Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/976392F7E9BCCE64E8FDF23C8868AB74176008B5.cer
File:                     976392F7E9BCCE64E8FDF23C8868AB74176008B5.cer (raw, json)
Hash identifier:          ZrD4yVv/ivEIe/vi8YwdKlopR0dnqCHjlADOYFTV0+Y=
Subject key identifier:   97:63:92:F7:E9:BC:CE:64:E8:FD:F2:3C:88:68:AB:74:17:60:08:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67B040B7D819F7C7B3F039952EB3D642640CBD52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/1/976392F7E9BCCE64E8FDF23C8868AB74176008B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Dec 2022 13:24:18 +0000
Certificate not after:    Mon 04 Dec 2023 13:29:18 +0000
Subordinate resources:    AS: 262490
                          IP: 177.66.80.0/21
                          IP: 2804:514::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b0:40:b7:d8:19:f7:c7:b3:f0:39:95:2e:b3:d6:42:64:0c:bd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 13:24:18 2022 GMT
            Not After : Dec  4 13:29:18 2023 GMT
        Subject: CN=976392F7E9BCCE64E8FDF23C8868AB74176008B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:22:7b:3c:c1:ae:47:57:cb:62:5b:5c:0c:
                    1d:86:23:8c:d8:e1:ba:3d:57:2c:f2:db:06:70:fe:
                    4f:ea:55:4f:0f:f7:37:1f:a1:79:3b:28:39:9a:2d:
                    a9:51:e7:bc:e5:14:72:66:36:b0:09:d7:85:ad:61:
                    11:4a:3e:fa:cb:ef:03:f6:89:89:84:a8:c5:c9:cc:
                    8a:60:cb:76:66:d9:6c:3e:24:df:7d:08:c1:79:8c:
                    61:27:8e:99:b1:5e:90:3a:4d:f9:33:52:0a:69:6e:
                    1a:38:90:a0:e7:af:49:7a:93:e4:e3:98:c3:c7:1c:
                    6c:66:c3:30:3c:f8:c1:2c:72:02:d4:c1:3e:ec:26:
                    28:d1:2a:2e:ae:11:c4:63:08:06:f0:fc:5f:35:31:
                    d9:7f:21:e7:7d:fa:45:6d:44:6a:ff:90:69:2c:76:
                    4b:3e:e6:63:66:48:5f:7c:c1:b6:9d:8e:49:2d:ac:
                    31:58:61:4f:98:24:29:b9:78:65:bd:5c:51:42:8d:
                    9f:0f:84:6b:dc:30:3f:f6:a0:38:51:ee:37:c4:fa:
                    91:7c:a3:01:93:90:54:6d:cb:5e:f4:85:0f:a0:5d:
                    e0:49:fd:71:3b:64:59:73:55:d8:6c:25:fd:46:28:
                    47:70:16:cb:49:5a:7e:7d:69:74:4a:69:47:ec:60:
                    e7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:63:92:F7:E9:BC:CE:64:E8:FD:F2:3C:88:68:AB:74:17:60:08:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/1/976392F7E9BCCE64E8FDF23C8868AB74176008B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.80.0/21
                IPv6:
                  2804:514::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262490

    Signature Algorithm: sha256WithRSAEncryption
         18:9a:a0:92:1e:7a:d3:10:80:e0:fa:59:9d:02:1a:94:65:0e:
         61:75:28:26:d4:ab:1b:12:77:86:2b:9d:79:ca:75:40:48:49:
         55:b3:2c:06:f5:73:cf:69:a3:0e:c3:ca:fb:cc:cf:36:dd:7e:
         db:2c:4b:50:01:6a:88:80:50:f6:39:02:f2:04:f6:c2:5f:cb:
         3b:a9:4f:1a:1d:5a:0e:fb:31:85:50:e9:de:b8:45:5d:5f:e0:
         73:74:a8:a2:fe:01:e1:30:bf:87:fc:57:ae:58:35:41:58:f5:
         55:59:ea:a5:6d:61:78:86:e7:84:06:7c:b1:98:bc:fc:96:94:
         26:41:8f:55:2b:9b:74:04:7c:74:38:4d:90:35:e4:21:ec:9e:
         78:a2:87:65:2f:c9:18:cf:ac:3b:ea:5f:a0:de:65:23:dc:30:
         fc:71:bb:b7:d5:1d:5a:56:65:1a:a5:e3:ad:ea:10:8c:49:b3:
         00:3b:16:2c:2a:95:cd:62:24:03:28:1e:4f:ab:fa:5e:4b:e0:
         7f:7e:3c:53:b9:fa:a8:2d:50:f3:ac:33:53:6c:ea:d4:5a:52:
         46:b1:88:a5:83:05:6f:f7:ef:83:88:94:29:dd:fd:34:99:08:
         b1:05:ba:ea:1b:fd:49:a8:c7:cd:c6:23:26:de:34:f1:f0:7e:
         28:12:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:29:12 2025 by rpki-client