Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A85A2B696265963D003C217E5D0C15821D5B028.cer
File:                     8A85A2B696265963D003C217E5D0C15821D5B028.cer (raw, json)
Hash identifier:          vXR5ufH1Ijg6bsVO67F7QLqIje+Uev1Z2BujOGwxPqs=
Subject key identifier:   8A:85:A2:B6:96:26:59:63:D0:03:C2:17:E5:D0:C1:58:21:D5:B0:28
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58F756C7A4DB6D711E6EAE22D134FB5EF0683C06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/8A85A2B696265963D003C217E5D0C15821D5B028.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Aug 2022 19:30:39 +0000
Certificate not after:    Wed 23 Aug 2023 19:35:39 +0000
Subordinate resources:    AS: 271052
                          IP: 177.36.24.0/22
                          IP: 2804:7584::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f7:56:c7:a4:db:6d:71:1e:6e:ae:22:d1:34:fb:5e:f0:68:3c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 24 19:30:39 2022 GMT
            Not After : Aug 23 19:35:39 2023 GMT
        Subject: CN=8A85A2B696265963D003C217E5D0C15821D5B028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:d7:76:d3:fc:a3:1f:5e:78:1f:e2:0a:64:
                    7d:68:37:c4:6b:c9:5d:9b:6d:00:e3:8c:cb:b3:51:
                    d0:be:13:1d:e2:7e:14:b6:15:2a:a3:9a:24:7c:d2:
                    4e:5f:a3:e6:04:14:aa:88:6d:66:2f:e8:c2:d4:aa:
                    56:4e:0a:a0:b1:ad:a0:2a:4f:b9:6a:20:2a:85:be:
                    d2:31:30:e0:6f:ed:ec:f9:90:c7:1d:03:3b:14:e6:
                    1a:49:c6:ed:6e:f8:76:b2:0e:71:0e:43:9a:a1:65:
                    17:5e:c1:c2:f1:ed:8f:8b:23:69:9c:e4:96:a6:62:
                    43:58:0f:7e:bf:af:f5:0c:38:33:ab:54:2c:be:36:
                    e5:46:84:ed:ba:20:91:bb:39:46:e4:b2:34:0b:d3:
                    21:be:56:2d:0b:e2:09:11:a0:3d:fa:e2:e7:d2:bc:
                    92:7c:23:53:86:a4:30:1a:4c:47:ac:a0:e1:7e:dd:
                    a2:d3:87:4f:2b:3f:93:8d:7d:79:d6:07:14:2e:8b:
                    9a:1a:7c:b0:9a:34:dd:8b:28:5c:0d:e2:e0:2c:fb:
                    d5:8d:c2:f8:04:fe:05:de:e2:54:0b:af:71:f5:e9:
                    d1:2e:bb:ca:4f:3e:5d:d1:28:5c:29:b8:3c:8b:50:
                    a1:de:6c:59:d4:5e:b5:16:02:dd:b3:e4:59:10:8c:
                    de:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:85:A2:B6:96:26:59:63:D0:03:C2:17:E5:D0:C1:58:21:D5:B0:28
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/8A85A2B696265963D003C217E5D0C15821D5B028.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.24.0/22
                IPv6:
                  2804:7584::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271052

    Signature Algorithm: sha256WithRSAEncryption
         6e:b5:81:83:82:6d:b2:95:99:9f:38:c6:c0:15:f2:89:96:27:
         3d:3b:a0:12:91:cf:d9:1f:74:0a:9b:43:c3:1c:e7:8a:2b:e5:
         15:07:3c:0c:d2:34:46:f5:27:2a:ec:13:a7:6a:7e:7a:95:16:
         e6:0f:3c:52:75:59:79:03:33:2a:32:83:e2:67:64:de:f7:19:
         86:1c:78:35:a5:27:c0:af:26:5b:b7:3a:43:4c:95:a1:69:5b:
         6d:fe:9e:dc:57:2a:50:e2:88:58:e1:ad:50:c7:f9:8c:ff:84:
         13:d8:62:ce:c5:f4:d6:fb:48:2c:3c:38:04:d2:58:49:0b:31:
         8e:3a:cd:dc:eb:74:48:10:1f:14:c0:c9:b5:4f:c7:dc:f7:9f:
         77:e3:42:67:49:5e:e4:7a:0c:5a:b1:1c:15:6c:c5:63:4b:71:
         8c:22:f4:91:dc:ea:41:c4:e6:b7:62:1d:2e:26:aa:d7:7d:4b:
         c4:56:64:79:89:55:c4:f7:5a:a8:5d:f4:67:34:c9:5d:c7:99:
         aa:4b:86:22:bc:97:df:45:2e:b8:85:cb:f9:a4:94:83:33:be:
         2c:78:c7:f5:04:97:8d:2a:9e:37:4a:8c:9e:19:e8:67:6b:44:
         4f:11:5c:13:cd:5b:46:97:95:b6:82:84:b9:20:06:e1:7a:e2:
         f0:1f:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:01:23 2025 by rpki-client