Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/952319F24FD7A5947138D263C4FA844772549F92.cer
File:                     952319F24FD7A5947138D263C4FA844772549F92.cer (raw, json)
Hash identifier:          VeWI2Vca030ZxaEwb9TmyY3tykefLUYqgw724LPBz/s=
Subject key identifier:   95:23:19:F2:4F:D7:A5:94:71:38:D2:63:C4:FA:84:47:72:54:9F:92
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1BD023A5A7DF384BC4DDB5E065904AE42FA3F0E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/952319F24FD7A5947138D263C4FA844772549F92.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 00:58:29 +0000
Certificate not after:    Tue 28 May 2024 01:03:29 +0000
Subordinate resources:    AS: 263327
                          AS: 268329
                          IP: 45.238.84.0/22
                          IP: 191.7.192.0/19
                          IP: 2804:145c::/32
                          IP: 2804:4f78::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d0:23:a5:a7:df:38:4b:c4:dd:b5:e0:65:90:4a:e4:2f:a3:f0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 00:58:29 2023 GMT
            Not After : May 28 01:03:29 2024 GMT
        Subject: CN=952319F24FD7A5947138D263C4FA844772549F92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:c7:d5:f8:25:47:1c:8c:6c:ef:47:f6:9d:
                    3a:28:c6:03:f9:c5:08:8f:75:b2:3e:a0:6a:42:0d:
                    09:93:8e:2c:64:6c:e1:9b:9e:79:51:c8:7d:f0:c6:
                    b2:ca:31:3b:f5:73:6e:c7:91:dd:b0:39:38:25:d9:
                    82:b0:b9:4e:cf:db:0a:a3:7c:16:44:1a:dd:4a:1d:
                    fd:0a:8c:8c:6b:70:cf:2a:3f:0c:30:d9:79:db:3d:
                    e2:8c:97:09:9f:f8:59:41:07:9d:21:f2:ff:8f:83:
                    16:9d:56:72:5d:a3:76:07:7d:3f:5b:69:ef:83:27:
                    59:18:e4:ea:6f:cc:69:00:05:2e:3a:d4:11:8d:4d:
                    6f:45:3d:ae:e8:81:11:95:2a:22:09:9a:34:55:e4:
                    6a:8b:4e:9f:36:1f:d6:ec:ee:0d:ab:4d:e0:28:10:
                    ed:bc:d7:66:38:63:e2:fb:2d:70:ec:64:71:e4:a9:
                    1f:d6:93:8e:9e:26:de:0d:b5:38:7a:fb:7f:61:01:
                    29:ca:9d:e4:e9:1c:4c:f8:7e:fc:bb:20:58:f0:77:
                    dc:ea:dc:2a:94:a3:de:04:2f:6c:f8:4d:77:6c:dc:
                    6d:21:4f:f7:cc:fa:38:29:44:47:f8:69:99:8d:7f:
                    e0:36:9a:da:a4:bb:20:23:98:9b:cf:4e:79:4d:6c:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:23:19:F2:4F:D7:A5:94:71:38:D2:63:C4:FA:84:47:72:54:9F:92
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/952319F24FD7A5947138D263C4FA844772549F92.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.84.0/22
                  191.7.192.0/19
                IPv6:
                  2804:145c::/32
                  2804:4f78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263327
                  268329

    Signature Algorithm: sha256WithRSAEncryption
         74:42:89:59:08:2b:04:a3:c2:17:25:2f:15:ac:3e:db:eb:a9:
         21:ab:cf:29:4d:e7:a6:60:9f:04:48:13:8e:71:a4:22:e9:3c:
         b8:be:15:29:65:0f:eb:0b:ab:d9:6e:93:85:d7:02:8a:c5:51:
         d8:67:3f:88:5d:02:e6:3e:4c:3f:73:c6:7b:93:25:0e:ca:a9:
         40:b3:06:c7:40:81:9c:49:fc:a2:a5:69:8e:44:f8:b3:d2:eb:
         68:a9:9f:27:db:80:7f:60:af:c7:a4:f3:1f:3e:96:55:8d:bd:
         47:0f:12:bc:d1:16:5e:f4:52:59:89:59:09:b2:5d:59:23:90:
         09:2b:6e:a3:cb:ff:fa:21:80:4e:d2:c5:f1:6b:2e:c1:0a:1a:
         eb:3c:1f:05:46:f5:75:36:df:d8:56:60:12:e5:ac:63:34:2a:
         63:62:e1:2b:cf:4a:91:f3:9b:6c:90:03:ab:e0:b8:91:9b:5a:
         48:9a:0e:ca:f8:c8:cd:85:61:40:fd:6f:bb:89:ce:39:e0:ec:
         a2:dc:32:78:dd:25:09:90:2b:26:cd:75:e9:35:c6:56:66:38:
         c2:81:06:9c:d3:ac:f3:18:b7:63:7d:cf:37:b0:e4:46:4a:24:
         09:ed:9b:81:d0:34:3d:cd:9c:75:62:40:d4:35:0e:f4:be:dc:
         9b:48:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:50:08 2025 by rpki-client