Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A420F687F39896919E233853DB1CB8F2369C068B.cer
File:                     A420F687F39896919E233853DB1CB8F2369C068B.cer (raw, json)
Hash identifier:          NEEZSGJ1FijUqSzW4/ZpPuRAYGhTR3DuYXCA1RQV1g8=
Subject key identifier:   A4:20:F6:87:F3:98:96:91:9E:23:38:53:DB:1C:B8:F2:36:9C:06:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       44D01C147BA0FD9785060621BB7A43248330B541
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/A420F687F39896919E233853DB1CB8F2369C068B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Jul 2023 15:53:04 +0000
Certificate not after:    Thu 04 Jul 2024 15:58:04 +0000
Subordinate resources:    AS: 262403
                          IP: 177.38.96.0/21
                          IP: 187.61.88.0/22
                          IP: 187.85.60.0/22
                          IP: 2804:3e0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d0:1c:14:7b:a0:fd:97:85:06:06:21:bb:7a:43:24:83:30:b5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  6 15:53:04 2023 GMT
            Not After : Jul  4 15:58:04 2024 GMT
        Subject: CN=A420F687F39896919E233853DB1CB8F2369C068B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5e:74:7f:d3:1f:6b:34:df:a5:50:4e:6e:d9:
                    09:42:63:41:74:a0:e9:4c:10:cb:e5:6f:43:2e:b6:
                    ea:70:96:56:0d:47:7f:bf:8c:34:9a:38:8c:ea:76:
                    41:a9:f9:78:3e:ed:a6:28:5b:3b:c5:4c:bc:f7:6e:
                    23:56:f4:71:12:98:8f:78:60:4b:8e:bf:30:85:fe:
                    23:27:f9:3a:92:3f:90:cb:cd:65:bd:53:2f:48:c9:
                    41:ed:c8:aa:e2:b6:c5:04:8d:33:18:d1:45:a4:84:
                    9b:6c:c5:3d:1c:05:13:4c:a0:21:b1:31:bf:5d:7a:
                    86:41:de:a0:5c:99:29:e7:80:24:89:66:ee:5c:e2:
                    55:2a:24:25:ef:c5:8d:75:a3:be:27:80:71:41:8f:
                    aa:25:03:1f:eb:a2:c7:b2:55:76:66:75:81:13:4e:
                    ce:0d:b4:a8:12:63:a7:25:51:85:ef:44:91:c0:32:
                    08:c6:0e:a1:e3:47:c5:cc:6b:99:66:cb:e9:d1:a8:
                    85:a0:cb:95:ed:b8:94:4d:73:3f:54:e0:16:e4:19:
                    bc:7c:69:02:05:d4:25:c9:59:6d:9c:ae:9e:f4:04:
                    0d:87:84:4d:25:2c:3a:3b:02:35:fe:52:74:a6:92:
                    13:27:83:71:8f:7b:ff:62:ee:d7:2f:ea:02:11:61:
                    db:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:20:F6:87:F3:98:96:91:9E:23:38:53:DB:1C:B8:F2:36:9C:06:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/A420F687F39896919E233853DB1CB8F2369C068B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.96.0/21
                  187.61.88.0/22
                  187.85.60.0/22
                IPv6:
                  2804:3e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262403

    Signature Algorithm: sha256WithRSAEncryption
         4a:6a:2c:6f:b0:4c:b9:83:46:4c:cd:e7:56:5c:09:6f:60:04:
         35:88:11:7d:1c:9a:65:51:aa:74:20:5b:0f:bf:d1:63:81:1d:
         32:a8:30:c2:ca:74:ad:1b:24:14:7c:3d:dc:e8:e5:54:c6:8b:
         65:0c:e1:5e:1f:35:f1:d6:70:1f:fc:b7:6b:99:0e:46:78:e6:
         e4:77:2c:cb:a4:56:ee:c8:fe:e0:cb:f5:2f:9b:c9:b3:96:e6:
         d2:43:c4:ec:34:78:3d:9f:2a:0d:d0:05:16:62:e7:4c:12:e9:
         71:da:0e:07:7c:0b:3b:fa:f4:c1:98:59:83:eb:7f:23:0e:dc:
         62:19:30:41:74:54:52:34:b8:ec:f6:8e:cb:73:c6:67:a5:c7:
         be:03:fa:0e:71:c5:37:8d:47:02:3a:67:9c:55:d0:28:ee:3f:
         df:cf:42:b8:7e:b7:fa:67:96:d3:75:25:7a:0a:31:6e:87:c4:
         d9:8f:29:41:87:ba:a5:db:ff:c7:96:a9:83:02:9d:95:e0:a3:
         7c:8b:8a:41:0d:bf:34:a1:5b:34:6b:03:a0:31:b5:bc:0f:b9:
         6d:75:ef:89:cc:25:56:74:cd:f7:5c:03:26:f9:ad:f6:c1:4b:
         4e:d1:87:3b:6e:e8:d1:ed:b8:91:72:e9:d3:f1:c5:0b:b6:9b:
         c5:93:8e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 05:34:54 2025 by rpki-client