Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8397C170033685EEC260390D929E6CC3388C40F9.cer
File:                     8397C170033685EEC260390D929E6CC3388C40F9.cer (raw, json)
Hash identifier:          b1IZK5md0p2z7Zh2ZeduBzC5BkXX4yAXYXftAvNNaxg=
Subject key identifier:   83:97:C1:70:03:36:85:EE:C2:60:39:0D:92:9E:6C:C3:38:8C:40:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11F77184CB6809E724175706C778A7BADF39577D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/8397C170033685EEC260390D929E6CC3388C40F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 May 2022 17:56:47 +0000
Certificate not after:    Mon 01 May 2023 18:01:47 +0000
Subordinate resources:    AS: 268623
                          IP: 45.164.120.0/22
                          IP: 2804:5404::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f7:71:84:cb:68:09:e7:24:17:57:06:c7:78:a7:ba:df:39:57:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  2 17:56:47 2022 GMT
            Not After : May  1 18:01:47 2023 GMT
        Subject: CN=8397C170033685EEC260390D929E6CC3388C40F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:7c:26:16:0f:b7:2d:8a:5b:9c:88:f8:35:
                    b4:b8:52:0d:64:77:b2:49:03:aa:30:14:0b:7e:aa:
                    57:fc:8a:f5:56:67:8c:2f:61:1e:31:ce:22:9d:a4:
                    ca:aa:45:e1:ae:57:64:8c:ab:5a:69:ad:30:b9:8f:
                    10:1f:ce:17:27:8b:8c:45:d6:48:16:03:dc:21:c7:
                    f9:65:f9:42:11:31:41:a6:d5:60:e3:53:14:87:60:
                    a1:e3:a8:2b:a2:e2:1d:86:9a:50:37:a3:39:a0:75:
                    51:32:19:5d:cc:33:2a:8d:fc:dd:89:99:06:35:f9:
                    a1:59:c0:0a:75:25:aa:3d:a7:96:29:44:b7:e1:fe:
                    65:e9:58:64:9b:10:24:86:b1:36:48:b2:4b:8a:44:
                    6d:42:2f:e1:f0:42:26:6f:6d:5c:4e:95:ea:63:46:
                    10:66:fe:d9:45:c2:9c:f4:bb:fb:c4:c7:ed:3c:fb:
                    46:9b:8e:6e:61:83:69:29:c3:05:92:da:d6:54:b8:
                    6e:d2:76:f0:1a:88:58:60:f0:da:b3:4e:c2:8d:b6:
                    4d:53:04:c9:02:0a:22:27:d8:d3:78:91:1f:4f:79:
                    dc:1f:22:dd:14:c4:69:d7:84:20:26:86:b7:0f:c0:
                    16:98:8b:90:ff:47:4a:b8:93:3f:2a:d0:dc:22:e6:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:97:C1:70:03:36:85:EE:C2:60:39:0D:92:9E:6C:C3:38:8C:40:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/8397C170033685EEC260390D929E6CC3388C40F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.120.0/22
                IPv6:
                  2804:5404::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268623

    Signature Algorithm: sha256WithRSAEncryption
         6f:3c:a7:7d:dd:26:c3:7e:b5:33:fb:a1:9c:9a:38:1f:33:6f:
         92:0d:cf:78:57:e5:4f:3e:3b:7c:0a:80:11:1a:c5:13:35:85:
         9d:1d:ed:50:ae:68:75:72:10:f4:25:7b:c8:73:7a:0b:74:3c:
         2f:b9:9c:fa:d5:f6:84:e6:8b:df:83:58:ec:1f:08:24:bd:36:
         ce:2b:5b:4c:d0:0e:44:49:6a:40:84:9b:05:7a:94:7a:09:9e:
         9b:0d:50:1d:00:32:83:36:0e:7b:45:24:e0:8b:aa:6d:14:a8:
         3f:2e:69:92:b0:c4:b5:4f:89:f0:3c:52:c1:ef:55:7a:80:17:
         b3:6d:f0:43:b0:18:d7:ef:b5:1d:d7:27:c1:7c:7d:6f:22:62:
         46:b6:ab:43:37:ce:6d:53:fa:1a:8a:8b:57:8d:df:fb:c8:f6:
         0b:17:17:73:cc:a3:1d:8d:8e:3d:e0:5c:7e:bc:d1:33:06:23:
         09:d4:4e:51:48:7d:80:81:46:d2:9a:36:17:40:6f:99:5a:20:
         5d:27:15:82:d4:f6:91:80:ee:fa:79:37:92:f1:3b:ba:6c:57:
         f8:e9:64:05:75:b2:cb:c5:35:00:4a:f2:fd:e6:b7:b7:c8:e8:
         3c:1a:24:81:fe:0d:25:0b:37:30:4c:e4:d9:f0:da:5e:bb:2f:
         d5:48:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:55 2025 by rpki-client