Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/65624CA23DB0137AAB8B0BB2E3A2ABE61C3F1345.cer
File:                     65624CA23DB0137AAB8B0BB2E3A2ABE61C3F1345.cer (raw, json)
Hash identifier:          SyR1tQnQPWJxmxGxDvSt9ylq8UAJIgXFS0lZR47/lqk=
Subject key identifier:   65:62:4C:A2:3D:B0:13:7A:AB:8B:0B:B2:E3:A2:AB:E6:1C:3F:13:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       662DF7D25BD382AD6FAF9369D0FD5E0227F5441C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/0/65624CA23DB0137AAB8B0BB2E3A2ABE61C3F1345.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 14:28:21 +0000
Certificate not after:    Tue 28 May 2024 14:33:21 +0000
Subordinate resources:    AS: 263004
                          IP: 143.208.228.0/22
                          IP: 186.237.16.0/21
                          IP: 2804:2be4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2d:f7:d2:5b:d3:82:ad:6f:af:93:69:d0:fd:5e:02:27:f5:44:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 14:28:21 2023 GMT
            Not After : May 28 14:33:21 2024 GMT
        Subject: CN=65624CA23DB0137AAB8B0BB2E3A2ABE61C3F1345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:37:29:12:1c:09:61:53:e7:d3:be:31:79:b3:
                    45:db:a9:e1:2f:23:87:94:c1:18:cf:fa:de:e4:5e:
                    f0:d9:2f:5a:9b:d0:ce:33:48:6c:41:37:58:b8:dd:
                    9a:60:fd:31:26:47:80:57:11:59:b1:68:5c:97:9f:
                    45:b6:23:b0:99:d0:82:e7:e2:8d:55:b5:f1:05:51:
                    2e:8a:17:45:19:67:82:a5:50:5a:33:7e:4b:4a:e0:
                    29:d3:92:b9:de:92:d3:99:ac:aa:e1:4a:ab:a7:f7:
                    9e:51:b3:56:43:1a:32:ef:3f:9b:62:19:7d:44:39:
                    16:5d:fb:7d:02:c3:c2:7a:b8:92:8c:b3:83:15:bd:
                    75:52:ab:61:84:9b:81:b3:e8:33:99:05:67:3a:10:
                    f9:5f:b5:fc:12:2e:a8:c9:7b:0b:a5:9f:a2:90:08:
                    0f:e2:e4:dd:c8:3b:18:b2:50:d7:84:18:b0:f6:a3:
                    d3:6b:c2:38:b8:3e:bc:21:74:bd:b2:5e:f1:18:c4:
                    55:0b:4d:ac:a4:f8:b5:39:50:45:e7:22:56:1f:2f:
                    6b:3f:70:6e:6f:34:16:41:b9:ad:08:5f:bb:1f:0e:
                    5d:f0:ce:9f:1b:51:b7:a6:cb:8a:a0:9c:3e:0e:de:
                    6d:3d:5c:a4:c4:ef:f7:57:f4:1f:ec:54:df:e0:0f:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:62:4C:A2:3D:B0:13:7A:AB:8B:0B:B2:E3:A2:AB:E6:1C:3F:13:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/0/65624CA23DB0137AAB8B0BB2E3A2ABE61C3F1345.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.228.0/22
                  186.237.16.0/21
                IPv6:
                  2804:2be4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263004

    Signature Algorithm: sha256WithRSAEncryption
         25:96:09:c3:d8:68:66:a6:c4:b5:44:06:5d:b0:86:8a:63:89:
         73:54:3f:db:69:9f:07:44:c0:d4:4c:da:5e:25:25:1e:79:1d:
         ed:f4:8f:a5:7f:30:ee:94:18:18:97:b8:67:e9:24:0b:ce:23:
         ed:9a:6c:d6:e8:4a:dd:ba:d2:ff:2a:79:29:35:05:ad:ab:39:
         93:0a:7e:51:a8:91:38:5c:ba:54:19:28:63:89:70:6a:7b:50:
         30:06:8a:2c:a6:44:9e:e1:18:d9:ee:d2:64:12:7f:0d:e3:50:
         07:85:1c:57:43:28:54:0f:46:7c:8f:50:8b:10:f0:4a:20:9e:
         34:ed:8e:cf:69:bf:c1:3a:4a:a1:0e:41:9f:7c:d4:60:1b:9f:
         fa:75:18:a0:69:2c:5a:d3:53:0d:d4:70:ee:d2:a6:c2:fe:99:
         d4:02:66:45:24:21:cf:bf:dc:ea:e6:9d:d5:74:24:9b:0b:50:
         48:1a:0d:c2:5a:1b:eb:3a:2e:66:a6:ad:4e:c6:22:ce:6e:44:
         cc:71:2c:d9:7f:6f:61:e5:c3:37:51:95:78:e6:57:c3:98:99:
         18:d7:d0:1e:db:43:02:e6:c0:0d:32:3b:c4:1b:fe:c7:54:3f:
         43:32:32:a8:15:cb:fd:7a:1a:56:97:18:6e:25:cb:35:21:60:
         4c:8b:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:50 2025 by rpki-client