Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/94CFFC965D3C30F59A8179A39E2D7DFE7F3F87D2.cer
File:                     94CFFC965D3C30F59A8179A39E2D7DFE7F3F87D2.cer (raw, json)
Hash identifier:          ekdZt6H2HnOQ0chWIggSB13BBetDkEKbONME3Fajll0=
Subject key identifier:   94:CF:FC:96:5D:3C:30:F5:9A:81:79:A3:9E:2D:7D:FE:7F:3F:87:D2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4126455D7414D398DCC28F98707211BDADE4E757
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/94CFFC965D3C30F59A8179A39E2D7DFE7F3F87D2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Dec 2023 16:25:31 +0000
Certificate not after:    Fri 29 Nov 2024 16:30:31 +0000
Subordinate resources:    AS: 268692
                          IP: 45.165.208.0/22
                          IP: 2804:5524::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:26:45:5d:74:14:d3:98:dc:c2:8f:98:70:72:11:bd:ad:e4:e7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  1 16:25:31 2023 GMT
            Not After : Nov 29 16:30:31 2024 GMT
        Subject: CN=94CFFC965D3C30F59A8179A39E2D7DFE7F3F87D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7a:06:58:04:e8:6f:8a:18:99:1a:5c:e6:b7:
                    42:52:65:94:39:ce:2d:1b:11:2c:f9:36:d4:79:35:
                    2c:2b:0b:b2:f4:17:f9:7c:36:88:07:f1:58:39:a3:
                    87:86:ac:db:45:30:cf:ff:b3:d2:d2:77:26:33:b5:
                    2a:fc:87:34:60:9a:66:be:c3:41:7f:56:0e:78:e9:
                    1b:f3:9a:6d:fa:83:db:84:db:77:3c:48:c4:3d:54:
                    e1:f4:52:f3:2f:4c:4e:37:cd:81:ec:36:7d:87:74:
                    de:dd:44:cf:07:44:30:12:96:be:15:3d:77:24:ef:
                    4f:74:b3:b8:93:17:9f:42:4e:4a:65:17:f2:d3:3a:
                    ed:08:7b:2b:e2:1c:d0:01:04:b0:23:88:60:57:f7:
                    80:f8:09:7b:e7:0a:eb:57:fa:e6:11:ad:73:e5:32:
                    20:f6:d5:99:7a:f6:9a:1b:a8:29:d1:f2:4e:de:8c:
                    af:dc:13:51:22:b7:41:6a:2e:1f:f9:99:c7:a8:6e:
                    31:7b:6a:06:0e:30:64:af:3f:1e:55:a0:e6:5b:01:
                    0e:7c:8b:d3:7a:7c:35:17:ff:9f:cc:25:13:e3:69:
                    31:c4:26:f9:02:6b:fb:14:86:cd:f0:55:36:87:37:
                    77:75:c6:d5:e7:c5:13:b9:d3:1a:12:17:2e:68:a8:
                    86:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:CF:FC:96:5D:3C:30:F5:9A:81:79:A3:9E:2D:7D:FE:7F:3F:87:D2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/94CFFC965D3C30F59A8179A39E2D7DFE7F3F87D2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.208.0/22
                IPv6:
                  2804:5524::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268692

    Signature Algorithm: sha256WithRSAEncryption
         9d:65:13:48:66:ae:cc:1b:73:06:07:c2:aa:db:64:5d:8c:79:
         f1:0a:b3:f8:ab:8c:f3:84:2b:d2:bf:d7:8e:25:65:01:f5:a6:
         3c:60:96:90:51:c2:9f:d3:99:f3:df:fc:66:9f:ad:42:06:1b:
         bd:c3:60:67:f5:2c:76:7b:7e:69:b3:7a:4d:f3:a6:b9:da:75:
         6a:fe:89:70:8e:60:c0:1f:3e:e0:1b:a3:dd:df:2e:c1:66:37:
         cd:0e:5b:95:00:74:8e:e4:53:3e:79:6f:e0:f6:14:ea:66:85:
         73:4e:0b:8e:36:7e:c1:e9:34:12:4a:58:cb:86:7f:22:93:d3:
         d2:21:00:4b:32:95:66:bc:50:eb:33:18:3a:22:b8:bb:54:ce:
         4b:e0:8f:44:23:59:1b:9a:ed:c2:32:f2:b2:d6:8f:2f:5b:a4:
         ec:7e:3f:b5:5b:37:3a:44:ed:ba:60:ea:23:db:4f:b1:74:02:
         f0:ce:f3:86:7e:a7:08:e4:53:c3:7f:cf:8d:fd:bd:06:e2:78:
         bc:e5:96:66:7e:cb:e6:db:65:38:ea:ee:99:3f:ea:29:65:c2:
         75:ab:e2:a6:7f:71:71:77:fa:4b:f6:ac:59:19:16:5d:f6:78:
         fd:1a:88:df:63:0e:16:0a:6f:05:ab:82:89:29:87:c6:60:f0:
         08:ef:da:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 01:33:06 2025 by rpki-client