Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/89C77681B780D18CDD71564F83487F2CD961C4CC.cer
File:                     89C77681B780D18CDD71564F83487F2CD961C4CC.cer (raw, json)
Hash identifier:          CEGdkfGP+K/8SyXw39DiWrV0LFMuIB6wxaAGIiWH/cY=
Subject key identifier:   89:C7:76:81:B7:80:D1:8C:DD:71:56:4F:83:48:7F:2C:D9:61:C4:CC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68494A9005D47D5B7FEB5994FC2729CBFB3C1372
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/89C77681B780D18CDD71564F83487F2CD961C4CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 12:10:56 +0000
Certificate not after:    Wed 23 Oct 2024 12:15:56 +0000
Subordinate resources:    AS: 262676
                          IP: 187.73.224.0/20
                          IP: 2804:e80::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:49:4a:90:05:d4:7d:5b:7f:eb:59:94:fc:27:29:cb:fb:3c:13:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 12:10:56 2023 GMT
            Not After : Oct 23 12:15:56 2024 GMT
        Subject: CN=89C77681B780D18CDD71564F83487F2CD961C4CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:22:81:cc:09:d7:67:0e:b7:d3:69:6d:c8:d6:
                    cd:51:7e:79:f7:62:06:3d:b6:e9:a9:5d:8e:1f:91:
                    f3:f0:ae:75:e8:e3:2a:be:f4:9c:f9:ee:76:46:a8:
                    fd:9e:47:89:89:d6:4c:d2:6f:10:6e:05:1a:b6:84:
                    0c:7c:eb:79:19:3a:19:1f:39:9b:31:60:2a:48:48:
                    ec:22:9f:8f:f1:dc:08:08:8b:32:e7:b6:57:ab:54:
                    f7:f6:c6:4b:c9:d0:74:2c:f7:81:06:89:a6:0d:34:
                    f5:4c:f3:58:fa:e2:c5:b6:bb:29:b6:31:db:34:9f:
                    60:64:cb:30:e8:b1:72:0b:78:af:60:f1:68:00:01:
                    f9:b9:07:dc:3b:ae:10:b8:0f:14:68:2b:dd:7f:a5:
                    82:20:b8:ce:7c:58:0b:5f:47:c2:9c:1f:99:3f:5e:
                    a6:91:9b:87:bb:8b:89:57:5c:a5:f9:21:58:4a:a6:
                    fa:65:a8:24:4b:c6:74:5f:a3:85:d7:b2:58:96:a7:
                    3a:b8:3f:96:04:2a:4a:00:43:e8:90:43:d5:73:ba:
                    e6:f4:7b:7b:7c:ca:b9:da:2c:95:05:cc:62:a0:61:
                    b7:8c:0b:1d:0d:a5:10:d5:56:0f:af:4f:6d:7d:3e:
                    35:04:be:7e:98:24:ef:ca:54:9f:ce:c3:55:be:73:
                    7f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:C7:76:81:B7:80:D1:8C:DD:71:56:4F:83:48:7F:2C:D9:61:C4:CC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/89C77681B780D18CDD71564F83487F2CD961C4CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.224.0/20
                IPv6:
                  2804:e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262676

    Signature Algorithm: sha256WithRSAEncryption
         8e:e2:6d:42:ba:1f:6a:9e:6a:3b:3e:99:77:19:e8:5c:76:fd:
         9b:6c:b8:3f:c4:25:b6:71:6a:9b:96:07:f5:85:f1:47:cb:99:
         ff:4f:21:58:93:76:b3:1a:4a:dd:97:89:bd:39:a1:89:89:b1:
         3a:57:94:a2:5c:40:42:2e:aa:2d:22:38:e6:e0:66:3b:39:c4:
         99:9c:be:32:2c:8e:ee:e1:f6:82:1a:bb:53:fb:95:b7:16:82:
         f0:34:cd:a3:42:c6:32:c9:1b:28:36:d3:ce:32:c7:da:d2:2e:
         a8:af:1c:e7:52:44:67:b0:0d:d3:3d:c4:22:c5:54:7e:a9:5f:
         38:41:89:a4:c4:e5:ee:a2:50:5b:dd:6f:57:d5:e0:3d:29:51:
         a8:db:e1:e4:3d:ba:24:06:28:51:b2:8e:8d:53:ee:01:83:dc:
         c2:6f:94:d9:d6:1d:0d:23:a9:02:d2:c0:97:f8:f0:02:f8:3f:
         0d:3c:e5:bf:b5:99:bd:36:ba:4b:70:02:88:f0:05:3e:b4:af:
         24:2a:d7:40:b3:42:25:7e:fd:ec:cc:2d:b3:1c:79:13:f0:c1:
         d6:69:8a:31:14:8e:26:82:c9:92:17:b3:5a:62:b4:d1:ec:03:
         50:c8:58:c5:72:7a:49:6a:92:6c:78:c1:48:c0:46:5e:26:a5:
         ca:c9:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:45 2025 by rpki-client