Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/901BBA3B3E09877AEF08D8CED56482AEB7662F8A.cer
File:                     901BBA3B3E09877AEF08D8CED56482AEB7662F8A.cer (raw, json)
Hash identifier:          HxPGJEy+SlHYrHdo2M5H/zv703TTuHJtu4IrG374aGs=
Subject key identifier:   90:1B:BA:3B:3E:09:87:7A:EF:08:D8:CE:D5:64:82:AE:B7:66:2F:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       649A3373809165E1C4473BF46F83281C77CB3550
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/901BBA3B3E09877AEF08D8CED56482AEB7662F8A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Jun 2023 07:01:20 +0000
Certificate not after:    Fri 07 Jun 2024 07:06:20 +0000
Subordinate resources:    AS: 262543
                          IP: 177.72.80.0/21
                          IP: 2804:37a4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9a:33:73:80:91:65:e1:c4:47:3b:f4:6f:83:28:1c:77:cb:35:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  9 07:01:20 2023 GMT
            Not After : Jun  7 07:06:20 2024 GMT
        Subject: CN=901BBA3B3E09877AEF08D8CED56482AEB7662F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1d:f6:ed:f9:82:fb:1b:0d:b8:d8:ec:5b:d1:
                    39:ea:a7:c3:65:4c:6a:d4:9f:38:35:8d:be:dc:3a:
                    6e:9b:cd:b2:78:2b:8d:d1:77:9e:b5:87:4a:81:63:
                    29:5c:af:73:41:59:7b:5e:85:0c:9d:58:8b:1f:2a:
                    11:1f:8b:36:dc:c3:cd:4c:af:cc:e8:35:39:0c:07:
                    5d:6c:ad:68:0a:c0:db:22:ce:f1:a5:c0:c0:75:0a:
                    94:d3:48:7c:6a:42:78:38:c7:5d:35:3a:7b:e1:1f:
                    b1:b3:07:8d:04:e1:52:8b:de:cf:5d:1e:3f:1e:8e:
                    65:b2:67:ba:70:77:e5:bb:99:b9:7e:8f:c9:c3:66:
                    1b:dd:a1:04:fb:e5:db:ce:df:46:88:fa:a4:52:bf:
                    1b:bb:d4:0f:d0:47:7a:bf:b2:26:a3:5f:a9:02:e6:
                    85:b1:29:be:54:9b:ad:11:1e:a7:93:a8:3f:8b:73:
                    b6:6a:82:f6:be:a7:91:f2:46:b3:14:9f:6a:6f:16:
                    fa:94:e2:a3:6b:9e:2c:4b:0d:a2:b4:dd:24:ef:e2:
                    ce:fa:1d:51:56:0a:c7:16:d8:0a:36:98:72:31:d8:
                    14:90:ef:ed:9d:7c:ec:59:e1:6c:5e:2b:47:bb:74:
                    0b:76:01:34:37:03:3a:45:78:93:2d:8e:b2:97:3b:
                    b6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:1B:BA:3B:3E:09:87:7A:EF:08:D8:CE:D5:64:82:AE:B7:66:2F:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/901BBA3B3E09877AEF08D8CED56482AEB7662F8A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.80.0/21
                IPv6:
                  2804:37a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262543

    Signature Algorithm: sha256WithRSAEncryption
         2f:bd:8c:a6:d0:77:b0:fe:2f:1b:b7:1b:18:60:04:fc:a1:58:
         f0:45:2a:e3:95:b9:da:f1:9e:2c:aa:05:01:bd:ef:17:1a:a2:
         6c:aa:5c:c2:54:9f:8c:ba:65:4a:77:f3:78:71:7d:26:89:f1:
         af:1d:b5:8f:db:39:18:cc:28:96:9f:fa:1b:83:f6:6a:1f:a4:
         99:49:78:3d:29:33:55:97:5f:b8:f1:ac:90:0a:eb:0d:a9:88:
         61:42:91:f1:94:3b:79:6b:8b:cc:a2:20:49:fb:19:e7:7a:7e:
         c3:a3:f1:92:21:3b:0e:8c:cb:dc:e7:3d:6a:31:2f:16:a2:1f:
         06:bd:29:4a:19:1e:3e:72:6c:cc:68:3a:95:a3:94:c9:b5:ab:
         5c:46:7a:81:77:db:c3:e0:af:70:06:25:3d:e2:35:06:f0:01:
         45:a5:15:0f:bc:da:9e:cb:0d:0e:9b:57:c4:aa:a4:94:52:16:
         8e:70:d1:f0:6d:a5:34:50:e1:23:0c:4a:5c:fa:c5:c9:f4:cd:
         8f:fb:0c:2a:70:2b:e0:97:08:fb:e4:73:83:29:7c:1d:e0:e7:
         af:eb:d4:98:09:6f:e3:c3:18:2c:0f:55:64:68:ed:56:2b:d1:
         2c:2a:13:b3:8d:de:97:8f:ef:3f:45:5c:b2:7e:46:d6:c6:b6:
         7b:8a:80:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:01:20 2025 by rpki-client