Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/951440B772E58C70F6E93B62E0DDAB8426495979.cer
File:                     951440B772E58C70F6E93B62E0DDAB8426495979.cer (raw, json)
Hash identifier:          gW2ONp0GZ3mRY4d2NRjrfeO4uc3lLyLyZQcJtgW7hMA=
Subject key identifier:   95:14:40:B7:72:E5:8C:70:F6:E9:3B:62:E0:DD:AB:84:26:49:59:79
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       339527CE69766D1FB60A24482651CAE2B81E6340
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/951440B772E58C70F6E93B62E0DDAB8426495979.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Apr 2021 20:25:37 +0000
Certificate not after:    Fri 15 Apr 2022 20:30:37 +0000
Subordinate resources:    AS: 52674
                          IP: 131.161.40.0/22
                          IP: 168.227.236.0/22
                          IP: 177.67.88.0/22
                          IP: 2804:1d40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:95:27:ce:69:76:6d:1f:b6:0a:24:48:26:51:ca:e2:b8:1e:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 16 20:25:37 2021 GMT
            Not After : Apr 15 20:30:37 2022 GMT
        Subject: CN=951440B772E58C70F6E93B62E0DDAB8426495979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:76:77:54:de:2c:0c:9f:5c:57:80:00:75:
                    c7:6a:f3:34:00:89:3d:53:7b:82:88:e6:ec:44:3a:
                    96:c4:06:e2:7c:de:92:8f:85:e3:48:e3:93:9b:11:
                    58:87:4d:ff:fb:0b:72:c0:d0:1d:0a:0e:b3:8f:87:
                    4d:66:6e:40:e8:19:ce:cb:5f:06:ff:7d:63:5f:31:
                    7d:50:89:d4:1e:08:29:22:21:4b:fa:ac:bc:ad:3a:
                    5f:01:63:4d:58:9f:52:ec:dc:93:03:0a:59:7e:99:
                    e3:2c:a4:53:11:84:a6:80:2e:8f:3c:e5:7b:4d:97:
                    cd:b9:95:a7:21:13:de:7e:19:c0:29:7b:a3:cc:f7:
                    44:37:44:c5:d5:56:66:60:97:91:81:ce:87:4d:b0:
                    e4:d3:de:88:96:49:ca:5d:ee:da:42:57:bf:94:f8:
                    3d:fd:59:33:ab:40:2c:05:68:77:70:e4:8b:5d:01:
                    a7:4b:47:1a:8b:d7:66:ac:63:7d:fc:f2:03:f1:65:
                    12:0d:0b:ae:16:1e:0a:80:61:85:18:33:52:25:a7:
                    4d:6a:64:07:d4:7e:f7:50:cd:b7:0f:1a:c1:c5:b9:
                    e3:92:43:90:ed:ec:17:3a:03:c3:0d:c7:ed:31:c8:
                    2e:71:e2:85:cd:be:5b:7f:b6:84:a8:bc:ae:7e:61:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:14:40:B7:72:E5:8C:70:F6:E9:3B:62:E0:DD:AB:84:26:49:59:79
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/951440B772E58C70F6E93B62E0DDAB8426495979.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.40.0/22
                  168.227.236.0/22
                  177.67.88.0/22
                IPv6:
                  2804:1d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52674

    Signature Algorithm: sha256WithRSAEncryption
         87:3c:54:05:e5:f4:32:cf:ed:f4:1a:92:dc:13:13:d1:a9:c5:
         f3:c6:d5:ee:09:ab:84:24:cb:36:5b:ec:1c:2c:ef:1e:6f:f2:
         2b:5d:93:f4:e7:d6:12:e1:22:68:03:da:87:8e:b0:52:f2:63:
         d6:20:0e:69:02:76:8b:a7:6c:bc:24:d6:d0:ea:d6:54:9e:bd:
         ab:7a:a5:9b:70:1b:12:d4:26:38:5e:12:bb:1b:2e:ed:e4:65:
         7d:bc:62:1f:ab:83:da:92:24:dc:9c:4c:07:4a:d8:fc:2a:4f:
         b3:a3:63:04:24:5e:5c:8c:be:45:95:41:9c:a6:d4:6c:f5:27:
         02:c7:c8:2a:d9:ab:9f:3a:ba:b5:71:80:f5:44:06:ba:0d:3f:
         fd:26:a9:e4:f2:4f:c8:2a:7b:2e:ee:e3:c6:d4:aa:3e:67:37:
         e9:42:20:32:6a:9a:41:1a:86:84:bc:d9:a0:3e:5d:6d:e0:b8:
         19:ab:b5:fe:6b:98:b0:01:1c:85:11:62:bf:c3:cb:6a:2d:83:
         01:d5:58:91:b9:54:d2:0c:ca:c4:22:ae:90:44:c3:35:61:ef:
         9e:fc:2c:ee:f0:c4:1b:3d:82:14:59:25:60:4d:5b:da:85:7c:
         43:2a:32:89:91:49:d4:39:9a:d8:e6:de:fc:9e:38:27:83:a3:
         37:7a:0f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:38:22 2025 by rpki-client