb:b5:87:b4:c0:31:d1:78:b6:0b:41:20:2c:15:62:be:ad:31:
         4e:97:81:8e:2f:ed:df:f8:c4:bb:21:95:1d:89:02:06:44:95:
         0e:99:de:46:5b:bc:d2:e3:25:c1:ec:08:ce:44:a5:2e:64:2c:
         54:a9:07:16:e5:21:77:a7:0a:99:43:19:90:20:4e:a7:88:ca:
         85:c2:97:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:58:25 2025 by rpki-client