Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A96937E0FF4D6522E5CB00A5A29694A19B3D505E.cer
File:                     A96937E0FF4D6522E5CB00A5A29694A19B3D505E.cer (raw, json)
Hash identifier:          AkWZNCWjXngLVdbI5f2CP2gJeDiWe2XGWC39/xs5JWo=
Subject key identifier:   A9:69:37:E0:FF:4D:65:22:E5:CB:00:A5:A2:96:94:A1:9B:3D:50:5E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       372F61B223CC7A27BD4B66173F5F4AC9BBDC63E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/A96937E0FF4D6522E5CB00A5A29694A19B3D505E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 30 Apr 2023 14:29:47 +0000
Certificate not after:    Sun 28 Apr 2024 14:34:47 +0000
Subordinate resources:    AS: 265027
                          IP: 170.150.96.0/22
                          IP: 2804:31a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2f:61:b2:23:cc:7a:27:bd:4b:66:17:3f:5f:4a:c9:bb:dc:63:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 30 14:29:47 2023 GMT
            Not After : Apr 28 14:34:47 2024 GMT
        Subject: CN=A96937E0FF4D6522E5CB00A5A29694A19B3D505E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:ab:5a:2c:c7:e4:b5:fd:e5:4f:a5:46:6a:
                    3c:3d:b4:1f:1e:40:5b:7d:79:ad:ec:53:a6:af:61:
                    17:5b:4d:19:36:75:32:16:04:04:07:cb:28:66:35:
                    f6:c2:65:3f:91:5f:23:94:a8:80:3d:fd:03:28:f3:
                    97:ec:0c:a3:34:87:44:5e:60:f4:e7:96:25:e1:63:
                    e3:b2:6e:b4:5b:92:cb:0d:88:69:a4:09:48:33:74:
                    78:6b:d1:65:40:1f:0a:04:58:06:32:e0:c9:ea:0d:
                    3b:0a:99:e4:c1:c4:db:f4:24:12:c2:4e:9d:5e:0e:
                    d5:24:93:c3:c7:49:cf:b9:77:27:4a:88:35:33:10:
                    68:a5:e8:51:3f:38:c4:d1:29:7e:b7:97:36:9d:c6:
                    8c:37:be:58:6b:1a:bf:d8:b5:08:4c:8a:20:da:2a:
                    d3:38:31:8e:75:92:33:15:30:00:ff:11:de:31:89:
                    d0:27:a6:f3:bc:35:3c:73:e6:b8:48:74:05:65:ba:
                    92:e9:c7:7e:6e:19:36:55:67:e6:c4:d1:f1:5a:78:
                    99:ef:9a:61:6c:87:16:be:79:26:39:20:61:6a:5e:
                    fd:cf:c6:86:09:c4:b4:bf:cd:f9:e4:06:3f:7d:4f:
                    f1:77:f1:5f:64:44:8a:a6:42:53:71:80:9c:68:8b:
                    f1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:69:37:E0:FF:4D:65:22:E5:CB:00:A5:A2:96:94:A1:9B:3D:50:5E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/A96937E0FF4D6522E5CB00A5A29694A19B3D505E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.96.0/22
                IPv6:
                  2804:31a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265027

    Signature Algorithm: sha256WithRSAEncryption
         2c:09:db:11:8d:10:b8:67:fb:fc:f3:4d:d9:13:b7:03:d1:3b:
         cf:02:2f:bb:66:d7:55:69:1a:58:aa:67:da:b5:65:cc:19:04:
         b6:3c:17:e7:21:f4:9c:cd:8d:4b:fc:0f:9e:7b:91:5e:15:86:
         22:4b:8d:ae:ff:5a:61:54:84:db:22:89:f8:13:2b:2c:10:d7:
         dd:4b:2e:34:f9:cd:37:49:b1:b6:8d:89:49:5e:d4:23:de:aa:
         05:a0:a8:98:d6:87:c8:c6:8e:08:2b:de:1a:32:e9:ec:45:db:
         fc:ab:84:f2:78:eb:54:21:b8:e6:2a:01:04:d4:b7:2a:43:ee:
         f0:56:3d:2e:ca:23:d0:87:f3:22:de:a1:fc:e6:4f:6b:45:8d:
         49:d3:11:4b:4a:96:41:16:52:c9:bb:a4:e6:ca:86:14:8e:eb:
         4b:58:5f:4e:d3:38:f2:ec:84:2e:16:ca:ab:76:93:aa:f6:02:
         66:20:2e:d5:6c:34:0b:73:99:15:2a:53:32:c4:4f:64:69:87:
         fc:44:a2:38:21:a5:ec:22:b2:56:ab:e7:12:88:96:6c:84:71:
         ca:f8:90:70:49:96:e1:5a:f8:1c:fe:63:31:17:86:a9:1a:2f:
         4e:47:46:fb:32:e1:f2:8b:32:e0:83:15:4e:15:22:4f:80:e2:
         4a:51:5b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:37:53 2025 by rpki-client