Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/618DD4A40E00188ACD6CD728BA6A1EBD60F14F5C.cer
File:                     618DD4A40E00188ACD6CD728BA6A1EBD60F14F5C.cer (raw, json)
Hash identifier:          2wVc7+MiL9oMTF4W0Abj6rwGKswz/0Bpq3l2VH6//sc=
Subject key identifier:   61:8D:D4:A4:0E:00:18:8A:CD:6C:D7:28:BA:6A:1E:BD:60:F1:4F:5C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       77473E2D50C96EAF016351E770C6D083F1F72373
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CivBN81R3pbo6z32G9xa9LZCDVNtUPRL3KCTmbKLDwgu/0/618DD4A40E00188ACD6CD728BA6A1EBD60F14F5C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CivBN81R3pbo6z32G9xa9LZCDVNtUPRL3KCTmbKLDwgu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 16:01:54 +0000
Certificate not after:    Thu 20 Feb 2025 16:06:54 +0000
Subordinate resources:    AS: 266262
                          IP: 192.140.104.0/22
                          IP: 2804:3d3c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:47:3e:2d:50:c9:6e:af:01:63:51:e7:70:c6:d0:83:f1:f7:23:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 16:01:54 2024 GMT
            Not After : Feb 20 16:06:54 2025 GMT
        Subject: CN=618DD4A40E00188ACD6CD728BA6A1EBD60F14F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:11:b1:2d:c4:d9:98:74:ca:31:8e:f0:19:7f:
                    1a:24:fb:47:7a:95:e5:13:23:91:9c:8b:e7:80:74:
                    cb:a2:70:17:dd:bc:96:13:64:5a:fd:10:d0:6c:72:
                    3d:3d:24:99:be:f8:9a:2f:07:ef:74:c7:c7:42:49:
                    6d:53:6f:dc:56:46:fd:cc:29:f9:ea:17:04:d2:b5:
                    00:0f:65:71:58:7c:8a:f3:08:5f:c7:f6:1b:c6:15:
                    51:a7:46:76:b1:83:88:f8:dc:63:fa:d0:0a:5a:ad:
                    b3:27:f5:85:9c:44:7e:11:b9:1c:f7:cf:df:9c:fd:
                    2c:a5:6f:c5:1c:b9:b1:64:4b:e2:3a:21:d9:8d:25:
                    f8:74:f0:6e:e0:cc:23:1a:62:ba:64:17:dc:66:5c:
                    57:8e:38:5b:88:74:70:23:bc:b0:c8:57:26:ae:1c:
                    66:7e:29:d4:bd:2e:d9:f5:9d:67:f8:f3:77:b9:73:
                    19:a0:52:a2:d1:39:c1:2a:9f:ec:de:2e:12:ed:ac:
                    0b:b4:b6:26:b1:3b:16:d5:c1:1e:12:b3:45:6c:b3:
                    06:60:48:85:ff:a8:be:12:b0:d0:72:56:db:39:dd:
                    81:c4:4e:41:94:48:95:84:8f:b2:a1:1a:88:1b:9f:
                    50:3e:f9:3f:2b:32:fd:83:aa:fc:be:0d:1e:e6:b9:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:8D:D4:A4:0E:00:18:8A:CD:6C:D7:28:BA:6A:1E:BD:60:F1:4F:5C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CivBN81R3pbo6z32G9xa9LZCDVNtUPRL3KCTmbKLDwgu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CivBN81R3pbo6z32G9xa9LZCDVNtUPRL3KCTmbKLDwgu/0/618DD4A40E00188ACD6CD728BA6A1EBD60F14F5C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.104.0/22
                IPv6:
                  2804:3d3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266262

    Signature Algorithm: sha256WithRSAEncryption
         7f:5c:e1:e5:da:4c:60:63:76:fd:18:50:01:f9:d7:ad:0b:ec:
         e0:41:35:7c:90:39:10:88:81:d7:09:fb:19:5d:f1:d7:0c:d5:
         63:1f:4e:1e:f8:17:17:e4:1a:dd:c4:b9:c5:ad:1b:a5:95:8f:
         98:5c:cf:c0:8d:c6:74:05:8f:17:dd:ce:3f:53:dd:65:41:05:
         9d:60:69:ac:9a:aa:02:05:bb:de:13:4b:d9:d0:32:66:cc:02:
         af:72:03:50:e0:a0:76:9f:a9:4c:f4:35:8e:31:12:8c:e3:45:
         cb:cf:2d:25:98:3a:b9:75:ea:86:ee:02:e7:83:bc:65:d4:9b:
         4b:67:b1:8c:a5:a8:d7:4a:41:54:c5:86:af:5b:66:3b:5e:74:
         da:60:d9:bb:e9:6f:80:fc:e9:d2:9f:39:62:7d:17:a4:2b:e0:
         ef:1c:88:05:d5:c1:94:5f:5d:9b:f4:de:13:c4:f2:df:c6:aa:
         5f:09:b4:e7:21:c7:e7:1e:e3:5f:76:16:b8:97:00:23:56:c8:
         91:18:7c:6a:b4:fa:84:f5:0d:a6:05:29:92:57:13:05:bd:83:
         46:f9:ff:e9:f7:0e:52:7d:b6:6c:e1:2c:59:39:5a:48:be:51:
         53:cf:61:0e:d6:69:94:0e:7d:3c:8d:28:8e:97:01:1b:3c:ff:
         6a:be:7e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:31:25 2025 by rpki-client