Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8B2822B2B17B70C5AB386F6ABBCA9EB01187718D.cer
File:                     8B2822B2B17B70C5AB386F6ABBCA9EB01187718D.cer (raw, json)
Hash identifier:          xPRFqwa5H6Frt/Nq2Md943XTJFsGxjkxQtQu+Ch7N8I=
Subject key identifier:   8B:28:22:B2:B1:7B:70:C5:AB:38:6F:6A:BB:CA:9E:B0:11:87:71:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       33A4A706DC8989C0E18D4F1F9CB732EC427E5BFB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/8B2822B2B17B70C5AB386F6ABBCA9EB01187718D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Nov 2022 18:31:13 +0000
Certificate not after:    Tue 28 Nov 2023 18:36:13 +0000
Subordinate resources:    AS: 262343
                          IP: 143.255.124.0/22
                          IP: 177.126.128.0/20
                          IP: 2804:80c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a4:a7:06:dc:89:89:c0:e1:8d:4f:1f:9c:b7:32:ec:42:7e:5b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 18:31:13 2022 GMT
            Not After : Nov 28 18:36:13 2023 GMT
        Subject: CN=8B2822B2B17B70C5AB386F6ABBCA9EB01187718D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:b9:38:c8:40:23:3f:18:cf:71:b3:f2:62:
                    f9:37:95:5b:6d:8c:e7:ad:76:85:a4:fb:47:86:06:
                    b3:1a:4b:ea:4e:da:91:e0:9c:9f:15:9e:93:87:52:
                    fd:4e:40:1d:03:c7:97:58:43:0c:05:d3:c8:ad:fa:
                    ce:c5:40:0e:62:25:c1:33:66:e3:b1:16:2b:34:db:
                    30:3a:f8:1c:70:ea:22:87:fe:e3:db:c7:01:e3:c5:
                    cc:b4:fd:99:26:c1:ef:93:95:df:56:4d:01:c8:77:
                    76:6a:34:55:51:5f:47:ec:53:93:fb:9a:10:a8:69:
                    36:1a:46:f9:20:7f:93:a7:2b:7f:cc:67:2d:7f:ae:
                    8d:16:1c:9b:ee:c5:e4:a3:ad:eb:5f:ca:a2:f4:c3:
                    3c:9a:ec:14:6c:7a:e6:80:18:59:c6:97:e4:00:38:
                    02:2a:f6:d0:07:af:04:5d:ff:7a:5a:30:66:d5:16:
                    ec:40:ab:c8:6d:7e:ca:27:11:06:e7:da:c1:e4:4c:
                    f2:c9:23:05:93:cc:b2:9d:3f:42:07:76:59:68:ae:
                    ef:24:03:ee:97:83:09:89:d5:bf:1b:8f:c8:15:ca:
                    73:47:e9:39:4a:a4:6f:fa:6a:38:c0:c8:ee:2c:68:
                    19:1c:a5:37:01:3d:59:1c:4b:29:e8:53:a6:5d:d6:
                    f5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:28:22:B2:B1:7B:70:C5:AB:38:6F:6A:BB:CA:9E:B0:11:87:71:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/8B2822B2B17B70C5AB386F6ABBCA9EB01187718D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.124.0/22
                  177.126.128.0/20
                IPv6:
                  2804:80c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262343

    Signature Algorithm: sha256WithRSAEncryption
         7c:47:33:ff:a0:7a:5d:83:89:a2:c1:ae:53:e5:c5:0f:8e:2d:
         8c:f2:c9:a7:b0:2d:41:3c:08:f9:fc:48:c2:54:81:a1:50:3c:
         7d:dc:cb:be:57:24:5e:2a:a5:31:9a:f2:1f:0b:49:09:1e:75:
         b6:0a:5c:14:72:5f:a3:2b:64:62:28:13:05:03:bf:d9:12:c3:
         a2:20:18:17:f5:5a:02:27:e2:76:4b:84:c9:10:7b:bd:c9:5c:
         e0:28:98:50:33:b0:4c:17:ea:ed:34:08:47:de:6e:48:b5:99:
         31:39:a2:5b:5e:64:5e:17:ca:95:16:29:2a:97:0d:b0:d2:69:
         94:07:2f:9e:18:d5:3a:7a:4f:e9:73:ce:e9:e5:f4:a6:8b:6c:
         48:97:f2:72:d7:1b:79:d9:ae:35:f2:e2:8f:80:f2:17:00:f2:
         2b:02:04:b1:42:5c:0e:f6:e6:94:e0:df:f5:a9:5d:24:ee:91:
         ae:b6:5c:61:73:94:36:44:03:b4:1d:35:54:06:df:4a:22:cc:
         cc:29:b5:1c:e8:6b:bb:61:b2:b3:88:e4:8c:d4:91:ee:be:ed:
         ce:13:a4:a6:b4:29:47:15:a1:3d:82:2c:79:dd:94:0b:cd:ea:
         3f:33:ee:b0:78:ec:d9:3a:3f:1c:05:3c:11:ba:28:14:4f:b1:
         7b:5f:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:27:19 2025 by rpki-client