Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/84122EC8D6FD1054A4A1E248D3BF2C11E87484C5.cer
File:                     84122EC8D6FD1054A4A1E248D3BF2C11E87484C5.cer (raw, json)
Hash identifier:          YYGVQozXwc8OxlYnEMqxsaGyLFOKoUbu2PvSW2G/yPo=
Subject key identifier:   84:12:2E:C8:D6:FD:10:54:A4:A1:E2:48:D3:BF:2C:11:E8:74:84:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34F4C724714DF1B7A566CB4CB388C05CF212E696
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/84122EC8D6FD1054A4A1E248D3BF2C11E87484C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Feb 2023 11:24:50 +0000
Certificate not after:    Thu 08 Feb 2024 11:29:50 +0000
Subordinate resources:    AS: 271091
                          IP: 179.48.160.0/22
                          IP: 2804:7620::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f4:c7:24:71:4d:f1:b7:a5:66:cb:4c:b3:88:c0:5c:f2:12:e6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 11:24:50 2023 GMT
            Not After : Feb  8 11:29:50 2024 GMT
        Subject: CN=84122EC8D6FD1054A4A1E248D3BF2C11E87484C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:d8:9f:80:80:20:4d:f8:0e:47:6b:eb:41:
                    0e:f3:0e:9e:36:17:07:a0:4d:9d:a9:3d:30:a5:93:
                    ee:f2:60:8c:59:c1:a9:2a:a2:d5:87:04:c6:b9:60:
                    b9:77:70:fd:a0:9b:09:54:ee:d9:5b:c4:79:3c:ca:
                    38:a5:a4:9a:04:ac:93:02:9e:04:20:65:84:05:d2:
                    14:6c:42:66:40:59:c9:bb:96:0d:e1:b8:cc:ab:00:
                    51:96:d8:9b:7f:ae:84:5f:c5:27:50:d6:ac:a0:82:
                    07:62:03:f2:6e:f7:8f:81:d8:f3:28:24:2b:f6:b0:
                    7d:48:d1:6a:a5:5a:ec:37:75:4f:65:15:21:ba:6e:
                    b0:f5:d5:1a:07:50:f3:ce:fb:a3:85:55:4e:d2:ce:
                    32:9c:27:66:9e:4e:c7:9b:29:a2:24:f7:95:3c:40:
                    37:3c:2b:61:4f:1b:8d:2f:6b:fd:36:18:3b:29:33:
                    04:12:c0:a5:c5:d2:2e:25:8b:3f:f0:ae:e3:b7:27:
                    54:13:14:03:49:61:d3:53:ce:25:2e:36:48:cf:27:
                    38:b8:ce:d9:50:ae:9a:60:ea:f7:97:04:1a:f2:83:
                    6f:03:64:30:06:c1:4e:e5:ab:19:58:e1:d6:1d:ff:
                    e5:8b:21:de:03:33:6b:8b:73:4f:7f:71:df:a2:29:
                    47:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:12:2E:C8:D6:FD:10:54:A4:A1:E2:48:D3:BF:2C:11:E8:74:84:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/84122EC8D6FD1054A4A1E248D3BF2C11E87484C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.160.0/22
                IPv6:
                  2804:7620::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271091

    Signature Algorithm: sha256WithRSAEncryption
         1b:2e:5e:c3:dd:3f:bf:b4:49:48:c5:05:a3:36:46:b1:c5:68:
         23:c9:af:0f:28:37:5e:42:5f:f5:70:0d:74:17:ba:7b:c6:e7:
         4d:d0:3a:16:88:9d:e3:2f:8a:4a:bb:1c:32:0d:2a:5d:bb:6b:
         67:50:5c:81:99:ee:15:39:ee:17:3e:91:26:23:79:29:6f:72:
         b1:80:f9:39:d2:ba:12:38:32:34:56:29:f6:c1:2c:3e:5a:33:
         3d:d1:50:fb:e1:3c:12:8b:e1:f7:da:c0:8b:e2:ca:5a:00:59:
         06:fa:74:1f:d8:36:51:8f:88:79:74:0b:c8:e5:3a:34:90:f6:
         22:0c:7d:ee:48:f1:11:31:3d:c2:9d:fa:44:e1:f6:54:b3:2b:
         16:70:e1:73:28:19:fb:46:ce:58:30:f1:62:f9:f1:25:66:0d:
         d5:73:09:f7:b7:8f:91:ea:6e:70:b8:85:70:b3:af:eb:41:a5:
         a0:64:03:b7:ec:c9:b8:f1:42:07:c4:98:5d:c9:ff:ea:6a:85:
         45:cf:ba:ae:d1:7f:c6:e2:ec:ee:bb:3c:a9:9c:96:15:df:75:
         01:d0:f6:cd:a5:dc:bc:f0:49:96:f9:7c:02:0e:d8:7c:9c:49:
         cd:bb:44:41:2f:02:48:de:0a:72:ef:f3:c9:9d:f1:bb:35:66:
         74:fb:ee:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:27 2025 by rpki-client