Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A23F9D523721BD066E73994B585CD51B446971F4.cer
File:                     A23F9D523721BD066E73994B585CD51B446971F4.cer (raw, json)
Hash identifier:          fAAivqQDzWxc6GkDAZnxP8wS4JdLTtmiKD7StwxTTrw=
Subject key identifier:   A2:3F:9D:52:37:21:BD:06:6E:73:99:4B:58:5C:D5:1B:44:69:71:F4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       54721978ECF27DDC0188B7C16BE096BA493988E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/A23F9D523721BD066E73994B585CD51B446971F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 May 2023 18:08:51 +0000
Certificate not after:    Tue 30 Apr 2024 18:13:51 +0000
Subordinate resources:    AS: 268640
                          IP: 45.164.196.0/22
                          IP: 2804:5448::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:72:19:78:ec:f2:7d:dc:01:88:b7:c1:6b:e0:96:ba:49:39:88:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  2 18:08:51 2023 GMT
            Not After : Apr 30 18:13:51 2024 GMT
        Subject: CN=A23F9D523721BD066E73994B585CD51B446971F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:b6:f9:eb:ea:b3:67:77:be:24:1b:b6:38:
                    2d:ae:5f:1a:6d:b9:75:1c:d6:c1:17:c7:69:f9:22:
                    8b:e7:de:74:f9:f1:00:06:49:ff:41:c9:cb:85:c7:
                    0b:25:e5:da:53:53:19:dc:83:f9:9f:aa:18:ad:cc:
                    2d:6a:e6:71:6f:2f:00:f8:36:5a:00:f8:8a:2b:b4:
                    6b:9b:2e:20:a7:9a:75:40:39:82:78:ef:59:82:87:
                    f9:5d:eb:ca:6d:a8:ea:1b:3b:d1:9b:c2:28:bd:d6:
                    d0:7c:7f:3c:6e:58:96:aa:06:59:a8:79:4c:e9:b0:
                    3c:a2:1b:80:69:3f:82:37:e8:b5:24:72:dc:22:ae:
                    ec:b8:a5:ad:30:64:8d:f2:95:be:9a:57:78:d1:20:
                    5c:18:0d:5a:52:49:00:71:55:65:21:65:9a:2d:2e:
                    dd:25:6c:26:53:25:99:00:41:97:6f:62:01:f3:c7:
                    57:d6:85:37:7d:33:88:43:ea:6c:49:5f:58:02:6d:
                    40:22:68:8f:60:80:bf:23:50:a7:4c:1e:3d:68:da:
                    fd:d7:3d:28:45:0b:48:76:b0:3d:a2:b6:6a:79:2d:
                    be:e9:01:e0:94:8d:07:cd:03:96:18:a9:1b:73:d4:
                    10:6d:a9:0c:26:99:18:70:67:6b:42:d2:03:ba:30:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:3F:9D:52:37:21:BD:06:6E:73:99:4B:58:5C:D5:1B:44:69:71:F4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/A23F9D523721BD066E73994B585CD51B446971F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.196.0/22
                IPv6:
                  2804:5448::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268640

    Signature Algorithm: sha256WithRSAEncryption
         4a:32:fd:39:bf:69:6c:d7:d3:c6:68:07:91:fc:f0:c1:98:15:
         de:1f:ca:99:78:d7:f9:22:31:d3:2f:2f:c4:8f:d9:9a:6a:c3:
         16:8b:8a:8f:62:dc:b1:a2:95:98:08:13:c4:c7:c9:d5:ad:df:
         7d:ab:35:a5:2e:fb:c3:ff:15:4d:76:da:e0:88:4e:d4:9b:34:
         25:2b:11:55:f8:ce:16:26:73:2a:ec:b4:2b:f9:6b:e6:20:3b:
         b5:bc:ec:2d:c7:51:c0:50:50:2d:75:ed:da:96:3d:cd:aa:73:
         01:cd:2c:85:3e:92:52:55:da:0e:6e:a8:40:b9:c3:d3:ee:9a:
         81:b2:83:79:3a:bd:0e:97:11:7a:ee:c8:d6:79:42:fb:b7:af:
         2b:07:da:00:42:88:62:e4:28:90:ca:36:14:84:2d:74:a5:1d:
         05:65:4a:67:0f:d0:ce:b2:ad:e6:34:ee:b9:1a:43:a9:47:99:
         67:6d:e7:71:5b:af:7c:e0:be:ff:35:77:18:af:16:d0:43:9d:
         07:8c:9c:c8:a4:44:f3:c5:4d:50:86:88:a6:b8:da:af:7f:a5:
         78:27:89:9c:c3:e2:96:40:8f:be:44:9d:ba:50:bb:e5:83:50:
         8f:cc:9f:a3:cc:f8:e2:02:7f:51:fb:07:32:d6:a7:7f:45:6f:
         7c:e9:6c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:09:23 2025 by rpki-client