Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5E096BB90C02BC7F908FAC1BC970334CF80A6D7A.cer
File:                     5E096BB90C02BC7F908FAC1BC970334CF80A6D7A.cer (raw, json)
Hash identifier:          VivxLcBg4LAF6gwx1KkyViBr8VkgajCbKwkdKMM9dSU=
Subject key identifier:   5E:09:6B:B9:0C:02:BC:7F:90:8F:AC:1B:C9:70:33:4C:F8:0A:6D:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25981CEBB9DB14A729316F57204A58B4527CA8C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/5E096BB90C02BC7F908FAC1BC970334CF80A6D7A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 26 Feb 2022 14:00:50 +0000
Certificate not after:    Sat 25 Feb 2023 14:05:50 +0000
Subordinate resources:    AS: 28182
                          IP: 170.231.128.0/22
                          IP: 189.89.0.0/20
                          IP: 2001:1294::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:98:1c:eb:b9:db:14:a7:29:31:6f:57:20:4a:58:b4:52:7c:a8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 26 14:00:50 2022 GMT
            Not After : Feb 25 14:05:50 2023 GMT
        Subject: CN=5E096BB90C02BC7F908FAC1BC970334CF80A6D7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:bf:fd:f7:ff:d3:0a:a3:ca:e6:f0:c0:1e:
                    d2:d6:5e:77:b9:c2:7a:28:eb:2e:af:50:2c:5f:1f:
                    a0:26:ae:05:69:e5:8b:a5:9a:0a:f8:d4:b1:5e:30:
                    05:76:f4:26:c3:b8:56:a1:4e:55:19:03:92:3f:a4:
                    b3:18:33:e2:15:5e:0f:6b:73:4b:90:e6:fb:7f:d2:
                    05:58:fe:0f:a7:9b:52:c0:a4:30:17:4b:61:1f:2b:
                    6c:31:65:b8:39:55:c5:1f:e7:67:52:fe:19:18:1a:
                    7f:77:8d:12:95:9d:a5:2e:6c:ae:e8:92:68:7d:8d:
                    07:85:7b:be:59:94:cd:0a:49:7b:08:41:ce:57:d4:
                    a4:e1:25:44:43:09:43:ed:85:12:ff:cc:80:2e:73:
                    70:6a:bf:d3:d7:b1:68:ae:94:e4:71:68:1c:bd:10:
                    22:1a:11:a3:3b:80:b1:03:cf:1d:82:c3:fb:47:da:
                    6f:3e:44:d7:1d:62:89:a8:76:f8:66:70:33:67:2f:
                    2e:50:5e:8e:37:e3:da:a2:2a:ef:e3:06:1e:25:9e:
                    45:49:48:4d:bc:fc:f2:2f:51:02:ce:27:dd:e4:2e:
                    4e:c3:cd:7a:a3:7e:b8:62:8c:e9:7e:7c:f7:64:80:
                    51:7c:32:cc:c4:0a:16:6a:c0:ea:7a:23:68:24:46:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:09:6B:B9:0C:02:BC:7F:90:8F:AC:1B:C9:70:33:4C:F8:0A:6D:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/5E096BB90C02BC7F908FAC1BC970334CF80A6D7A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/22
                  189.89.0.0/20
                IPv6:
                  2001:1294::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28182

    Signature Algorithm: sha256WithRSAEncryption
         6d:58:ec:8f:31:da:5b:54:31:74:fa:ff:b1:b8:a0:d6:07:00:
         39:d8:c6:fd:3a:ea:fc:cc:b4:0f:fc:61:cb:9a:0c:79:ec:87:
         37:14:04:38:ff:b2:e5:30:cd:d9:94:ad:15:6e:40:66:43:73:
         0b:aa:5f:1e:15:bd:0a:dd:51:31:da:45:e3:d2:c3:f6:1b:2a:
         c8:cc:b7:3e:53:2d:21:68:1f:e6:08:98:26:3c:d4:5b:03:89:
         c8:48:b8:ee:a7:d7:17:3d:de:05:21:2a:96:8d:05:ec:3b:e3:
         dc:87:eb:e0:43:52:08:99:49:e2:4e:89:d5:bb:59:cf:87:79:
         cf:19:5b:78:05:cc:fc:38:5c:13:43:f1:79:a4:5a:99:44:2e:
         e0:e4:ef:71:48:0d:3c:2b:8b:d0:61:d0:22:13:04:61:9b:1c:
         5c:6b:58:50:28:e5:53:81:56:b0:e1:0d:ec:50:c8:d1:ac:c2:
         29:76:e1:b1:bf:ed:8e:d4:49:f2:c8:47:0a:3b:24:be:f5:3d:
         d4:50:44:49:6e:23:da:00:c7:3f:40:e2:cc:68:86:17:66:07:
         0d:02:a4:2a:da:e1:10:1f:2b:99:44:f8:a1:26:6a:c2:6b:42:
         49:74:89:a5:28:84:5d:e6:59:61:f6:e5:ce:7e:13:fb:69:fb:
         f9:11:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:14:12 2025 by rpki-client