Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A8B6AF2E01ED17FDC80186C14B8BC4BB110E99AA.cer
File:                     A8B6AF2E01ED17FDC80186C14B8BC4BB110E99AA.cer (raw, json)
Hash identifier:          OTtkL16MH0qtBjzIrd+skEiRZv1f3cjjwsXPaV52bSE=
Subject key identifier:   A8:B6:AF:2E:01:ED:17:FD:C8:01:86:C1:4B:8B:C4:BB:11:0E:99:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       52DE9029CBC33081F04C58A673C70AE7B500FB01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/A8B6AF2E01ED17FDC80186C14B8BC4BB110E99AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Feb 2023 11:50:55 +0000
Certificate not after:    Tue 06 Feb 2024 11:55:55 +0000
Subordinate resources:    AS: 269184
                          IP: 45.181.132.0/22
                          IP: 2804:60b0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:de:90:29:cb:c3:30:81:f0:4c:58:a6:73:c7:0a:e7:b5:00:fb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 11:50:55 2023 GMT
            Not After : Feb  6 11:55:55 2024 GMT
        Subject: CN=A8B6AF2E01ED17FDC80186C14B8BC4BB110E99AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:ca:4d:40:29:45:e3:41:6d:a9:7c:85:5e:
                    ed:80:a1:6b:5c:37:c8:a5:cb:bf:5c:c6:3b:1a:f1:
                    70:b6:37:fa:3d:ab:e2:cf:20:63:56:3e:66:4f:06:
                    3d:94:84:c8:d1:ac:d1:97:82:5f:97:ab:cd:d7:3e:
                    41:fa:63:b4:2a:1e:9c:08:c2:79:98:eb:cf:78:30:
                    f8:b9:00:a0:9f:bb:f8:fd:9c:83:b1:23:b9:85:1e:
                    91:54:39:10:67:07:77:77:4d:91:7e:2a:09:d3:3d:
                    5d:2c:37:f5:63:dc:12:07:0e:50:0e:8b:6a:9c:00:
                    55:28:6a:86:99:70:ff:47:3d:9f:46:01:75:7e:e7:
                    31:91:3f:4a:d8:37:7c:29:e7:bf:11:f4:17:fa:f0:
                    77:30:a3:f1:75:c1:ff:22:3d:9f:d5:7f:92:b8:74:
                    05:38:ba:a0:c6:52:4f:45:75:e7:02:ee:0c:00:c9:
                    c1:ec:83:cf:fd:6c:86:7c:02:e5:3c:8a:4e:17:52:
                    4b:22:db:5a:fe:76:dc:ff:e0:9f:a6:62:a1:27:5b:
                    13:6e:38:bf:36:0d:95:b6:99:0b:1e:98:50:eb:c4:
                    5a:3c:90:3a:82:85:be:dd:c6:65:cd:e4:50:c9:5c:
                    e0:57:87:3c:fc:35:4c:a4:9c:05:08:32:38:a1:51:
                    a9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:B6:AF:2E:01:ED:17:FD:C8:01:86:C1:4B:8B:C4:BB:11:0E:99:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/A8B6AF2E01ED17FDC80186C14B8BC4BB110E99AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.132.0/22
                IPv6:
                  2804:60b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269184

    Signature Algorithm: sha256WithRSAEncryption
         03:9d:4c:bc:d5:2b:52:df:47:9a:71:43:f7:ed:a0:d5:29:f5:
         19:bc:e7:13:4b:b6:a4:ea:37:ae:cd:54:89:54:07:d0:d1:14:
         45:a8:a9:5a:3d:c7:a9:6f:40:ff:d5:53:26:53:00:41:58:ab:
         c0:8d:81:d7:a6:6e:f9:95:4d:72:b4:41:4d:ac:ef:b8:c3:ac:
         4e:77:81:57:93:40:ef:f8:1f:66:50:63:df:55:60:03:f9:2c:
         de:e4:31:b2:47:11:8f:45:10:c8:5e:8d:11:50:69:8f:c8:a9:
         80:ea:f1:13:cc:f7:ed:13:cf:24:c7:3f:f8:07:eb:58:f1:a8:
         88:c0:9a:58:32:a3:ea:a1:97:af:85:fd:a4:5a:d9:da:a8:7a:
         0d:c3:6d:dd:eb:44:5a:2a:73:d9:03:93:05:a7:ce:48:2d:a7:
         a4:c6:8e:d8:ad:47:72:c5:9e:a5:62:45:f8:ac:b1:ac:a2:c0:
         c2:62:fe:96:da:73:da:cd:c2:98:6d:c9:0e:d4:03:39:19:d0:
         47:10:16:d1:8e:00:47:e4:99:68:a7:df:5a:e4:7b:20:b7:f3:
         63:99:5b:59:63:4a:0a:ee:c6:71:16:70:f3:c0:4b:b5:0b:fb:
         5d:bf:35:7d:f5:6c:ce:26:0a:75:ee:42:6c:4b:41:28:81:91:
         02:03:5d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:22:06 2025 by rpki-client