Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8222736D03A653FE4A61157DD5479612835EA892.cer
File:                     8222736D03A653FE4A61157DD5479612835EA892.cer (raw, json)
Hash identifier:          8KOOYH3N19Q/TiUbAoFFcDGt5rRfqRcpLfFqNuADLqQ=
Subject key identifier:   82:22:73:6D:03:A6:53:FE:4A:61:15:7D:D5:47:96:12:83:5E:A8:92
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1868BC0A9753013B9E4F8580CAD54884F0768F62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/8222736D03A653FE4A61157DD5479612835EA892.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 19:15:33 +0000
Certificate not after:    Tue 17 Dec 2024 19:20:33 +0000
Subordinate resources:    AS: 61756
                          IP: 131.100.72.0/22
                          IP: 2804:1be8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:68:bc:0a:97:53:01:3b:9e:4f:85:80:ca:d5:48:84:f0:76:8f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 19:15:33 2023 GMT
            Not After : Dec 17 19:20:33 2024 GMT
        Subject: CN=8222736D03A653FE4A61157DD5479612835EA892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:88:01:bb:79:88:73:60:ae:15:16:58:05:
                    e0:9d:92:30:17:c8:d2:e0:18:f4:00:44:08:a9:56:
                    43:ed:88:28:19:d1:03:3c:bb:ba:02:c7:2c:bb:a5:
                    87:04:31:d2:73:86:e9:d0:3f:04:aa:37:b3:25:01:
                    50:76:58:7a:bb:93:e9:e2:e5:b9:a0:3e:37:7a:5f:
                    d4:7f:e1:6f:1a:89:f4:b0:7f:99:a9:01:65:0d:8d:
                    ca:3a:86:23:1b:24:e4:93:1c:56:98:f4:3a:e1:a5:
                    ec:ca:81:7b:7b:7c:51:9a:47:cf:7b:0b:79:a8:6d:
                    8c:b3:ae:00:1c:b3:72:ac:5a:35:54:0d:7b:f0:d1:
                    fb:a5:ea:89:e7:d2:0d:3a:df:13:d8:5d:f0:40:9e:
                    0d:ac:14:84:09:d8:ef:89:10:af:f8:ae:34:43:b5:
                    b4:06:c9:fb:ee:1e:ff:1b:d9:c1:59:bd:1d:c6:09:
                    41:a0:8e:59:7b:7e:0a:6f:86:9a:f5:e4:92:f4:5c:
                    df:a4:56:67:35:5a:0f:69:8b:49:d3:f3:0f:b0:4e:
                    ac:81:be:69:af:3a:fe:0c:e6:8e:78:b2:40:c6:97:
                    41:01:34:b7:af:58:88:5a:92:08:47:5c:5c:78:2a:
                    3a:96:bc:c8:c2:10:ff:32:70:a7:69:41:06:01:4d:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:22:73:6D:03:A6:53:FE:4A:61:15:7D:D5:47:96:12:83:5E:A8:92
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/8222736D03A653FE4A61157DD5479612835EA892.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/22
                IPv6:
                  2804:1be8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61756

    Signature Algorithm: sha256WithRSAEncryption
         ae:70:e4:ee:74:32:8b:2e:3a:4a:02:ab:5b:85:6f:fa:f9:fe:
         bd:c6:7f:be:1b:5e:da:26:2b:7a:81:2d:3f:f7:35:c2:d2:de:
         40:0a:aa:2d:7e:aa:32:4f:75:8a:db:17:14:d6:16:5b:2a:23:
         97:bd:d8:71:fc:9a:0c:ea:c2:38:5f:29:1e:b7:04:ef:bd:69:
         7a:d8:ee:c8:a6:e7:46:1e:a3:4a:0f:3e:0e:20:6d:ad:19:ab:
         48:73:30:cf:cb:c5:3e:c2:ad:99:8b:48:ba:f1:e7:7c:b8:48:
         d2:13:e2:a3:66:00:8f:82:a0:44:36:7d:80:9c:85:2b:4f:6a:
         b2:6c:69:f1:51:7a:b0:c6:cf:c6:81:8c:de:6f:33:24:5c:d5:
         4e:a5:cc:3e:d8:e2:3d:66:ab:da:dc:cc:aa:34:3f:75:a8:fe:
         a6:95:2a:48:dd:f8:4c:c4:97:82:22:d0:20:da:bd:e7:f9:ec:
         75:f5:ac:4c:cd:e0:6a:26:59:8f:42:c1:03:65:24:63:cd:63:
         a1:99:2b:f7:0c:b6:bf:7f:08:47:80:d6:11:16:70:20:80:84:
         4f:73:f3:17:7f:5a:4f:53:a4:12:d9:79:7a:49:55:86:32:50:
         7c:7c:0c:ce:6f:77:b3:01:15:bb:46:2d:b4:35:13:45:d1:55:
         60:4f:a8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:44 2025 by rpki-client