Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9D31CCF221CD1A9FAF95FE44700042A2021D753E.cer
File:                     9D31CCF221CD1A9FAF95FE44700042A2021D753E.cer (raw, json)
Hash identifier:          l3MDfYFqN21rFcVmm3ZSBrPQYWKPc94BcdsTwY3Upfo=
Subject key identifier:   9D:31:CC:F2:21:CD:1A:9F:AF:95:FE:44:70:00:42:A2:02:1D:75:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21A5FFECDC3E55EEF4F082F8A31150E4A0BBC0FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/9D31CCF221CD1A9FAF95FE44700042A2021D753E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Jun 2023 18:11:58 +0000
Certificate not after:    Fri 14 Jun 2024 18:16:58 +0000
Subordinate resources:    AS: 52525
                          IP: 179.106.64.0/21
                          IP: 2804:de8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a5:ff:ec:dc:3e:55:ee:f4:f0:82:f8:a3:11:50:e4:a0:bb:c0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 16 18:11:58 2023 GMT
            Not After : Jun 14 18:16:58 2024 GMT
        Subject: CN=9D31CCF221CD1A9FAF95FE44700042A2021D753E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:42:c6:f3:be:07:f0:74:31:01:de:fc:f3:c4:
                    ef:e8:31:5b:c9:63:9b:d9:65:00:d3:e3:83:85:d5:
                    45:db:d2:b8:d8:da:b2:1c:d5:56:f5:68:90:93:d0:
                    92:23:1b:7c:b8:f6:dd:db:aa:bd:fb:fb:94:9e:78:
                    66:a0:ba:4a:a0:e3:42:f7:28:a2:c9:29:d7:d0:12:
                    5e:64:bc:ac:24:1d:5e:2f:89:3b:d9:36:e9:35:91:
                    50:5b:b3:70:33:6c:3c:ab:cd:53:6f:ac:10:89:b5:
                    73:6b:5f:ce:ec:f6:16:cf:48:3a:fe:4f:72:df:bc:
                    5d:c6:3c:a0:e7:84:33:da:42:16:42:e8:53:d6:d9:
                    69:f4:2b:6b:dc:60:de:1b:e4:dc:c1:5e:4b:3c:18:
                    8f:16:38:4e:00:cc:5d:b8:70:29:e2:cb:8c:c5:0f:
                    19:1c:3e:d4:67:9e:d1:61:08:67:45:22:52:ff:e5:
                    3f:b5:d2:0d:fb:9a:b1:ba:e2:0a:f3:56:75:9e:b4:
                    7a:1a:6c:d7:f4:94:be:eb:8f:86:8c:5f:49:4d:81:
                    80:38:e0:b4:cb:b0:16:9d:d1:5b:0e:b4:8e:e4:bb:
                    1c:1f:f1:4f:a4:a1:ed:09:4e:7b:c6:22:b2:32:08:
                    95:98:fe:3c:13:6c:c3:9f:35:9a:56:e1:a0:59:69:
                    dc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:31:CC:F2:21:CD:1A:9F:AF:95:FE:44:70:00:42:A2:02:1D:75:3E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/9D31CCF221CD1A9FAF95FE44700042A2021D753E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.64.0/21
                IPv6:
                  2804:de8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52525

    Signature Algorithm: sha256WithRSAEncryption
         1f:bc:34:6b:c5:09:04:c7:b9:6d:7a:27:77:75:ac:60:98:46:
         c3:02:16:08:49:91:38:73:de:14:9f:44:79:d3:4c:49:98:4a:
         cd:7b:27:a8:78:a0:0f:6e:26:2a:02:1c:c9:3a:8c:7c:5a:0b:
         1d:6f:9d:e9:eb:60:5c:10:d9:4d:cd:98:8e:c6:57:cd:71:de:
         9b:8c:fb:c5:ce:1d:5c:38:a4:0b:bf:ce:64:4a:10:36:e3:eb:
         f3:fe:52:a2:9f:3d:94:23:66:81:e8:cd:99:95:ce:62:93:b1:
         b8:58:18:ae:e8:1d:d0:13:46:c2:dd:f0:1c:e4:a0:c0:c9:31:
         5b:21:31:22:e3:a2:44:ae:55:07:2a:11:aa:20:8e:17:f2:2b:
         82:89:f8:7b:29:7f:06:75:e8:bc:d1:ed:57:42:3e:cc:17:4e:
         fb:20:24:58:4d:e4:e5:1e:a1:88:5e:10:ba:93:4e:85:db:fd:
         e3:1d:2d:65:15:7d:37:a2:fc:95:25:da:cb:94:36:83:d5:27:
         64:15:7f:02:c1:36:9a:bb:1b:c4:66:60:5c:bb:fa:34:65:66:
         93:09:e7:92:f4:b9:a2:87:4b:bb:49:55:a8:15:cf:00:06:f2:
         c5:e6:f0:18:6d:ce:1e:46:d1:26:5e:97:16:f6:78:bc:45:ab:
         43:8e:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 01:27:21 2025 by rpki-client