Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer
File:                     98C8564D2D23C0B3238882D116CD64384F680CDC.cer (raw, json)
Hash identifier:          uqxlHxmS7gKxMlDtKrSIJSyvxo+cSSsxzKY+6uzCLdE=
Subject key identifier:   98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7AB498FF57C882457F3DF4BC64865B534E169AD9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/98C8564D2D23C0B3238882D116CD64384F680CDC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Jun 2023 12:02:40 +0000
Certificate not after:    Wed 26 Jun 2024 12:07:40 +0000
Subordinate resources:    AS: 267373
                          IP: 45.234.212.0/22
                          IP: 2804:4c7c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b4:98:ff:57:c8:82:45:7f:3d:f4:bc:64:86:5b:53:4e:16:9a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 28 12:02:40 2023 GMT
            Not After : Jun 26 12:07:40 2024 GMT
        Subject: CN=98C8564D2D23C0B3238882D116CD64384F680CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:32:93:8e:30:5f:01:94:92:8c:29:d8:8c:
                    b2:62:f4:d2:8d:65:42:2d:1f:19:32:dc:ff:1d:1f:
                    f3:f0:a3:74:92:61:9c:d0:cd:1d:9f:ba:78:68:dc:
                    4b:0a:7d:53:52:d8:8f:d8:63:fd:06:c6:8c:da:ef:
                    5f:ef:e0:9a:ef:2d:55:38:e4:83:a9:91:9d:11:b3:
                    fb:ad:7f:02:15:31:85:b6:fb:6d:b8:f1:06:58:50:
                    3e:a3:0a:e1:2a:34:36:c5:28:97:9c:ee:9c:cd:5b:
                    e4:5b:4f:eb:c5:ea:e0:91:12:79:11:5d:ad:08:34:
                    ff:c8:0f:3b:38:ca:2d:70:c0:20:1b:f6:68:ef:db:
                    bf:84:72:f8:2c:76:37:b0:9b:65:19:07:4c:bc:25:
                    4b:ce:89:57:a1:7a:aa:8b:22:4f:4a:f9:71:7e:b3:
                    71:5d:13:64:71:d3:a6:1e:25:bc:49:34:3c:91:b0:
                    f0:d8:15:55:17:78:57:6e:e1:33:bb:2b:a8:5f:fc:
                    82:7f:3f:59:6f:04:6c:dc:ec:50:c0:0e:db:0a:c2:
                    15:1b:c4:c0:9f:1c:9e:6b:f8:54:45:d0:eb:72:39:
                    fe:de:50:c9:a9:fe:8e:c0:8d:52:ac:1c:cb:d5:d1:
                    81:69:87:d5:d3:c7:20:37:6d:9e:9e:0d:89:9b:ea:
                    dd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/98C8564D2D23C0B3238882D116CD64384F680CDC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.212.0/22
                IPv6:
                  2804:4c7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267373

    Signature Algorithm: sha256WithRSAEncryption
         a7:4f:62:5a:28:c5:45:f1:ee:fb:78:36:0f:7c:44:d5:54:ad:
         61:23:9f:b3:f7:f5:3e:69:f1:f2:e5:4d:de:86:23:c0:af:f3:
         16:32:3b:a2:bf:40:ae:d3:76:39:8d:70:4b:bf:0d:b3:f1:fc:
         8f:a4:45:71:2e:20:91:d6:ad:b4:1e:d3:1b:ae:dc:50:cc:0b:
         19:2b:62:fe:ea:f7:d9:42:8e:27:ba:2b:ae:dc:e6:c1:78:8d:
         45:28:ce:43:38:e5:fb:86:b5:e6:72:de:a4:09:bb:ea:59:bf:
         58:04:ca:68:ad:00:7d:02:f4:8f:80:fd:82:49:d0:12:cf:57:
         4e:11:99:8f:e2:33:7d:87:bb:45:32:67:b0:0e:15:9a:38:24:
         63:2e:8e:56:41:20:8a:62:05:32:03:dd:2d:bd:1b:00:46:ab:
         ac:ee:34:bc:2d:1c:66:f9:b7:04:86:1d:4c:a4:60:e6:b1:bf:
         e4:80:52:99:5c:10:17:63:c8:cb:74:4c:82:ef:61:24:aa:91:
         eb:df:b2:87:e3:92:12:b0:06:31:ba:21:ea:59:76:f3:27:dd:
         c9:77:0e:6e:8b:8e:9c:69:5b:e3:f1:66:7b:75:79:56:65:18:
         4c:a5:50:8e:d9:6a:42:7f:2f:89:93:5f:33:3a:2c:12:c0:d7:
         73:6c:c6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:14 2025 by rpki-client