Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/853BD5A120CD370EBD1992CAB3B5C96BA3FCCC82.cer
File:                     853BD5A120CD370EBD1992CAB3B5C96BA3FCCC82.cer (raw, json)
Hash identifier:          ga2i+0nZhA2xkkWDTMrWol1ZeYTnAmpig4WH+t5agBQ=
Subject key identifier:   85:3B:D5:A1:20:CD:37:0E:BD:19:92:CA:B3:B5:C9:6B:A3:FC:CC:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F88307A9FCDC871536AC869534ACC90884BE08B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/853BD5A120CD370EBD1992CAB3B5C96BA3FCCC82.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Jul 2022 18:40:56 +0000
Certificate not after:    Thu 13 Jul 2023 18:45:56 +0000
Subordinate resources:    AS: 269674
                          IP: 45.191.140.0/22
                          IP: 2804:6830::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:88:30:7a:9f:cd:c8:71:53:6a:c8:69:53:4a:cc:90:88:4b:e0:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 18:40:56 2022 GMT
            Not After : Jul 13 18:45:56 2023 GMT
        Subject: CN=853BD5A120CD370EBD1992CAB3B5C96BA3FCCC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6b:ce:6f:28:70:2f:59:e0:b7:85:d3:cf:16:
                    07:48:eb:9d:27:5e:ef:66:c3:19:d2:a5:52:8d:5f:
                    9f:1e:5a:a7:7e:36:76:66:27:47:8e:9f:ab:b1:27:
                    c4:9a:8e:08:01:2a:db:c3:32:aa:0e:ff:55:87:a0:
                    8a:84:aa:08:d2:6b:6a:fb:83:1a:a1:46:5e:c2:c4:
                    75:e3:0e:5a:3a:2c:16:87:c2:26:e9:9d:f7:e8:a1:
                    90:70:f4:ee:6f:9f:56:12:59:97:65:48:73:e4:b5:
                    ad:ae:6b:4e:bf:6a:58:1b:00:b6:58:95:ac:bc:27:
                    e1:19:3a:73:21:ff:1b:d2:d7:76:e5:bd:96:a0:0a:
                    94:b1:57:ea:c4:fe:12:ca:76:5e:54:b0:02:5c:00:
                    24:43:b8:b2:64:38:53:8b:62:37:f2:36:84:63:60:
                    ee:00:47:49:c1:80:c4:23:8b:a5:dd:2b:f6:50:53:
                    1f:aa:0b:f8:ee:c7:5c:94:78:fa:bd:3b:da:fa:15:
                    ab:25:cd:2c:b1:c1:56:72:b2:06:cd:1c:09:1c:16:
                    1e:53:ac:dc:a6:8b:03:4c:f4:8f:9b:e9:59:b5:f7:
                    63:9a:26:72:9c:e3:9c:a6:2f:29:f0:62:cd:a9:bb:
                    95:c7:2e:24:9d:ad:c3:68:74:01:9e:10:8d:e6:48:
                    22:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:3B:D5:A1:20:CD:37:0E:BD:19:92:CA:B3:B5:C9:6B:A3:FC:CC:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/853BD5A120CD370EBD1992CAB3B5C96BA3FCCC82.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.140.0/22
                IPv6:
                  2804:6830::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269674

    Signature Algorithm: sha256WithRSAEncryption
         67:ff:e1:1b:8e:2f:70:18:65:c0:78:12:46:79:6b:cf:6f:42:
         25:0a:52:7f:9a:c9:db:be:4d:8c:1b:5f:8c:61:db:8e:5e:59:
         cb:83:91:74:c3:c5:37:68:2e:dd:7a:e0:84:c4:2c:68:74:44:
         15:5f:c7:c9:f2:86:79:dd:34:28:5a:a3:14:17:0a:0a:0d:09:
         2d:66:58:41:c3:28:13:94:32:d6:01:30:f7:58:31:6f:e5:bc:
         dd:f3:be:74:da:34:55:bc:91:fa:6c:61:48:6e:e0:35:5c:df:
         7b:6a:ef:cd:7f:e3:06:29:93:ff:25:85:69:d8:ae:c8:a5:71:
         c4:df:85:a1:5d:3b:f0:01:10:2d:f6:73:38:bb:bc:ef:42:8e:
         08:48:4c:93:84:63:23:ac:82:cc:41:c7:6a:8c:35:03:a1:5c:
         5e:85:ef:8c:99:64:d7:f1:c7:e8:d6:c1:08:56:66:36:f0:75:
         7c:e2:4d:9e:70:86:48:87:d4:bd:15:11:52:23:61:08:86:e6:
         6c:cc:d0:58:af:a4:ce:0d:8b:37:ea:3a:26:98:69:52:80:02:
         31:f0:e5:6d:c6:13:1c:b3:84:2e:fc:60:0b:ce:47:a4:cc:d2:
         ca:fd:cb:f5:f0:e7:15:dd:86:1c:66:95:c5:2f:5b:79:11:b1:
         15:52:27:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:28:04 2025 by rpki-client